last executing test programs: 2m55.93874056s ago: executing program 2 (id=9622): r0 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r0, &(0x7f0000000280)=[{}, {0x4, 0x316, 0x1800}], 0x2) semop(r0, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) 2m55.642652358s ago: executing program 2 (id=9627): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000) close(r0) 2m55.450651491s ago: executing program 2 (id=9632): unshare(0x6020400) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x6a0400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, 0x0) 2m54.046595531s ago: executing program 2 (id=9647): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000440)='./file0\x00', 0x9) 2m52.99139357s ago: executing program 2 (id=9658): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xd, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xfffffffe, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0xa, 0x7, 0x103, 0x0, 0x200005, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x9, 0xfffffffd, 0x5, 0x6, 0x8, 0x4, 0x1, 0x1000], [0x10000007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x1003, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0x4, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x9, 0x5, 0x0, 0xff, 0x1005, 0x7ff, 0x4f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffff7, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x101, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x595, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x7fff, 0x5, 0x5, 0x0, 0x1ef, 0x9, 0x8, 0x86, 0x3, 0x10000009, 0x3e6, 0x8, 0x9, 0x9, 0x60002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x6, 0x2, 0x200, 0x80, 0x3, 0x4, 0x8, 0x0, 0xa2, 0x7, 0x53cf697b, 0x8, 0x4, 0x54fe12da, 0xbb, 0x5, 0x101, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0xe, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x5, 0xbb31, 0x3, 0xd6f, 0x5, 0x938, 0x9, 0x100006, 0x55bf, 0x3, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x5, 0x1, 0xfffffff5, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x103, 0x3, 0xffff, 0xffffffff, 0x8, 0x80003, 0x6, 0xa, 0x2, 0x4, 0x6, 0x1, 0xc4d9, 0x3, 0x8, 0x2b91, 0xa1f, 0x8, 0x94b, 0x1, 0x7fffffff, 0x0, 0x1, 0x5, 0xb1c, 0x1, 0x1fc, 0xfff, 0xffffffff]}, 0x45c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2m52.459985256s ago: executing program 2 (id=9667): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x3, 0x0, 0x0, 0x8}) 2m52.102184367s ago: executing program 32 (id=9667): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000040)={0x1, 0xffffffff, 0x3, 0x0, 0x0, 0x8}) 42.001894804s ago: executing program 1 (id=10945): set_mempolicy(0x2, 0x0, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 41.903781747s ago: executing program 1 (id=10947): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) 41.780257912s ago: executing program 1 (id=10950): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mprotect(&(0x7f000029c000/0x4000)=nil, 0x4000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 41.642723851s ago: executing program 1 (id=10951): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 40.74889222s ago: executing program 1 (id=10965): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 40.100728376s ago: executing program 1 (id=10975): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = io_uring_setup(0x208c, &(0x7f0000000380)={0x0, 0x6d90, 0x40, 0x0, 0x29e}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 39.616198067s ago: executing program 33 (id=10975): r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = io_uring_setup(0x208c, &(0x7f0000000380)={0x0, 0x6d90, 0x40, 0x0, 0x29e}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 23.002188575s ago: executing program 3 (id=11102): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)='(', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)='0', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001000)="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", 0x2fe}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="972adec5b073159505dadf6e0c5a317a257e3c3f9104ed149ff8e2f86f", 0x1d}], 0x1}}], 0x4, 0xc0) 22.628705419s ago: executing program 3 (id=11106): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 22.287123597s ago: executing program 3 (id=11110): r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f00000000c0)=0x8) listen(r0, 0x9) 21.916340609s ago: executing program 3 (id=11113): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 20.795825348s ago: executing program 3 (id=11123): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xfad9, 0x10000, 0x3}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x249}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 19.128608642s ago: executing program 3 (id=11130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 18.642518857s ago: executing program 34 (id=11130): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 7.846812916s ago: executing program 6 (id=11195): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000380)="fb", 0x1}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB='X'], 0x58}, 0x8080) 7.535963861s ago: executing program 6 (id=11197): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 5.332797115s ago: executing program 6 (id=11203): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) 5.124056681s ago: executing program 4 (id=11205): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x4e24, 0x0, 0x2}, {0x0, 0xfffffffffffffffb, 0x6, 0xfffffffffffffffe, 0x4000000000000000, 0x80000000000}, {0xfffffffffffffffc, 0x0, 0x0, 0x7}, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x2, 0x3c}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffc, 0x1002}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 4.844636326s ago: executing program 4 (id=11207): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000500)='\r\n', 0x2, 0x6d91fb6126dcc988, 0x0, 0x0) syz_emit_ethernet(0x51, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "ecae98", 0x1b, 0x21, 0x1, @mcast1, @mcast1, {[@fragment={0xe, 0x0, 0x6d, 0x1, 0x0, 0x8, 0x65}], {{0x4e24, 0x4e20, 0x4, 0x1, 0x3, 0x0, 0x0, 0x6, 0x7, "87a81c", 0x9, "f6945c"}, "5bbe61"}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) 4.684479836s ago: executing program 4 (id=11210): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff07000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900"], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.649933654s ago: executing program 7 (id=11131): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="05010000b1f20b401e0903003bd70102030109024d000100000000090400"], 0x0) 4.584632192s ago: executing program 6 (id=11211): writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\t'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001c40)={0x24, 0x0, 0x0, &(0x7f0000001bc0)={0x0, 0x22, 0x1, {[@local]}}, 0x0}, 0x0) 4.427858153s ago: executing program 4 (id=11213): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="40011a00000084fb4099a08f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 2.684611771s ago: executing program 0 (id=11224): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0xffff0018) r1 = syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2df0, 0x0, 0x0, 0x0, 0x0) 2.473410935s ago: executing program 0 (id=11226): pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="bf", 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x63) r3 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r1, 0xe2) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r0, 0xffffffff) 2.331469532s ago: executing program 0 (id=11227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, &(0x7f0000000180)={{@host, 0xfffffffd}, 0xfffffbfffffffffc, 0x800000000000002, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) 2.217618344s ago: executing program 4 (id=11229): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x133) lseek(r0, 0x8, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 2.113714302s ago: executing program 5 (id=11230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x1e, 0x805, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r1, &(0x7f0000000000)=@id, 0x10) close(r1) 2.01348857s ago: executing program 5 (id=11231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) 2.01253546s ago: executing program 0 (id=11232): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.000371232s ago: executing program 4 (id=11233): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) write$char_usb(r1, &(0x7f0000000100)="3df67f1318", 0x5) syz_usb_disconnect(r0) 1.812169423s ago: executing program 5 (id=11234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x400, 0x0, 0x2d2}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4e, 0x2004, @fd_index=0x6, 0xfffffffffffffff9, 0x0, 0x0, 0x8, 0x0, {0x3}}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.784429412s ago: executing program 0 (id=11235): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}, 0x4040880) recvmsg$can_raw(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/170, 0xaa}], 0x1}, 0x10041) 1.636623871s ago: executing program 0 (id=11236): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) 1.632565556s ago: executing program 5 (id=11237): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,u']) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc82b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.397941816s ago: executing program 6 (id=11238): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.377673254s ago: executing program 7 (id=11239): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/74, 0x49) 1.376359748s ago: executing program 5 (id=11240): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x53de, 0x400, 0x2, 0xbfdffffb}, &(0x7f0000000480)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x40}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 776.213635ms ago: executing program 5 (id=11241): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r2, 0x4, 0x30}, &(0x7f00000002c0)=0xc) 0s ago: executing program 6 (id=11242): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x56, 0xfffe, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x8, 0x0, 0xfffc}}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 861.783357][ T5999] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 861.830168][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.911289][T12912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.925665][T12912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.947592][T12912] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 861.977494][T12912] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 861.992388][T12912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.036553][T12912] usb 5-1: config 0 descriptor?? [ 862.045749][T28684] syzkaller1: entered promiscuous mode [ 862.061661][ T5999] usb 1-1: usb_control_msg returned -32 [ 862.067337][T28684] syzkaller1: entered allmulticast mode [ 862.096238][ T5999] usbtmc 1-1:16.0: can't read capabilities [ 862.494034][T12912] plantronics 0003:047F:FFFF.0085: reserved main item tag 0xe [ 862.511985][T12912] plantronics 0003:047F:FFFF.0085: unknown main item tag 0x0 [ 862.528366][T12912] plantronics 0003:047F:FFFF.0085: No inputs registered, leaving [ 862.552477][T12912] plantronics 0003:047F:FFFF.0085: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 862.634361][T12912] usb 1-1: USB disconnect, device number 97 [ 862.729908][ T10] usb 5-1: USB disconnect, device number 83 [ 862.793798][T28698] fido_id[28698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 863.803230][T28734] loop2: detected capacity change from 0 to 7 [ 863.814824][T28734] Dev loop2: unable to read RDB block 7 [ 863.826249][T28734] loop2: AHDI p4 [ 863.832019][T28734] loop2: partition table partially beyond EOD, truncated [ 863.854495][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 863.854515][ T30] audit: type=1326 audit(1749967764.303:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28709 comm="syz.1.10102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6618e929 code=0x7fc00000 [ 864.262044][T28748] netlink: 136 bytes leftover after parsing attributes in process `syz.0.10117'. [ 864.293315][T28748] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 864.937641][T12926] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 865.053746][ T30] audit: type=1804 audit(1749967765.503:6321): pid=28772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.10126" name="/" dev="pidfs" ino=28772 res=1 errno=0 [ 865.112091][T12926] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 865.121657][T12926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.130295][T12926] usb 5-1: Product: syz [ 865.134889][T12926] usb 5-1: Manufacturer: syz [ 865.140164][T12926] usb 5-1: SerialNumber: syz [ 865.161572][T12926] usb 5-1: config 0 descriptor?? [ 865.390708][T12926] usb 5-1: f81604_read: reg: 105 failed: -EPROTO [ 865.409165][T12926] f81604 5-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 865.430085][T12926] f81604 5-1:0.0: probe with driver f81604 failed with error -71 [ 865.484219][T12926] usb 5-1: USB disconnect, device number 84 [ 865.582682][T28780] io-wq is not configured for unbound workers [ 866.409127][ T30] audit: type=1326 audit(1749967766.853:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28811 comm="syz.5.10143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d4e98e929 code=0x0 [ 866.489010][T28816] syzkaller1: entered promiscuous mode [ 866.504980][T28816] syzkaller1: entered allmulticast mode [ 866.536510][T28818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10146'. [ 866.545862][ T5999] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 866.653416][T12912] hid-generic 00A0:0006:0003.0086: unknown main item tag 0x0 [ 866.672882][T12912] hid-generic 00A0:0006:0003.0086: unknown main item tag 0x0 [ 866.681938][T12912] hid-generic 00A0:0006:0003.0086: unknown main item tag 0x0 [ 866.690493][T12912] hid-generic 00A0:0006:0003.0086: unknown main item tag 0x2 [ 866.699074][T12912] hid-generic 00A0:0006:0003.0086: unknown main item tag 0x0 [ 866.706536][T12912] hid-generic 00A0:0006:0003.0086: unknown main item tag 0x0 [ 866.717418][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.729597][T12912] hid-generic 00A0:0006:0003.0086: unknown main item tag 0x0 [ 866.737908][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.748992][T12912] hid-generic 00A0:0006:0003.0086: unknown main item tag 0x0 [ 866.756471][T12912] hid-generic 00A0:0006:0003.0086: unknown main item tag 0x0 [ 866.764274][ T5999] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 866.784215][T12912] hid-generic 00A0:0006:0003.0086: unknown main item tag 0x0 [ 866.792472][ T5999] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 866.802521][T12912] hid-generic 00A0:0006:0003.0086: unknown main item tag 0x0 [ 866.810407][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.819046][T12912] hid-generic 00A0:0006:0003.0086: unknown main item tag 0x0 [ 866.830971][ T5999] usb 2-1: config 0 descriptor?? [ 866.852136][T12912] hid-generic 00A0:0006:0003.0086: hidraw0: HID v0.05 Device [syz1] on syz0 [ 866.907428][ T10] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 867.077571][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 867.087033][ T10] usb 5-1: config 0 has no interfaces? [ 867.104769][ T10] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 867.117437][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.129018][ T10] usb 5-1: Product: syz [ 867.133436][ T10] usb 5-1: Manufacturer: syz [ 867.139333][ T10] usb 5-1: SerialNumber: syz [ 867.152635][ T10] usb 5-1: config 0 descriptor?? [ 867.254129][ T5999] plantronics 0003:047F:FFFF.0087: No inputs registered, leaving [ 867.295579][ T5999] plantronics 0003:047F:FFFF.0087: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 867.380586][ T5999] usb 5-1: USB disconnect, device number 85 [ 867.521694][ T10] usb 2-1: USB disconnect, device number 83 [ 867.597851][T12920] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 867.781070][T12920] usb 4-1: Using ep0 maxpacket: 16 [ 867.853683][T12920] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 867.901492][T12920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.923687][T12920] usb 4-1: Product: syz [ 867.932192][T12920] usb 4-1: Manufacturer: syz [ 867.937163][T12920] usb 4-1: SerialNumber: syz [ 867.978558][T12920] usb 4-1: config 0 descriptor?? [ 868.391838][T12920] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 868.442157][T12920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 868.466381][T28876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10163'. [ 868.470012][T12920] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 868.510568][T12920] usb 4-1: media controller created [ 868.518809][T28876] openvswitch: netlink: nsh attr 8224 is out of range max 3 [ 868.546466][T28876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.574002][T12920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 868.641892][T12920] zl10353_read_register: readreg error (reg=127, ret==0) [ 868.663030][T12920] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 868.708708][T12920] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 868.730594][T12920] usb 4-1: USB disconnect, device number 91 [ 868.819978][T28884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 868.899164][T12920] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 869.234154][T28905] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10176'. [ 869.667658][T12920] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 869.841925][T12920] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 869.864345][T12920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.887418][T12920] usb 1-1: Product: syz [ 869.897813][T12920] usb 1-1: Manufacturer: syz [ 869.911441][T12920] usb 1-1: SerialNumber: syz [ 869.931024][T12920] usb 1-1: config 0 descriptor?? [ 870.355224][T12920] usb 1-1: Firmware: major: 0, minor: 97, hardware type: UNKNOWN (40) [ 870.477485][ T5999] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 870.566819][T12920] usb 1-1: failed to fetch extended address, random address set [ 870.591553][T12920] usb 1-1: atusb_probe: initialization failed, error = -524 [ 870.601874][T12920] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 870.619455][T12920] usb 1-1: USB disconnect, device number 98 [ 870.640327][ T5999] usb 4-1: unable to get BOS descriptor or descriptor too short [ 870.659133][ T5999] usb 4-1: config 1 interface 0 has no altsetting 0 [ 870.670347][ T5999] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.40 [ 870.681841][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.689992][ T5999] usb 4-1: Product: syz [ 870.694470][ T5999] usb 4-1: Manufacturer: syz [ 870.699328][ T5999] usb 4-1: SerialNumber: syz [ 870.960527][ T5999] usbhid 4-1:1.0: can't add hid device: -71 [ 870.966663][ T5999] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 870.991650][ T5999] usb 4-1: USB disconnect, device number 92 [ 871.457403][T12920] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 871.630186][T12920] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 871.667435][T12920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.707367][T12920] usb 1-1: config 0 descriptor?? [ 871.921203][T28992] binder: 28991:28992 ioctl c018620c 200000000380 returned -22 [ 872.019064][T28996] loop6: detected capacity change from 0 to 524287999 [ 872.032050][T18580] Buffer I/O error on dev loop6, logical block 0, async page read [ 872.040255][T18580] Buffer I/O error on dev loop6, logical block 0, async page read [ 872.051253][T18580] Buffer I/O error on dev loop6, logical block 0, async page read [ 872.060013][T18580] Buffer I/O error on dev loop6, logical block 0, async page read [ 872.070762][T18580] Buffer I/O error on dev loop6, logical block 0, async page read [ 872.074790][T28998] loop2: detected capacity change from 0 to 524287998 [ 872.079812][T18580] Buffer I/O error on dev loop6, logical block 0, async page read [ 872.095760][T18580] Buffer I/O error on dev loop6, logical block 0, async page read [ 872.104382][T18580] Buffer I/O error on dev loop6, logical block 0, async page read [ 872.115438][ T1117] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 872.127552][T18580] ldm_validate_partition_table(): Disk read failed. [ 872.134819][ C0] I/O error, dev loop2, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 872.145362][T17498] Buffer I/O error on dev loop2, logical block 65535968, async page read [ 872.147176][T18580] Dev loop6: unable to read RDB block 0 [ 872.166675][T18580] loop6: unable to read partition table [ 872.175137][T28996] ldm_validate_partition_table(): Disk read failed. [ 872.188219][T28996] Dev loop6: unable to read RDB block 0 [ 872.194383][T28996] loop6: unable to read partition table [ 872.203708][T28996] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 872.463239][T29004] tipc: Started in network mode [ 872.471124][T29004] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 872.479690][T29004] tipc: Enabled bearer , priority 10 [ 872.489652][T29004] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10219'. [ 872.500400][T29004] tipc: Resetting bearer [ 872.539130][T29004] tipc: Disabling bearer [ 872.545670][T12920] usb 1-1: Cannot set autoneg [ 872.558352][T12920] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 872.599543][T12920] usb 1-1: USB disconnect, device number 99 [ 872.780617][T29010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10223'. [ 872.816919][T29010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10223'. [ 873.026409][T29020] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10227'. [ 873.452456][T29034] syzkaller1: entered promiscuous mode [ 873.467583][T29034] syzkaller1: entered allmulticast mode [ 873.587164][T29041] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10235'. [ 873.805782][T29047] vlan2: entered promiscuous mode [ 873.819335][T29047] bond0: entered promiscuous mode [ 873.834749][T29047] bond_slave_0: entered promiscuous mode [ 873.850452][T29047] bond_slave_1: entered promiscuous mode [ 874.226731][T29059] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 874.250784][T29059] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 874.398445][T29061] loop8: detected capacity change from 0 to 7 [ 874.431181][T29061] Dev loop8: unable to read RDB block 7 [ 874.456909][T29061] loop8: unable to read partition table [ 874.484687][T29061] loop8: partition table beyond EOD, truncated [ 874.507832][T29061] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 875.632249][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.640211][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.461112][T29141] batadv_slave_1: entered promiscuous mode [ 877.498795][T29141] batadv_slave_1: left promiscuous mode [ 878.352607][T29172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10293'. [ 878.403698][T29172] netlink: 'syz.1.10293': attribute type 7 has an invalid length. [ 878.437666][T29172] netlink: 'syz.1.10293': attribute type 8 has an invalid length. [ 878.445549][T29172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10293'. [ 878.562634][T29172] gretap0: entered promiscuous mode [ 878.595434][T29172] batadv_slave_1: entered promiscuous mode [ 878.616244][T29172] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 878.682363][T29172] Cannot create hsr debugfs directory [ 878.700769][T29172] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 878.717591][T29172] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.858495][ T10] psmouse serio7: Failed to reset mouse on : -5 [ 878.904607][T29185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10299'. [ 879.217739][T23410] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 879.389468][T23410] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 879.412660][T23410] usb 2-1: config 0 has no interface number 0 [ 879.433678][T23410] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 879.472828][T23410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.493210][T23410] usb 2-1: Product: syz [ 879.505670][T23410] usb 2-1: Manufacturer: syz [ 879.510687][T23410] usb 2-1: SerialNumber: syz [ 879.530243][T23410] usb 2-1: config 0 descriptor?? [ 879.770473][T23410] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 879.802314][T23410] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 879.839586][T23410] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 879.877429][T23410] usb 2-1: media controller created [ 879.959503][T23410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 880.091652][T12912] IPVS: starting estimator thread 0... [ 880.197512][T29216] IPVS: using max 24 ests per chain, 57600 per kthread [ 880.247822][T23410] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 880.395060][T23410] usb 2-1: USB disconnect, device number 84 [ 880.546083][T29227] loop6: detected capacity change from 0 to 32 [ 881.027497][ T43] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 881.207444][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 881.223182][ T43] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 881.243547][ T43] usb 4-1: config 0 has no interface number 0 [ 881.258743][ T43] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 881.290739][ T43] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 881.320692][ T43] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 881.336505][T29251] vivid-000: disconnect [ 881.338836][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.351877][T29251] vivid-000: reconnect [ 881.358242][ T43] usb 4-1: Product: syz [ 881.367725][ T43] usb 4-1: Manufacturer: syz [ 881.372419][ T43] usb 4-1: SerialNumber: syz [ 881.399845][ T43] usb 4-1: config 0 descriptor?? [ 881.405824][T29237] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 881.414368][T29237] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 881.503641][T29256] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 881.636707][T29237] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 881.657584][T29237] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 881.681704][ T30] audit: type=1326 audit(1749967782.133:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29257 comm="syz.5.10331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d4e98e929 code=0x0 [ 881.967606][T12926] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 882.137069][T12926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.147874][T12926] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 882.169295][T12926] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 882.179158][T12926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 882.192889][T12926] usb 2-1: SerialNumber: syz [ 882.283735][ T43] asix 4-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0xd9 [ 882.444055][T12926] usb 2-1: 0:2 : does not exist [ 882.500952][ T43] usb 4-1: USB disconnect, device number 93 [ 882.541758][T12926] usb 2-1: USB disconnect, device number 85 [ 882.611170][ T10] misc userio: Buffer overflowed, userio client isn't keeping up [ 882.687174][T18580] udevd[18580]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 883.077399][T23410] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 883.257406][T23410] usb 6-1: Using ep0 maxpacket: 8 [ 883.266665][T23410] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 883.282767][T23410] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 883.294099][T23410] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 883.304733][T23410] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 883.315957][T23410] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.331587][T23410] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 883.344798][T23410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.367357][T12926] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 883.487417][ T5999] delete_channel: no stack [ 883.532915][T12926] usb 4-1: Using ep0 maxpacket: 8 [ 883.544458][T12926] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 883.553180][T12926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 883.571619][T29303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10349'. [ 883.578765][T23410] usb 6-1: usb_control_msg returned -32 [ 883.586144][T12926] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 883.597423][T23410] usbtmc 6-1:16.0: can't read capabilities [ 883.609164][T12926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 883.627135][T29303] ipvlan2: entered promiscuous mode [ 883.640802][T12926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 883.671317][T12926] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 883.681683][T12926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 883.701963][T12926] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 883.719014][T12926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 883.733282][T12926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 883.753834][T12926] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 883.754918][ T10] input: PS/2 Generic Mouse as /devices/serio7/input/input101 [ 883.762976][T12926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 883.785676][T12926] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 883.805952][T12926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 883.821676][T12926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 883.853734][T12926] usb 4-1: string descriptor 0 read error: -22 [ 883.892257][T12926] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 883.912522][T12926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.978444][T29304] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 883.992582][T12926] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 884.047363][ T10] psmouse serio7: Failed to enable mouse on [ 884.196331][ T5999] usb 6-1: USB disconnect, device number 7 [ 884.248576][ T10] usb 4-1: USB disconnect, device number 94 [ 884.346603][T29316] vlan0: entered promiscuous mode [ 884.352518][T12926] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 884.360846][T29316] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 884.380270][T29316] vlan0: entered allmulticast mode [ 884.385605][T29316] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 884.527763][T12926] usb 2-1: Using ep0 maxpacket: 16 [ 884.535992][T12926] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.552869][T12926] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.563237][T12926] usb 2-1: config 0 interface 0 has no altsetting 0 [ 884.573397][T29319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10356'. [ 884.583153][T12926] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 884.598024][T12926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.613023][T12926] usb 2-1: config 0 descriptor?? [ 884.913166][T29325] input: syz1 as /devices/virtual/input/input102 [ 885.073805][T12926] hid (null): bogus close delimiter [ 885.101113][T12926] cougar 0003:060B:500A.0088: unexpected long global item [ 885.122785][T12926] cougar 0003:060B:500A.0088: parse failed [ 885.129421][T12926] cougar 0003:060B:500A.0088: probe with driver cougar failed with error -22 [ 885.241430][T12920] usb 2-1: USB disconnect, device number 86 [ 885.380218][T12922] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 885.569509][T12922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 885.596954][T12922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 885.616128][T12922] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 885.625920][T12922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 885.641908][T12922] usb 5-1: SerialNumber: syz [ 885.859763][T12922] usb 5-1: 0:2 : does not exist [ 885.913316][T12922] usb 5-1: USB disconnect, device number 86 [ 885.977105][T18580] udevd[18580]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 886.267612][T12926] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 886.439652][T12926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.452137][T12926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.465220][T12926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 886.495574][T12926] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 886.515307][T12926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.529443][T12926] usb 6-1: config 0 descriptor?? [ 886.868795][T29384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10384'. [ 886.882544][T29383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 886.993244][T12926] plantronics 0003:047F:FFFF.0089: No inputs registered, leaving [ 887.034108][T12926] plantronics 0003:047F:FFFF.0089: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 887.256707][T12926] usb 6-1: USB disconnect, device number 8 [ 887.361154][T29399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 889.574179][T12920] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 889.787512][T12920] usb 5-1: Using ep0 maxpacket: 8 [ 889.824924][T12920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 889.867457][ T5999] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 889.906695][T12920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 889.931949][T12920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 889.973472][ T30] audit: type=1326 audit(1749967790.413:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29466 comm="syz.1.10420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd6612ab19 code=0x7ffc0000 [ 890.011365][T12920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 890.048060][T12920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 890.067632][ T30] audit: type=1326 audit(1749967790.413:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29466 comm="syz.1.10420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6618e929 code=0x7ffc0000 [ 890.091765][ T5999] usb 4-1: Using ep0 maxpacket: 8 [ 890.107855][T12920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.121083][ T5999] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 890.145965][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.169419][ T30] audit: type=1326 audit(1749967790.413:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29466 comm="syz.1.10420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6618e929 code=0x7ffc0000 [ 890.203390][ T5999] usb 4-1: Product: syz [ 890.222308][ T5999] usb 4-1: Manufacturer: syz [ 890.262366][ T5999] usb 4-1: SerialNumber: syz [ 890.278728][ T5999] usb 4-1: config 0 descriptor?? [ 890.284849][ T30] audit: type=1326 audit(1749967790.413:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29466 comm="syz.1.10420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd6612ab19 code=0x7ffc0000 [ 890.348924][ T5999] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 890.397908][T12920] usb 5-1: GET_CAPABILITIES returned 0 [ 890.416054][T12920] usbtmc 5-1:16.0: can't read capabilities [ 890.427570][ T30] audit: type=1326 audit(1749967790.413:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29466 comm="syz.1.10420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6618e929 code=0x7ffc0000 [ 890.569398][ T30] audit: type=1326 audit(1749967790.413:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29466 comm="syz.1.10420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6618e929 code=0x7ffc0000 [ 890.626614][T12926] usb 5-1: USB disconnect, device number 87 [ 890.655557][ T30] audit: type=1326 audit(1749967790.413:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29466 comm="syz.1.10420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6618e929 code=0x7ffc0000 [ 890.751350][ T30] audit: type=1326 audit(1749967790.413:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29466 comm="syz.1.10420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd6612ab19 code=0x7ffc0000 [ 890.888988][ T30] audit: type=1326 audit(1749967790.413:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29466 comm="syz.1.10420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd6618e929 code=0x7ffc0000 [ 890.963531][ T30] audit: type=1326 audit(1749967790.423:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29466 comm="syz.1.10420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd6612ab19 code=0x7ffc0000 [ 891.420918][ T5999] gspca_sonixj: reg_w1 err -71 [ 891.507489][ T5999] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 891.538777][ T5999] usb 4-1: USB disconnect, device number 95 [ 892.325318][T29533] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 892.917348][T12926] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 893.117315][T12926] usb 1-1: Using ep0 maxpacket: 8 [ 893.127771][T12926] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 893.157344][T12926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 893.177381][T12926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 893.197466][T12926] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.227327][T12926] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 893.236684][T12926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.347523][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 893.482269][T12926] usb 1-1: GET_CAPABILITIES returned 0 [ 893.488800][T12926] usbtmc 1-1:16.0: can't read capabilities [ 893.517958][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 893.534887][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 893.561229][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 893.572337][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 893.583603][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.600638][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 893.611345][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.695146][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 893.705251][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 893.717650][T29551] usbtmc 1-1:16.0: Unable to send data, error -71 [ 893.728984][T12926] usb 1-1: USB disconnect, device number 100 [ 893.863141][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 893.876033][ T10] usbtmc 5-1:16.0: can't read capabilities [ 893.984868][T29587] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10472'. [ 894.070001][T29592] sctp: [Deprecated]: syz.1.10473 (pid 29592) Use of int in max_burst socket option. [ 894.070001][T29592] Use struct sctp_assoc_value instead [ 894.098767][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 894.108192][T29567] usbtmc 5-1:16.0: Unable to send data, error -71 [ 894.144956][ T10] usb 5-1: USB disconnect, device number 88 [ 894.448273][ T5999] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 894.619657][ T5999] usb 4-1: Using ep0 maxpacket: 8 [ 894.632033][ T5999] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 894.652012][ T5999] usb 4-1: config 0 has no interface number 0 [ 894.667724][ T5999] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 894.700645][ T5999] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 894.733033][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.785848][ T5999] usb 4-1: config 0 descriptor?? [ 894.803171][ T5999] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 895.286124][ T5999] usb 4-1: USB disconnect, device number 96 [ 895.968328][T29629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10491'. [ 896.079788][T29631] input: syz1 as /devices/virtual/input/input104 [ 898.187493][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 899.819539][T29698] netlink: 452 bytes leftover after parsing attributes in process `syz.3.10518'. [ 900.209350][T29712] netlink: 788 bytes leftover after parsing attributes in process `syz.3.10525'. [ 901.161403][T29728] syzkaller1: entered promiscuous mode [ 901.194726][T29728] syzkaller1: entered allmulticast mode [ 901.407660][ T5999] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 901.599965][ T5999] usb 1-1: config 0 has an invalid interface number: 101 but max is 0 [ 901.624321][ T5999] usb 1-1: config 0 has no interface number 0 [ 901.634839][ T5999] usb 1-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 901.673216][ T5999] usb 1-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 901.720543][ T5999] usb 1-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 901.749140][ T5999] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.781667][ T5999] usb 1-1: Product: syz [ 901.786584][ T5999] usb 1-1: Manufacturer: syz [ 901.812128][ T5999] usb 1-1: SerialNumber: syz [ 901.835709][ T5999] usb 1-1: config 0 descriptor?? [ 901.862707][ T5999] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 902.215028][T29765] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10545'. [ 902.384288][T29770] syzkaller1: entered promiscuous mode [ 902.397583][T29770] syzkaller1: entered allmulticast mode [ 902.423053][T29770] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 902.597872][T23410] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 902.687369][T12912] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 902.717614][ T5999] input: gspca_pac7302 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input105 [ 902.766504][T23410] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 902.785472][T23410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.805132][T23410] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 902.814650][T23410] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 902.823613][T23410] usb 2-1: Manufacturer: syz [ 902.837120][T23410] usb 2-1: config 0 descriptor?? [ 902.887681][T12912] usb 6-1: Using ep0 maxpacket: 16 [ 902.902130][T12912] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 902.927447][T12912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 902.952233][ T5999] usb 1-1: USB disconnect, device number 101 [ 902.984615][T12912] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 902.997480][T23410] rc_core: IR keymap rc-hauppauge not found [ 903.003509][T23410] Registered IR keymap rc-empty [ 903.015172][T12912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.023735][T12912] usb 6-1: Product: syz [ 903.031883][T23410] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 903.043932][T12912] usb 6-1: Manufacturer: syz [ 903.051623][T12912] usb 6-1: SerialNumber: syz [ 903.058409][T23410] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input106 [ 903.074460][T12912] usb 6-1: config 0 descriptor?? [ 903.084559][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 903.096841][T23410] usb 2-1: USB disconnect, device number 87 [ 903.114239][T12912] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 903.125868][T12912] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 903.393301][ T30] kauditd_printk_skb: 136 callbacks suppressed [ 903.393323][ T30] audit: type=1326 audit(1749967803.843:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29788 comm="syz.4.10554" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bbf78e929 code=0x0 [ 903.714275][T29798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10558'. [ 903.817426][T12912] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 903.824351][T12912] em28xx 6-1:0.0: Config register raw data: 0x41 [ 904.043532][T12926] usb 6-1: USB disconnect, device number 9 [ 904.058339][T12926] em28xx 6-1:0.0: Disconnecting em28xx [ 904.096283][T12926] em28xx 6-1:0.0: Freeing device [ 904.561216][T29829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 904.617395][T12926] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 904.707811][T29833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10574'. [ 904.727716][T29833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10574'. [ 904.839071][T12926] usb 1-1: Using ep0 maxpacket: 8 [ 904.854735][T12926] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 904.875100][T12926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.902048][T12926] usb 1-1: config 0 descriptor?? [ 904.950924][T29841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10578'. [ 904.994465][ T30] audit: type=1326 audit(1749967805.443:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.3.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 905.017200][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.057543][ T30] audit: type=1326 audit(1749967805.443:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.3.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 905.099210][ T30] audit: type=1326 audit(1749967805.473:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.3.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 905.122287][T12920] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 905.174927][T12926] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 905.184817][ T30] audit: type=1326 audit(1749967805.473:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.3.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 905.257496][ T30] audit: type=1326 audit(1749967805.473:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.3.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 905.282016][ T30] audit: type=1326 audit(1749967805.473:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.3.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 905.282470][T12920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 905.306035][ T30] audit: type=1326 audit(1749967805.473:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.3.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 905.487493][ T30] audit: type=1326 audit(1749967805.473:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.3.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 905.487497][T12920] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 905.487537][T12920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 905.623381][ T30] audit: type=1326 audit(1749967805.473:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29826 comm="syz.3.10571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 905.692814][T12920] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 905.719303][T12920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.728026][T12920] usb 6-1: Product: syz [ 905.732295][T12920] usb 6-1: Manufacturer: syz [ 905.798275][T12920] usb 6-1: SerialNumber: syz [ 905.834379][T12920] usb 6-1: config 0 descriptor?? [ 905.847549][T23410] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 905.848330][T29839] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 905.863430][T29839] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 905.884644][T12920] usb 6-1: ucan: probing device on interface #0 [ 906.002593][T23410] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 906.020978][T23410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.047338][T23410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 906.066414][T12926] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 906.078494][T12926] asix 1-1:0.0: probe with driver asix failed with error -71 [ 906.086394][T23410] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 906.108144][T23410] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 906.112392][T12926] usb 1-1: USB disconnect, device number 102 [ 906.117846][T23410] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 906.158111][T23410] usb 5-1: Manufacturer: syz [ 906.175297][T23410] usb 5-1: config 0 descriptor?? [ 906.544263][T12920] ucan 6-1:0.0: probe with driver ucan failed with error -22 [ 906.553437][T29856] IPVS: You probably need to specify IP address on multicast interface. [ 906.564587][T29856] IPVS: Error connecting to the multicast addr [ 906.601855][T23410] appleir 0003:05AC:8243.008A: unknown main item tag 0x0 [ 906.638939][T23410] appleir 0003:05AC:8243.008A: No inputs registered, leaving [ 906.717040][T23410] appleir 0003:05AC:8243.008A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 906.880058][T23410] usb 5-1: USB disconnect, device number 89 [ 906.988036][T29869] input: syz1 as /devices/virtual/input/input107 [ 907.034189][T29867] fido_id[29867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 907.889655][T23410] usb 6-1: USB disconnect, device number 10 [ 908.047728][T12912] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 908.217415][T12912] usb 5-1: Using ep0 maxpacket: 16 [ 908.252001][T12912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.287331][T12912] usb 5-1: config 0 has no interfaces? [ 908.302279][T12912] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 908.324838][T12912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.355829][T12912] usb 5-1: Product: syz [ 908.360311][T12912] usb 5-1: Manufacturer: syz [ 908.365159][T12912] usb 5-1: SerialNumber: syz [ 908.393416][T29916] syzkaller1: entered promiscuous mode [ 908.399082][T12912] usb 5-1: config 0 descriptor?? [ 908.405199][T29916] syzkaller1: entered allmulticast mode [ 908.447764][T12920] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 908.563714][T29923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10611'. [ 908.576906][T29923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10611'. [ 908.619766][T12920] usb 4-1: Using ep0 maxpacket: 32 [ 908.628236][T12920] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 908.636415][T12920] usb 4-1: config 0 has no interface number 0 [ 908.646761][T12922] usb 5-1: USB disconnect, device number 90 [ 908.664503][T12920] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 908.685061][T12920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.693770][T12920] usb 4-1: Product: syz [ 908.703724][T12920] usb 4-1: Manufacturer: syz [ 908.709760][T12920] usb 4-1: SerialNumber: syz [ 908.722815][T12920] usb 4-1: config 0 descriptor?? [ 908.741376][T12920] smsc95xx v2.0.0 [ 909.006743][T29932] netlink: 566 bytes leftover after parsing attributes in process `syz.1.10614'. [ 909.374597][T29942] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 909.567524][T12920] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 909.772765][T12920] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 909.798838][T12920] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 909.830129][T12920] usb 4-1: USB disconnect, device number 97 [ 911.707414][T30007] input: syz0 as /devices/virtual/input/input108 [ 912.998790][T30027] input: syz1 as /devices/virtual/input/input109 [ 914.027898][T12920] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 914.217454][T12920] usb 5-1: Using ep0 maxpacket: 16 [ 914.227778][T12926] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 914.266564][T12920] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 914.286216][T12920] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.317321][T12920] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 914.355257][T12920] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 914.378076][T12920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.396607][T12920] usb 5-1: Product: syz [ 914.427570][T12926] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 914.444714][T12920] usb 5-1: Manufacturer: syz [ 914.450538][T12920] usb 5-1: SerialNumber: syz [ 914.458019][T12926] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.474570][T12926] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.494352][T12926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 914.510701][T12926] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.527447][T12926] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.543063][T12926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 914.552852][T12926] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.567630][T12926] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.600540][T12926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 914.618915][T12926] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.637491][T12926] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.663498][T12926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 914.692640][T12926] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.708315][T12926] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.736947][T12926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 914.759315][T12926] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.777672][T12926] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.807316][T12926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 914.818873][T12926] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.837431][T12926] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.867371][T12926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 914.875979][T12926] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 914.891652][T12926] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 914.903128][T12920] usb 5-1: 0:2 : does not exist [ 914.915707][T12926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 914.928168][T12926] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 914.947320][T12926] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 914.964277][T12926] usb 6-1: Product: syz [ 914.974883][T12926] usb 6-1: Manufacturer: syz [ 914.990906][T30065] loop6: detected capacity change from 0 to 1 [ 915.003120][T30065] Dev loop6: unable to read RDB block 1 [ 915.003118][T12926] usb 6-1: SerialNumber: syz [ 915.011940][T12926] usb 6-1: config 0 descriptor?? [ 915.037563][T30065] loop6: unable to read partition table [ 915.048024][T12926] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 915.054699][T30065] loop6: partition table beyond EOD, truncated [ 915.073823][T30065] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 915.410179][ C1] usb 6-1: yurex_control_callback - control failed: -71 [ 915.411909][T23410] usb 6-1: USB disconnect, device number 11 [ 915.445103][T30068] yurex 6-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 915.445230][T23410] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 915.515442][T12920] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 915.656886][T12920] usb 5-1: USB disconnect, device number 91 [ 915.768139][T18580] udevd[18580]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 916.939707][T30116] input: syz1 as /devices/virtual/input/input110 [ 917.557000][T30135] netlink: 'syz.3.10696': attribute type 64 has an invalid length. [ 917.566878][T30135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10696'. [ 917.582052][T30135] netlink: 'syz.3.10696': attribute type 64 has an invalid length. [ 917.594916][T30135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10696'. [ 917.617687][T12926] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 917.829629][T12926] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 917.861977][T12926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 917.904092][T12926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 917.933723][T12926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 917.987642][T12926] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 918.022761][T12926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.056688][T12926] usb 6-1: config 0 descriptor?? [ 918.073139][T30130] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 918.143842][ T30] kauditd_printk_skb: 187 callbacks suppressed [ 918.143864][ T30] audit: type=1326 audit(1749967818.573:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30147 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6541f8e929 code=0x7ffc0000 [ 918.173192][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.222221][ T30] audit: type=1326 audit(1749967818.593:6668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30147 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6541f8e929 code=0x7ffc0000 [ 918.307405][ T30] audit: type=1326 audit(1749967818.593:6669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30147 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f6541f8e929 code=0x7ffc0000 [ 918.420175][ T30] audit: type=1326 audit(1749967818.593:6670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30147 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6541f8e929 code=0x7ffc0000 [ 918.442773][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.527477][ T30] audit: type=1326 audit(1749967818.593:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30147 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6541f8e929 code=0x7ffc0000 [ 918.545482][T12926] plantronics 0003:047F:FFFF.008B: reserved main item tag 0xd [ 918.602035][T12926] plantronics 0003:047F:FFFF.008B: No inputs registered, leaving [ 918.602487][ T30] audit: type=1326 audit(1749967818.603:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30147 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6541f8e929 code=0x7ffc0000 [ 918.667162][ T30] audit: type=1326 audit(1749967818.603:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30147 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6541f8e929 code=0x7ffc0000 [ 918.690336][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.698908][ T30] audit: type=1326 audit(1749967818.603:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30147 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f6541f8e929 code=0x7ffc0000 [ 918.740109][T12926] plantronics 0003:047F:FFFF.008B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 918.753427][ T30] audit: type=1326 audit(1749967818.603:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30147 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6541f8e929 code=0x7ffc0000 [ 918.776075][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.816186][ T30] audit: type=1326 audit(1749967818.613:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30147 comm="syz.0.10701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f6541f8e929 code=0x7ffc0000 [ 918.868045][T12926] usb 6-1: USB disconnect, device number 12 [ 919.010297][T30164] fido_id[30164]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 919.071937][T30172] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 919.471355][T30190] syzkaller1: entered promiscuous mode [ 919.482079][T30190] syzkaller1: entered allmulticast mode [ 919.647370][T23410] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 919.677385][T12926] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 919.727394][ T5999] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 919.816373][T23410] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 919.834325][T23410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 919.850615][T12926] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 919.861522][T23410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 919.870757][T12926] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 919.884595][T23410] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 919.884664][T23410] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 919.884692][T23410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.929588][T12926] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 919.939257][T23410] usb 6-1: config 0 descriptor?? [ 919.952615][T12926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.963849][ T5999] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 919.998759][ T5999] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 920.037587][ T5999] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 920.077596][ T5999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.129746][ T5999] usb 4-1: config 0 descriptor?? [ 920.161892][ T5999] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 920.185478][ T5999] dvb-usb: bulk message failed: -22 (3/0) [ 920.200978][T12926] usb 5-1: GET_CAPABILITIES returned 0 [ 920.206571][T12926] usbtmc 5-1:16.0: can't read capabilities [ 920.219012][ T5999] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 920.259832][ T5999] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 920.279544][ T5999] usb 4-1: media controller created [ 920.306911][ T5999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 920.366972][T23410] plantronics 0003:047F:FFFF.008C: ignoring exceeding usage max [ 920.384792][T23410] plantronics 0003:047F:FFFF.008C: No inputs registered, leaving [ 920.411337][ T5999] dvb-usb: bulk message failed: -22 (6/0) [ 920.440437][ T5999] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 920.451357][T23410] plantronics 0003:047F:FFFF.008C: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 920.477163][T12911] usb 5-1: USB disconnect, device number 92 [ 920.500932][ T5999] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input112 [ 920.560444][ T5999] dvb-usb: schedule remote query interval to 150 msecs. [ 920.581656][T30209] No such timeout policy "syz0" [ 920.607345][ T5999] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 920.641093][ T5999] usb 6-1: USB disconnect, device number 13 [ 920.750884][T30207] fido_id[30207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 920.769825][T23410] dvb-usb: bulk message failed: -22 (1/0) [ 920.782855][T23410] dvb-usb: error while querying for an remote control event. [ 920.885196][T12922] usb 4-1: USB disconnect, device number 98 [ 920.942096][T12922] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 921.326914][T30230] input: syz1 as /devices/virtual/input/input113 [ 921.699316][T30237] netlink: 'syz.5.10742': attribute type 12 has an invalid length. [ 921.824720][T30237] netlink: 'syz.5.10742': attribute type 29 has an invalid length. [ 921.907581][T30237] netlink: 148 bytes leftover after parsing attributes in process `syz.5.10742'. [ 922.198519][T12922] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 922.250987][T30253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 922.288452][T30253] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 922.377552][T12922] usb 4-1: Using ep0 maxpacket: 32 [ 922.394726][T30257] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10751'. [ 922.424263][T12922] usb 4-1: config 0 interface 0 has no altsetting 0 [ 922.451016][T12922] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 922.468035][T12922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.476144][T12922] usb 4-1: Product: syz [ 922.507465][T12922] usb 4-1: Manufacturer: syz [ 922.512187][T12922] usb 4-1: SerialNumber: syz [ 922.537767][T12922] usb 4-1: config 0 descriptor?? [ 922.925482][T30279] macsec1: entered allmulticast mode [ 922.931143][T30279] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 922.951569][T30279] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 922.960135][T12922] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 923.019421][T30283] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 923.587480][T12922] usb 4-1: USB disconnect, device number 99 [ 924.337408][ T5999] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 924.400369][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 924.400392][ T30] audit: type=1326 audit(1749967824.843:6679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30324 comm="syz.3.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 924.519548][ T30] audit: type=1326 audit(1749967824.843:6680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30324 comm="syz.3.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 924.542185][ C0] vkms_vblank_simulate: vblank timer overrun [ 924.566681][ T30] audit: type=1326 audit(1749967824.843:6681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30324 comm="syz.3.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 924.589294][ C0] vkms_vblank_simulate: vblank timer overrun [ 924.597382][ T30] audit: type=1326 audit(1749967824.843:6682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30324 comm="syz.3.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 924.641173][ T5999] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 924.685880][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.753847][ T5999] usb 1-1: config 0 descriptor?? [ 924.776708][ T30] audit: type=1326 audit(1749967824.843:6683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30324 comm="syz.3.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 924.854107][ T5999] cp210x 1-1:0.0: cp210x converter detected [ 924.951828][ T30] audit: type=1326 audit(1749967824.843:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30324 comm="syz.3.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 924.974415][ C0] vkms_vblank_simulate: vblank timer overrun [ 925.214462][ T30] audit: type=1326 audit(1749967824.853:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30324 comm="syz.3.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 925.328247][ T5999] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 925.390368][ T30] audit: type=1326 audit(1749967824.853:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30324 comm="syz.3.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 925.526019][ T30] audit: type=1326 audit(1749967824.853:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30324 comm="syz.3.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 925.646095][ T5999] usb 1-1: cp210x converter now attached to ttyUSB0 [ 925.672373][ T30] audit: type=1326 audit(1749967824.853:6688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30324 comm="syz.3.10779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 925.790554][T12926] usb 1-1: USB disconnect, device number 103 [ 925.840716][T12926] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 925.911002][T12926] cp210x 1-1:0.0: device disconnected [ 927.727455][T12922] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 927.737483][ T5999] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 927.879445][T12922] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 927.893301][T12922] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 927.903866][T12922] usb 1-1: config 1 has no interface number 0 [ 927.911182][ T5999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.914640][T12922] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.933764][ T5999] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 927.933801][ T5999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.937284][ T5999] usb 2-1: config 0 descriptor?? [ 927.951833][T12922] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 927.955934][T12922] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 927.976524][T12922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.985096][T12922] usb 1-1: Product: syz [ 927.990576][T12922] usb 1-1: Manufacturer: syz [ 927.995373][T12922] usb 1-1: SerialNumber: syz [ 928.214801][ T5999] usbhid 2-1:0.0: can't add hid device: -71 [ 928.226994][ T5999] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 928.257836][ T5999] usb 2-1: USB disconnect, device number 88 [ 928.692011][T12919] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 928.914605][T12919] usb 2-1: Using ep0 maxpacket: 32 [ 928.939541][T12919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.966858][T12922] cdc_ncm 1-1:1.1: bind() failure [ 928.982373][T12919] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 929.027354][T12919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.106108][T12919] usb 2-1: config 0 descriptor?? [ 929.154404][T12919] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 929.166423][ T5999] usb 1-1: USB disconnect, device number 104 [ 929.199220][T12919] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 929.389207][T12919] usb 2-1: USB disconnect, device number 89 [ 929.402712][T12919] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 929.797422][ T5999] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 929.979035][ T5999] usb 6-1: Using ep0 maxpacket: 8 [ 930.000309][ T5999] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 930.013294][ T5999] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 930.048902][ T5999] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 930.061982][ T5999] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 930.077179][ T5999] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 930.093244][ T5999] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 930.102782][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.237472][T12919] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 930.322606][ T5999] usb 6-1: usb_control_msg returned -32 [ 930.330271][ T5999] usbtmc 6-1:16.0: can't read capabilities [ 930.407433][T12919] usb 2-1: Using ep0 maxpacket: 32 [ 930.423670][T12919] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 930.455265][T12919] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 930.470981][T12919] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 930.482744][T12919] usb 2-1: Product: syz [ 930.488952][T12919] usb 2-1: Manufacturer: syz [ 930.496178][T12919] usb 2-1: SerialNumber: syz [ 930.511020][T12919] usb 2-1: config 0 descriptor?? [ 930.522121][T30455] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 930.540528][T12919] hub 2-1:0.0: bad descriptor, ignoring hub [ 930.548429][T12919] hub 2-1:0.0: probe with driver hub failed with error -5 [ 930.756978][T30455] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 930.879767][ T5999] usb 2-1: USB disconnect, device number 90 [ 930.906338][T12911] usb 6-1: USB disconnect, device number 14 [ 931.217485][ T5999] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 931.397384][ T5999] usb 2-1: Using ep0 maxpacket: 32 [ 931.406183][ T5999] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 931.420950][ T5999] usb 2-1: string descriptor 0 read error: -22 [ 931.447549][ T5999] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 931.467822][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 931.511913][ T5999] usb 2-1: config 0 descriptor?? [ 931.523133][T30455] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 931.544985][ T5999] hub 2-1:0.0: bad descriptor, ignoring hub [ 931.561294][ T5999] hub 2-1:0.0: probe with driver hub failed with error -5 [ 931.890059][T12911] usb 2-1: USB disconnect, device number 91 [ 932.207754][T12911] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 932.368980][T12911] usb 5-1: Using ep0 maxpacket: 8 [ 932.381924][T12911] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 932.425638][T12911] usb 5-1: config 0 has no interface number 0 [ 932.456189][T12911] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 932.499152][T12911] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 932.550005][T12911] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 932.589949][T12911] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 932.614357][T12911] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 932.644207][T12911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.674335][T12911] usb 5-1: config 0 descriptor?? [ 932.727691][T12911] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 932.991086][T23410] usb 5-1: USB disconnect, device number 93 [ 933.011113][T23410] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 933.191860][T12911] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 933.347494][T12911] usb 1-1: Using ep0 maxpacket: 32 [ 933.355696][T12911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 933.369560][T12911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 933.379668][T12911] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 933.389033][T12911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.411341][T12911] usb 1-1: config 0 descriptor?? [ 933.870225][T12911] savu 0003:1E7D:2D5A.008D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 934.100885][T12911] usb 1-1: USB disconnect, device number 105 [ 934.967698][T12911] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 935.136779][T12911] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 935.172184][T12911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 935.195689][T12911] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.240154][T12911] usb 1-1: New USB device found, idVendor=0525, idProduct=86a1, bcdDevice= 0.40 [ 935.259455][T12911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.270551][T12911] usb 1-1: Product: syz [ 935.274805][T12911] usb 1-1: Manufacturer: syz [ 935.279651][T12911] usb 1-1: SerialNumber: syz [ 935.689162][T23410] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 935.857588][T23410] usb 5-1: Using ep0 maxpacket: 32 [ 935.880340][T23410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.920742][T23410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.951466][T23410] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 935.976468][T23410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.995890][T23410] usb 5-1: config 0 descriptor?? [ 936.101607][T30614] syzkaller1: entered promiscuous mode [ 936.109524][T30614] syzkaller1: entered allmulticast mode [ 936.321332][T12911] cdc_ncm 1-1:1.0: bind() failure [ 936.362914][T12911] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 936.386488][T12911] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 936.406238][T12911] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 936.466457][T12911] usb 1-1: USB disconnect, device number 106 [ 936.477886][T23410] savu 0003:1E7D:2D5A.008E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 936.710658][T12922] usb 5-1: USB disconnect, device number 94 [ 936.973195][T30640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10900'. [ 937.024857][T30646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.072743][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.079409][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.352840][T23410] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 937.400174][T30662] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 937.437736][ T5999] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 937.517317][T23410] usb 2-1: Using ep0 maxpacket: 32 [ 937.571561][T23410] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 937.623164][T23410] usb 2-1: config 0 has no interface number 0 [ 937.650048][T23410] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 937.674517][T23410] usb 2-1: config 0 interface 85 has no altsetting 0 [ 937.700157][T23410] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 937.717775][T23410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.743477][T23410] usb 2-1: Product: syz [ 937.759275][T23410] usb 2-1: Manufacturer: syz [ 937.802834][T23410] usb 2-1: SerialNumber: syz [ 937.826227][T23410] usb 2-1: config 0 descriptor?? [ 937.877740][ T5999] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 938.055216][T30649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.089505][T30649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.250069][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 938.250091][ T30] audit: type=1326 audit(1749967838.703:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.5.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4e98e929 code=0x7ffc0000 [ 938.482526][ T30] audit: type=1326 audit(1749967838.753:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.5.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d4e92ab19 code=0x7ffc0000 [ 938.573083][T23410] appletouch 2-1:0.85: Geyser mode initialized. [ 938.593952][ T30] audit: type=1326 audit(1749967838.753:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.5.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4e98e929 code=0x7ffc0000 [ 938.608022][T23410] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input114 [ 938.685570][ T30] audit: type=1326 audit(1749967838.753:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.5.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d4e92ab19 code=0x7ffc0000 [ 938.777458][ T30] audit: type=1326 audit(1749967838.753:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.5.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4e98e929 code=0x7ffc0000 [ 938.826400][T12922] usb 2-1: USB disconnect, device number 92 [ 938.856318][ T30] audit: type=1326 audit(1749967838.753:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.5.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4e98e929 code=0x7ffc0000 [ 938.890564][ T30] audit: type=1326 audit(1749967838.763:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.5.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d4e92ab19 code=0x7ffc0000 [ 938.921293][ T30] audit: type=1326 audit(1749967838.763:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.5.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4e98e929 code=0x7ffc0000 [ 938.957420][T12911] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 938.971149][ T30] audit: type=1326 audit(1749967838.773:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.5.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4e98e929 code=0x7ffc0000 [ 939.022907][T12922] appletouch 2-1:0.85: input: appletouch disconnected [ 939.065024][ T30] audit: type=1326 audit(1749967838.773:6803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30659 comm="syz.5.10909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4e98e929 code=0x7ffc0000 [ 939.123440][T12911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.145877][T12911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.156419][ T5838] Bluetooth: hci4: command 0x0406 tx timeout [ 939.183486][T12911] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 939.198577][T12911] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 939.208257][T12911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.220101][T12911] usb 6-1: config 0 descriptor?? [ 939.574243][T30690] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.10922'. [ 939.662605][T12911] plantronics 0003:047F:FFFF.008F: No inputs registered, leaving [ 939.692772][T12911] plantronics 0003:047F:FFFF.008F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 939.950528][T12911] usb 6-1: USB disconnect, device number 15 [ 940.827410][T12911] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 940.997334][T12911] usb 6-1: Using ep0 maxpacket: 32 [ 941.031490][T12911] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 941.060732][T12911] usb 6-1: config 0 has no interface number 0 [ 941.078171][T12911] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 941.091583][T12911] usb 6-1: config 0 interface 85 has no altsetting 0 [ 941.101531][T12911] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 941.114187][T12911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.122604][T12911] usb 6-1: Product: syz [ 941.126841][T12911] usb 6-1: Manufacturer: syz [ 941.164729][T12911] usb 6-1: SerialNumber: syz [ 941.173132][T12911] usb 6-1: config 0 descriptor?? [ 941.665530][T30756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10953'. [ 941.825195][T12911] appletouch 6-1:0.85: Geyser mode initialized. [ 941.842829][T12911] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input115 [ 942.047060][T12922] usb 6-1: USB disconnect, device number 16 [ 942.047207][ C0] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 942.079444][T30770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 942.160700][T12922] appletouch 6-1:0.85: input: appletouch disconnected [ 942.608032][T30785] binder: 30784:30785 ioctl c0306201 200000000480 returned -14 [ 943.135620][ T1117] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.242614][ T1117] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.257620][T12911] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 943.267970][T12919] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 943.331881][ T1117] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.446894][T12919] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 943.464138][ T1117] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 943.465600][T12911] usb 6-1: config 0 has an invalid interface number: 144 but max is 0 [ 943.475050][T12919] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 943.495957][T12911] usb 6-1: config 0 has no interface number 0 [ 943.496001][T12911] usb 6-1: too many endpoints for config 0 interface 144 altsetting 138: 68, using maximum allowed: 30 [ 943.496044][T12911] usb 6-1: config 0 interface 144 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 943.496075][T12911] usb 6-1: config 0 interface 144 has no altsetting 0 [ 943.496115][T12911] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 943.496141][T12911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.522547][T12911] usb 6-1: config 0 descriptor?? [ 943.552477][T12919] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 943.569761][T12911] cp210x 6-1:0.144: cp210x converter detected [ 943.576125][T12919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.810451][T30808] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10978'. [ 943.880292][T12919] usb 1-1: usb_control_msg returned -32 [ 943.886192][T12919] usbtmc 1-1:16.0: can't read capabilities [ 943.984479][T12911] cp210x 6-1:0.144: failed to get vendor val 0x000e size 3: -71 [ 944.047978][T12911] usb 6-1: cp210x converter now attached to ttyUSB0 [ 944.089815][T12911] usb 6-1: USB disconnect, device number 17 [ 944.128549][T12911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 944.194684][T12911] cp210x 6-1:0.144: device disconnected [ 944.220434][T30812] syzkaller1: entered promiscuous mode [ 944.265286][T30812] syzkaller1: entered allmulticast mode [ 944.513683][T12922] usb 1-1: USB disconnect, device number 107 [ 944.654450][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.670341][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.682226][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 944.691043][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 944.701947][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 945.172065][ T1117] gretap0 (unregistering): left promiscuous mode [ 945.248901][ T1117] dvmrp0 (unregistering): left allmulticast mode [ 945.337403][T12919] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 945.427474][T12922] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 945.502216][T12919] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 945.511287][T12919] usb 6-1: config 0 has no interface number 0 [ 945.517873][T12919] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 945.529039][T12919] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 945.541015][T12919] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 945.550443][T12919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.564186][T12919] usb 6-1: config 0 descriptor?? [ 945.578367][T30839] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 945.588114][T12922] usb 1-1: Using ep0 maxpacket: 32 [ 945.596320][ T1117] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 945.601839][T12922] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 945.617083][T12919] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 945.617107][ T1117] bond0 (unregistering): (slave bond2): Releasing backup interface [ 945.650715][ T1117] bond0 (unregistering): (slave team0): Releasing backup interface [ 945.651490][T12922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.680522][ T1117] bond0 (unregistering): Released all slaves [ 945.694274][T12922] usb 1-1: config 0 descriptor?? [ 945.705641][ T1117] bond1 (unregistering): Released all slaves [ 945.837571][T12920] usb 6-1: USB disconnect, device number 18 [ 945.848998][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 945.923580][T12922] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 945.955260][T12922] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 945.982288][ T1117] bond2 (unregistering): Released all slaves [ 945.983405][T12922] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 946.000315][T12922] usb 1-1: media controller created [ 946.002616][ T1117] bond3 (unregistering): Released all slaves [ 946.034318][T12922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 946.137994][T12922] az6027: usb out operation failed. (-71) [ 946.163477][T12922] az6027: usb out operation failed. (-71) [ 946.171164][T12922] stb0899_attach: Driver disabled by Kconfig [ 946.193935][T12922] az6027: no front-end attached [ 946.193935][T12922] [ 946.213045][T12922] az6027: usb out operation failed. (-71) [ 946.220079][T12922] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 946.233961][ T1117] : left promiscuous mode [ 946.259371][T12922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input116 [ 946.302089][T12922] dvb-usb: schedule remote query interval to 400 msecs. [ 946.315564][T12922] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 946.351180][T12922] usb 1-1: USB disconnect, device number 108 [ 946.403604][ T1117] tipc: Left network mode [ 946.589119][T12922] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 946.747431][ T5838] Bluetooth: hci0: command tx timeout [ 946.976345][T30828] chnl_net:caif_netlink_parms(): no params data found [ 947.760164][T23410] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 947.858912][T30828] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.881908][T30828] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.892813][T30828] bridge_slave_0: entered allmulticast mode [ 947.902770][T30828] bridge_slave_0: entered promiscuous mode [ 947.932214][ T1117] batadv_slave_1: left promiscuous mode [ 947.960944][T23410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.967138][ T1117] hsr_slave_0: left promiscuous mode [ 947.985785][T23410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.006508][ T1117] hsr_slave_1: left promiscuous mode [ 948.016596][T23410] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 948.032375][T23410] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 948.042078][T23410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.068213][T23410] usb 1-1: config 0 descriptor?? [ 948.380333][ T30] kauditd_printk_skb: 199 callbacks suppressed [ 948.380357][ T30] audit: type=1326 audit(1749967848.833:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30893 comm="syz.4.11001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf78e929 code=0x7fc00000 [ 948.497827][T12911] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 948.535607][T23410] plantronics 0003:047F:FFFF.0090: No inputs registered, leaving [ 948.578145][T23410] plantronics 0003:047F:FFFF.0090: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 948.689711][T12911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.705823][T12911] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 948.720876][T12911] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 948.759658][T12911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.789692][T12911] usb 6-1: config 0 descriptor?? [ 948.811451][T12911] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 948.821394][T12911] dvb-usb: bulk message failed: -22 (3/0) [ 948.833857][ T5838] Bluetooth: hci0: command tx timeout [ 948.851271][T23410] usb 1-1: USB disconnect, device number 109 [ 948.865696][T12911] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 948.884699][T12911] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 948.927798][T12911] usb 6-1: media controller created [ 948.943454][ T30] audit: type=1326 audit(1749967849.393:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30893 comm="syz.4.11001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8bbf72ab19 code=0x7fc00000 [ 948.969986][T12911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 949.006789][T12911] dvb-usb: bulk message failed: -22 (6/0) [ 949.034096][T12911] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 949.062861][T12911] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input118 [ 949.112630][T12911] dvb-usb: schedule remote query interval to 150 msecs. [ 949.137413][T12911] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 949.279486][T23410] dvb-usb: bulk message failed: -22 (1/0) [ 949.285319][T23410] dvb-usb: error while querying for an remote control event. [ 949.467461][T12911] dvb-usb: bulk message failed: -22 (1/0) [ 949.473297][T12911] dvb-usb: error while querying for an remote control event. [ 949.636175][ T43] usb 6-1: USB disconnect, device number 19 [ 949.690678][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 949.903630][T30924] loop3: detected capacity change from 0 to 1 [ 949.941762][T18580] Dev loop3: unable to read RDB block 1 [ 949.971773][T18580] loop3: AHDI p1 [ 949.989095][T18580] loop3: partition table partially beyond EOD, truncated [ 950.041865][T30924] Dev loop3: unable to read RDB block 1 [ 950.067555][T30924] loop3: AHDI p1 [ 950.077426][T30924] loop3: partition table partially beyond EOD, truncated [ 950.423369][T30934] input: syz0 as /devices/virtual/input/input119 [ 950.907512][ T5838] Bluetooth: hci0: command tx timeout [ 951.302694][T30828] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.311544][T30828] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.320522][T30828] bridge_slave_1: entered allmulticast mode [ 951.328811][T30828] bridge_slave_1: entered promiscuous mode [ 951.363943][T30932] @: renamed from vlan0 (while UP) [ 951.511623][T30955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11029'. [ 951.521050][T23410] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 951.579851][T30828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.659902][T30955] team1: entered promiscuous mode [ 951.676137][T30955] team1: entered allmulticast mode [ 951.684059][T30955] 8021q: adding VLAN 0 to HW filter on device team1 [ 951.695621][T30828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.719448][T23410] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 951.747811][T23410] usb 6-1: config 0 has no interface number 0 [ 951.757767][T23410] usb 6-1: config 0 interface 196 altsetting 72 has an invalid descriptor for endpoint zero, skipping [ 951.806930][T23410] usb 6-1: config 0 interface 196 has no altsetting 0 [ 951.827772][T12922] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 951.831165][T23410] usb 6-1: New USB device found, idVendor=1b3d, idProduct=0104, bcdDevice=bd.56 [ 951.897253][T23410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.916237][T30828] team0: Port device team_slave_0 added [ 951.924024][T23410] usb 6-1: config 0 descriptor?? [ 951.946414][T30828] team0: Port device team_slave_1 added [ 951.997344][T12922] usb 4-1: Using ep0 maxpacket: 16 [ 952.017652][T12922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.033028][T30967] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11032'. [ 952.049958][T12922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.080223][T12922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 952.101722][T12922] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 952.114179][T12922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.151867][T23410] usb 6-1: string descriptor 0 read error: -71 [ 952.163422][T12922] usb 4-1: config 0 descriptor?? [ 952.186844][T23410] ftdi_sio 6-1:0.196: FTDI USB Serial Device converter detected [ 952.213553][T30828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.228936][T23410] ftdi_sio ttyUSB0: unknown device type: 0xbd56 [ 952.245611][T30828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.289010][T23410] usb 6-1: USB disconnect, device number 20 [ 952.321293][T23410] ftdi_sio 6-1:0.196: device disconnected [ 952.340026][T30828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.377429][T30828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.386944][ T1117] IPVS: stop unused estimator thread 0... [ 952.403643][T30828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.438613][T30828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.640969][T12922] shield 0003:0955:7214.0091: unknown main item tag 0x0 [ 952.661764][T12922] shield 0003:0955:7214.0091: unknown main item tag 0x0 [ 952.685476][T12922] shield 0003:0955:7214.0091: unknown main item tag 0x0 [ 952.708477][T12922] shield 0003:0955:7214.0091: unknown main item tag 0x0 [ 952.717619][T12922] shield 0003:0955:7214.0091: unknown main item tag 0x0 [ 952.749241][T12922] input: HID 0955:7214 Haptics as /devices/virtual/input/input121 [ 952.850734][T30828] hsr_slave_0: entered promiscuous mode [ 952.874695][T12922] shield 0003:0955:7214.0091: Registered Thunderstrike controller [ 952.887156][T30828] hsr_slave_1: entered promiscuous mode [ 952.905642][T30828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 952.921263][T12922] shield 0003:0955:7214.0091: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 952.932637][T30828] Cannot create hsr debugfs directory [ 952.987527][ T5838] Bluetooth: hci0: command tx timeout [ 953.036234][T12919] shield 0003:0955:7214.0091: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 953.054896][T12922] usb 4-1: USB disconnect, device number 100 [ 953.061188][T12919] shield 0003:0955:7214.0091: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 953.109310][T12919] shield 0003:0955:7214.0091: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 953.156275][T12919] shield 0003:0955:7214.0091: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 953.207512][T23410] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 953.393338][T23410] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 953.426341][T23410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 953.491762][T23410] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 953.545535][T23410] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 953.564006][T30999] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.11042'. [ 953.641542][T23410] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 953.683116][T23410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.710536][T23410] usb 6-1: config 0 descriptor?? [ 954.159225][T23410] plantronics 0003:047F:FFFF.0092: ignoring exceeding usage max [ 954.196907][T23410] plantronics 0003:047F:FFFF.0092: No inputs registered, leaving [ 954.258320][T23410] plantronics 0003:047F:FFFF.0092: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 954.266362][T30828] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 954.356782][T30828] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 954.414318][T30828] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 954.529323][T30828] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 954.959273][T30828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.031441][T30828] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.061034][T26884] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.068322][T26884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.103946][T26884] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.111305][T26884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.455965][T30828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.514488][T23410] usb 6-1: USB disconnect, device number 21 [ 955.651373][T30828] veth0_vlan: entered promiscuous mode [ 955.686119][T30828] veth1_vlan: entered promiscuous mode [ 955.808224][T30828] veth0_macvtap: entered promiscuous mode [ 955.841306][T30828] veth1_macvtap: entered promiscuous mode [ 955.925509][T30828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.949857][T30828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.974005][T30828] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.984806][T30828] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.995630][T30828] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.005945][T30828] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.440744][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.491134][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.656169][T24408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.679503][T24408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.996875][T31085] input: syz0 as /devices/virtual/input/input123 [ 957.024382][T31085] input: failed to attach handler leds to device input123, error: -6 [ 957.208878][T12920] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 957.406822][T12920] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 957.451338][T12920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 957.477301][T12920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 957.492782][T12920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 957.506273][T12920] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 957.544853][T12920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.573897][T12920] usb 4-1: config 0 descriptor?? [ 957.591409][T31083] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 958.082457][T12920] plantronics 0003:047F:FFFF.0093: reserved main item tag 0xd [ 958.143884][T12920] plantronics 0003:047F:FFFF.0093: No inputs registered, leaving [ 958.254967][T12920] plantronics 0003:047F:FFFF.0093: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 958.399518][T12920] usb 4-1: USB disconnect, device number 101 [ 958.473011][T31120] fido_id[31120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 958.547654][T31126] loop4: detected capacity change from 0 to 524288000 [ 960.064723][ T30] audit: type=1326 audit(1749967860.513:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31179 comm="syz.3.11098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 960.179889][ T30] audit: type=1326 audit(1749967860.513:7006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31179 comm="syz.3.11098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 960.247463][ T30] audit: type=1326 audit(1749967860.543:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31179 comm="syz.3.11098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 960.364638][ T30] audit: type=1326 audit(1749967860.543:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31179 comm="syz.3.11098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 960.413293][ T30] audit: type=1326 audit(1749967860.543:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31179 comm="syz.3.11098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 960.495017][ T30] audit: type=1326 audit(1749967860.543:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31179 comm="syz.3.11098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 960.630676][ T30] audit: type=1326 audit(1749967860.543:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31179 comm="syz.3.11098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 960.719580][ T30] audit: type=1326 audit(1749967860.543:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31179 comm="syz.3.11098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 960.759169][T31201] gre0: Master is either lo or non-ether device [ 960.777552][ T30] audit: type=1326 audit(1749967860.543:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31179 comm="syz.3.11098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9bdc72ab19 code=0x7ffc0000 [ 960.807492][ T30] audit: type=1326 audit(1749967860.543:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31179 comm="syz.3.11098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bdc78e929 code=0x7ffc0000 [ 961.177334][T12920] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 961.339587][T12920] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 961.355884][T12920] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 961.393595][T12920] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 961.418938][T12920] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 961.482144][T12920] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 961.529242][T12920] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 961.560118][T12920] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 961.608372][T12920] usb 1-1: Product: syz [ 961.614011][T12920] usb 1-1: Manufacturer: syz [ 961.661861][T12920] cdc_wdm 1-1:1.0: skipping garbage [ 961.667178][T12920] cdc_wdm 1-1:1.0: skipping garbage [ 961.693675][T12920] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 961.708854][T12920] cdc_wdm 1-1:1.0: Unknown control protocol [ 961.723270][T31224] syzkaller1: entered promiscuous mode [ 961.741568][T31224] syzkaller1: entered allmulticast mode [ 961.929616][ C1] wdm_int_callback: 19 callbacks suppressed [ 961.929644][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 961.931928][T23410] usb 1-1: USB disconnect, device number 110 [ 961.935617][ C1] wdm_int_callback: 19 callbacks suppressed [ 961.935641][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 961.960339][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 962.567848][T12922] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 962.738614][T12922] usb 6-1: Using ep0 maxpacket: 16 [ 962.783248][T12922] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 962.813829][T12922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.863753][T12922] usb 6-1: Product: syz [ 962.866465][ T1117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.872905][T12922] usb 6-1: Manufacturer: syz [ 962.897478][T12922] usb 6-1: SerialNumber: syz [ 962.933524][T12922] usb 6-1: config 0 descriptor?? [ 963.004881][T12922] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 963.038153][T12922] usb 6-1: Detected FT232H [ 963.203900][T12922] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 963.240328][ T1117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.459438][T31264] team1: left promiscuous mode [ 963.470853][T31264] team1: left allmulticast mode [ 963.604607][ T1117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.682916][T12922] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 963.850503][ T1117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.885849][T12922] usb 6-1: USB disconnect, device number 22 [ 963.921494][T12922] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 963.948881][T12922] ftdi_sio 6-1:0.0: device disconnected [ 964.275881][ T1117] bridge_slave_1: left allmulticast mode [ 964.291443][ T1117] bridge_slave_1: left promiscuous mode [ 964.307862][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.331106][ T1117] bridge_slave_0: left allmulticast mode [ 964.336852][ T1117] bridge_slave_0: left promiscuous mode [ 964.346232][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.090685][ T30] kauditd_printk_skb: 98 callbacks suppressed [ 965.090717][ T30] audit: type=1326 audit(1749967865.543:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31298 comm="syz.4.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf78e929 code=0x7ffc0000 [ 965.183284][ T30] audit: type=1326 audit(1749967865.543:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31298 comm="syz.4.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf78e929 code=0x7ffc0000 [ 965.241122][ T30] audit: type=1326 audit(1749967865.573:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31298 comm="syz.4.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bbf78e929 code=0x7ffc0000 [ 965.269737][ T30] audit: type=1326 audit(1749967865.573:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31298 comm="syz.4.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf78e929 code=0x7ffc0000 [ 965.300621][ T30] audit: type=1326 audit(1749967865.603:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31298 comm="syz.4.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf78e929 code=0x7ffc0000 [ 965.328513][ T30] audit: type=1326 audit(1749967865.603:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31298 comm="syz.4.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8bbf78e929 code=0x7ffc0000 [ 965.382170][ T30] audit: type=1326 audit(1749967865.613:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31298 comm="syz.4.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf78e929 code=0x7ffc0000 [ 965.443634][ T30] audit: type=1326 audit(1749967865.613:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31298 comm="syz.4.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf78e929 code=0x7ffc0000 [ 965.529929][ T30] audit: type=1326 audit(1749967865.623:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31298 comm="syz.4.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f8bbf78e929 code=0x7ffc0000 [ 965.580133][ T30] audit: type=1326 audit(1749967865.623:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31298 comm="syz.4.11137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bbf78e929 code=0x7ffc0000 [ 965.726121][T19607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 965.749110][T31310] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.11141'. [ 965.749309][T19607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 965.770153][T19607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 965.799356][T19607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 965.817718][T19607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 966.170700][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.189759][ T1117] bond_slave_0: left promiscuous mode [ 966.195452][ T1117] bond_slave_0: left allmulticast mode [ 966.224381][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.236579][ T1117] bond_slave_1: left promiscuous mode [ 966.243851][ T1117] bond_slave_1: left allmulticast mode [ 966.251465][ T1117] bond0 (unregistering): Released all slaves [ 966.420637][ T1117] tipc: Left network mode [ 966.574948][T31325] netlink: 'syz.5.11145': attribute type 29 has an invalid length. [ 966.690121][T31325] netlink: 'syz.5.11145': attribute type 29 has an invalid length. [ 967.355996][T31353] syzkaller1: entered promiscuous mode [ 967.363534][T31353] syzkaller1: entered allmulticast mode [ 967.429301][T31361] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.11154'. [ 967.617353][ T1117] team0: left promiscuous mode [ 967.643559][ T1117] team_slave_0: left promiscuous mode [ 967.680006][ T1117] team_slave_1: left promiscuous mode [ 967.705677][ T1117] hsr_slave_0: left promiscuous mode [ 967.730608][ T1117] hsr_slave_1: left promiscuous mode [ 967.740852][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.751548][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.773707][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.914378][ T1117] veth1_macvtap: left promiscuous mode [ 967.947477][T19607] Bluetooth: hci2: command tx timeout [ 967.980551][ T1117] veth0_macvtap: left promiscuous mode [ 967.988943][ T1117] veth1_vlan: left promiscuous mode [ 967.994485][ T1117] veth0_vlan: left promiscuous mode [ 969.677500][T23410] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 969.832008][ T1117] team_slave_1 (unregistering): left allmulticast mode [ 969.845782][ T1117] team0 (unregistering): Port device team_slave_1 removed [ 969.850851][T23410] usb 1-1: Using ep0 maxpacket: 32 [ 969.873870][T23410] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 969.887377][T23410] usb 1-1: config 0 has no interface number 0 [ 969.907589][T23410] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 969.927069][T23410] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.943410][T23410] usb 1-1: Product: syz [ 969.957294][T23410] usb 1-1: Manufacturer: syz [ 969.964689][ T1117] team_slave_0 (unregistering): left allmulticast mode [ 969.967420][T23410] usb 1-1: SerialNumber: syz [ 969.986185][ T1117] team0 (unregistering): Port device team_slave_0 removed [ 970.004336][T23410] usb 1-1: config 0 descriptor?? [ 970.037598][T19607] Bluetooth: hci2: command tx timeout [ 970.046841][T23410] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 970.056555][T23410] usb 1-1: selecting invalid altsetting 1 [ 970.072611][T23410] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 970.095830][T23410] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 970.107697][T23410] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 970.117391][T23410] usb 1-1: media controller created [ 970.163675][T23410] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 971.284000][T31313] chnl_net:caif_netlink_parms(): no params data found [ 971.308173][T23410] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 971.315388][T23410] zl10353_read_register: readreg error (reg=127, ret==-110) [ 971.328936][T31394] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 971.369276][T23410] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 971.616199][T23410] usb 1-1: USB disconnect, device number 111 [ 971.895439][T31408] kvm: kvm [31407]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xf8 [ 971.907407][ T5999] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 972.034378][T31313] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.047431][T31313] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.057811][ T5999] usb 5-1: Using ep0 maxpacket: 8 [ 972.068536][ T5999] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 972.087626][T31313] bridge_slave_0: entered allmulticast mode [ 972.098599][ T5999] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 972.108817][T19607] Bluetooth: hci2: command tx timeout [ 972.116997][ T5999] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 972.129131][T31313] bridge_slave_0: entered promiscuous mode [ 972.138635][T31313] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.145781][ T5999] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 972.165845][T31313] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.173239][ T5999] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 972.195135][T31313] bridge_slave_1: entered allmulticast mode [ 972.203573][T31313] bridge_slave_1: entered promiscuous mode [ 972.209876][ T5999] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 972.233461][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.363487][T31313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.409306][T31313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.485866][ T5999] usb 5-1: usb_control_msg returned -32 [ 972.507098][ T5999] usbtmc 5-1:16.0: can't read capabilities [ 972.523669][ T1117] IPVS: stop unused estimator thread 0... [ 972.609128][T31313] team0: Port device team_slave_0 added [ 972.648818][T31313] team0: Port device team_slave_1 added [ 972.734047][T31427] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.11175'. [ 972.917877][T31313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.924922][T31313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.020751][T31313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.081350][T31313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.105630][T31313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.209083][T31313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.412677][T31313] hsr_slave_0: entered promiscuous mode [ 973.451250][T31313] hsr_slave_1: entered promiscuous mode [ 973.494128][T31450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11183'. [ 973.746578][T31454] syzkaller1: entered promiscuous mode [ 973.765585][T31454] syzkaller1: entered allmulticast mode [ 974.187587][T19607] Bluetooth: hci2: command tx timeout [ 974.315575][T31313] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 974.355545][T31313] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 974.386541][T31313] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 974.432694][T31313] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 974.756366][T12919] usb 5-1: USB disconnect, device number 95 [ 975.174578][T31313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.577817][T31313] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.780640][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.787946][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.862264][T26881] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.869649][T26881] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.133536][T31483] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11189'. [ 976.371184][T31313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.381386][T12922] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 976.487144][T31313] veth0_vlan: entered promiscuous mode [ 976.501775][T31313] veth1_vlan: entered promiscuous mode [ 976.559793][T12922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 976.582354][T12922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 976.634094][T12922] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 976.677415][T12922] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 976.696924][T12922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.749142][T12922] usb 5-1: config 0 descriptor?? [ 976.904803][T31313] veth0_macvtap: entered promiscuous mode [ 976.998714][T31313] veth1_macvtap: entered promiscuous mode [ 977.123508][T31313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.219977][T12922] plantronics 0003:047F:FFFF.0094: unknown main item tag 0x6 [ 977.252420][T12922] plantronics 0003:047F:FFFF.0094: No inputs registered, leaving [ 977.268689][T31313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.295798][T12922] plantronics 0003:047F:FFFF.0094: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 977.335262][T31313] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.359251][T31313] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.369036][T31313] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.378147][T31313] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.510726][ T5999] usb 5-1: USB disconnect, device number 96 [ 977.934396][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.980227][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.157876][T26884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 978.184706][T26884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.298554][T31555] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 979.177507][T23410] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 979.339909][T23410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 979.369575][T23410] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 979.391664][T23410] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 979.438866][T23410] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 979.474299][T23410] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.484735][T23410] usb 5-1: Product: syz [ 979.495489][T23410] usb 5-1: Manufacturer: syz [ 979.501106][T23410] usb 5-1: SerialNumber: syz [ 979.510037][T31596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11219'. [ 979.517940][T23410] usb 5-1: config 0 descriptor?? [ 979.525031][T31574] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 979.545596][T31574] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 979.581086][T23410] usb 5-1: ucan: probing device on interface #0 [ 980.203495][T23410] ucan 5-1:0.0 can0: registered device [ 980.394949][T23410] ucan 5-1:0.0 can0: firmware string: unknown [ 980.423231][T23410] usb 5-1: USB disconnect, device number 97 [ 980.603469][T31625] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 980.616801][T31625] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 980.626048][T31625] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 980.754722][T31631] netlink: 'syz.5.11225': attribute type 10 has an invalid length. [ 980.774516][T31631] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11225'. [ 980.842666][T31631] team0: Port device geneve0 added [ 981.572708][ T5999] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 981.744059][ T5999] usb 5-1: Using ep0 maxpacket: 8 [ 981.765672][ T5999] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 981.798010][ T5999] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 981.821979][ T5999] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 981.857419][ T10] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 981.890401][ T5999] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 981.927307][ T5999] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 981.971821][ T5999] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 982.000669][ T5999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.060028][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 982.069041][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 982.082705][ T10] usb 1-1: config 0 has no interface number 0 [ 982.108791][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 982.144299][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 982.164029][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.198134][ T10] usb 1-1: Product: syz [ 982.202463][ T10] usb 1-1: Manufacturer: syz [ 982.253193][ T10] usb 1-1: SerialNumber: syz [ 982.258911][ T5999] usb 5-1: GET_CAPABILITIES returned 0 [ 982.284576][ T5999] usbtmc 5-1:16.0: can't read capabilities [ 982.292496][ T10] usb 1-1: config 0 descriptor?? [ 982.355896][ T10] smsc75xx v1.0.0 [ 982.572326][T12911] usb 5-1: USB disconnect, device number 98 [ 982.578590][T31653] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 982.930607][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 982.956313][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 983.312501][T31702] [ 983.314920][T31702] ===================================================== [ 983.321902][T31702] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 983.329597][T31702] 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 Not tainted [ 983.336760][T31702] ----------------------------------------------------- [ 983.343749][T31702] syz.6.11242/31702 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 983.351610][T31702] ffff888057e1bbe8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 983.360417][T31702] [ 983.360417][T31702] and this task is already holding: [ 983.367826][T31702] ffff88807a153028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 983.377624][T31702] which would create a new lock dependency: [ 983.383551][T31702] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 983.391686][T31702] [ 983.391686][T31702] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 983.401264][T31702] (&dev->event_lock#2){..-.}-{3:3} [ 983.401314][T31702] [ 983.401314][T31702] ... which became SOFTIRQ-irq-safe at: [ 983.414339][T31702] lock_acquire+0x120/0x360 [ 983.418988][T31702] _raw_spin_lock_irqsave+0xa7/0xf0 [ 983.424313][T31702] input_inject_event+0xab/0x320 [ 983.429472][T31702] led_trigger_event+0x138/0x210 [ 983.434650][T31702] kbd_bh+0x1c6/0x2e0 [ 983.438783][T31702] tasklet_action_common+0x36c/0x580 [ 983.444181][T31702] handle_softirqs+0x286/0x870 [ 983.449093][T31702] __irq_exit_rcu+0xca/0x1f0 [ 983.453815][T31702] irq_exit_rcu+0x9/0x30 [ 983.458183][T31702] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 983.463955][T31702] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 983.470068][T31702] lock_is_held_type+0x137/0x190 [ 983.475249][T31702] __might_resched+0xa6/0x610 [ 983.480052][T31702] console_conditional_schedule+0x2a/0x40 [ 983.485897][T31702] fbcon_redraw+0x261/0x420 [ 983.490512][T31702] fbcon_scroll+0x38b/0x820 [ 983.495200][T31702] con_scroll+0x784/0xa10 [ 983.499668][T31702] csi_ECMA+0x2193/0x6990 [ 983.504135][T31702] do_con_write+0x4169/0x5200 [ 983.508943][T31702] con_write+0x24/0x40 [ 983.513126][T31702] n_tty_write+0xd35/0x11d0 [ 983.517778][T31702] file_tty_write+0x500/0x990 [ 983.522618][T31702] vfs_write+0x548/0xa90 [ 983.526971][T31702] ksys_write+0x145/0x250 [ 983.531421][T31702] do_syscall_64+0xfa/0x3b0 [ 983.536041][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.542055][T31702] [ 983.542055][T31702] to a SOFTIRQ-irq-unsafe lock: [ 983.549186][T31702] (tasklist_lock){.+.+}-{3:3} [ 983.549223][T31702] [ 983.549223][T31702] ... which became SOFTIRQ-irq-unsafe at: [ 983.561897][T31702] ... [ 983.561910][T31702] lock_acquire+0x120/0x360 [ 983.569124][T31702] _raw_read_lock+0x36/0x50 [ 983.573751][T31702] __do_wait+0xde/0x740 [ 983.578020][T31702] do_wait+0x1f8/0x520 [ 983.582233][T31702] kernel_wait+0xab/0x170 [ 983.586683][T31702] call_usermodehelper_exec_work+0xbe/0x230 [ 983.592704][T31702] process_scheduled_works+0xae1/0x17b0 [ 983.598393][T31702] worker_thread+0x8a0/0xda0 [ 983.603092][T31702] kthread+0x70e/0x8a0 [ 983.607276][T31702] ret_from_fork+0x3fc/0x770 [ 983.611985][T31702] ret_from_fork_asm+0x1a/0x30 [ 983.616959][T31702] [ 983.616959][T31702] other info that might help us debug this: [ 983.616959][T31702] [ 983.627214][T31702] Chain exists of: [ 983.627214][T31702] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 983.627214][T31702] [ 983.640938][T31702] Possible interrupt unsafe locking scenario: [ 983.640938][T31702] [ 983.649395][T31702] CPU0 CPU1 [ 983.654906][T31702] ---- ---- [ 983.660301][T31702] lock(tasklist_lock); [ 983.664575][T31702] local_irq_disable(); [ 983.671355][T31702] lock(&dev->event_lock#2); [ 983.678593][T31702] lock(&client->buffer_lock); [ 983.686078][T31702] [ 983.689551][T31702] lock(&dev->event_lock#2); [ 983.694444][T31702] [ 983.694444][T31702] *** DEADLOCK *** [ 983.694444][T31702] [ 983.702626][T31702] 7 locks held by syz.6.11242/31702: [ 983.707956][T31702] #0: ffff88802a06f118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 983.717215][T31702] #1: ffff88802a06b230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 983.727396][T31702] #2: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 983.737115][T31702] #3: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 983.746746][T31702] #4: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 983.755937][T31702] #5: ffff88807a153028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 983.766177][T31702] #6: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 983.775292][T31702] [ 983.775292][T31702] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 983.785722][T31702] -> (&dev->event_lock#2){..-.}-{3:3} { [ 983.791467][T31702] IN-SOFTIRQ-W at: [ 983.795581][T31702] lock_acquire+0x120/0x360 [ 983.801946][T31702] _raw_spin_lock_irqsave+0xa7/0xf0 [ 983.809028][T31702] input_inject_event+0xab/0x320 [ 983.815835][T31702] led_trigger_event+0x138/0x210 [ 983.822643][T31702] kbd_bh+0x1c6/0x2e0 [ 983.828492][T31702] tasklet_action_common+0x36c/0x580 [ 983.835635][T31702] handle_softirqs+0x286/0x870 [ 983.842263][T31702] __irq_exit_rcu+0xca/0x1f0 [ 983.848716][T31702] irq_exit_rcu+0x9/0x30 [ 983.854828][T31702] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 983.862325][T31702] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 983.870155][T31702] lock_is_held_type+0x137/0x190 [ 983.877034][T31702] __might_resched+0xa6/0x610 [ 983.883579][T31702] console_conditional_schedule+0x2a/0x40 [ 983.891265][T31702] fbcon_redraw+0x261/0x420 [ 983.897627][T31702] fbcon_scroll+0x38b/0x820 [ 983.904004][T31702] con_scroll+0x784/0xa10 [ 983.910208][T31702] csi_ECMA+0x2193/0x6990 [ 983.916391][T31702] do_con_write+0x4169/0x5200 [ 983.922935][T31702] con_write+0x24/0x40 [ 983.928876][T31702] n_tty_write+0xd35/0x11d0 [ 983.935279][T31702] file_tty_write+0x500/0x990 [ 983.941914][T31702] vfs_write+0x548/0xa90 [ 983.948095][T31702] ksys_write+0x145/0x250 [ 983.954275][T31702] do_syscall_64+0xfa/0x3b0 [ 983.960627][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.968396][T31702] INITIAL USE at: [ 983.972431][T31702] lock_acquire+0x120/0x360 [ 983.978731][T31702] _raw_spin_lock_irqsave+0xa7/0xf0 [ 983.985700][T31702] input_inject_event+0xab/0x320 [ 983.992408][T31702] kbd_led_trigger_activate+0xbc/0x100 [ 983.999658][T31702] led_trigger_set+0x52a/0x950 [ 984.006210][T31702] led_trigger_set_default+0x260/0x2a0 [ 984.013461][T31702] led_classdev_register_ext+0x73d/0x930 [ 984.020873][T31702] input_leds_connect+0x517/0x790 [ 984.027663][T31702] input_register_device+0xceb/0x10b0 [ 984.034806][T31702] atkbd_connect+0x70e/0x9c0 [ 984.041189][T31702] serio_driver_probe+0x82/0xa0 [ 984.047902][T31702] really_probe+0x26a/0x9a0 [ 984.054264][T31702] __driver_probe_device+0x18c/0x2f0 [ 984.061313][T31702] driver_probe_device+0x4f/0x430 [ 984.068102][T31702] __driver_attach+0x452/0x700 [ 984.074628][T31702] bus_for_each_dev+0x230/0x2b0 [ 984.081250][T31702] serio_handle_event+0x1a2/0x860 [ 984.088044][T31702] process_scheduled_works+0xae1/0x17b0 [ 984.095358][T31702] worker_thread+0x8a0/0xda0 [ 984.101726][T31702] kthread+0x70e/0x8a0 [ 984.107562][T31702] ret_from_fork+0x3fc/0x770 [ 984.113965][T31702] ret_from_fork_asm+0x1a/0x30 [ 984.120513][T31702] } [ 984.123119][T31702] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 984.132264][T31702] -> (&client->buffer_lock){....}-{3:3} { [ 984.138035][T31702] INITIAL USE at: [ 984.141950][T31702] lock_acquire+0x120/0x360 [ 984.148062][T31702] _raw_spin_lock+0x2e/0x40 [ 984.154169][T31702] evdev_handle_get_val+0x70/0x9f0 [ 984.160894][T31702] evdev_ioctl_handler+0x1202/0x1f10 [ 984.167779][T31702] __se_sys_ioctl+0xf9/0x170 [ 984.173970][T31702] do_syscall_64+0xfa/0x3b0 [ 984.180064][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.187545][T31702] } [ 984.190064][T31702] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 984.198265][T31702] ... acquired at: [ 984.202082][T31702] lock_acquire+0x120/0x360 [ 984.206914][T31702] _raw_spin_lock+0x2e/0x40 [ 984.211628][T31702] evdev_handle_get_val+0x70/0x9f0 [ 984.217053][T31702] evdev_ioctl_handler+0x1202/0x1f10 [ 984.222571][T31702] __se_sys_ioctl+0xf9/0x170 [ 984.227392][T31702] do_syscall_64+0xfa/0x3b0 [ 984.232103][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.238217][T31702] [ 984.240576][T31702] [ 984.240576][T31702] the dependencies between the lock to be acquired [ 984.240591][T31702] and SOFTIRQ-irq-unsafe lock: [ 984.254159][T31702] -> (tasklist_lock){.+.+}-{3:3} { [ 984.259504][T31702] HARDIRQ-ON-R at: [ 984.263685][T31702] lock_acquire+0x120/0x360 [ 984.270236][T31702] _raw_read_lock+0x36/0x50 [ 984.276779][T31702] __do_wait+0xde/0x740 [ 984.282976][T31702] do_wait+0x1f8/0x520 [ 984.289157][T31702] kernel_wait+0xab/0x170 [ 984.295512][T31702] call_usermodehelper_exec_work+0xbe/0x230 [ 984.303453][T31702] process_scheduled_works+0xae1/0x17b0 [ 984.311133][T31702] worker_thread+0x8a0/0xda0 [ 984.317798][T31702] kthread+0x70e/0x8a0 [ 984.323984][T31702] ret_from_fork+0x3fc/0x770 [ 984.330609][T31702] ret_from_fork_asm+0x1a/0x30 [ 984.337397][T31702] SOFTIRQ-ON-R at: [ 984.341619][T31702] lock_acquire+0x120/0x360 [ 984.348160][T31702] _raw_read_lock+0x36/0x50 [ 984.354697][T31702] __do_wait+0xde/0x740 [ 984.360878][T31702] do_wait+0x1f8/0x520 [ 984.367064][T31702] kernel_wait+0xab/0x170 [ 984.373539][T31702] call_usermodehelper_exec_work+0xbe/0x230 [ 984.381471][T31702] process_scheduled_works+0xae1/0x17b0 [ 984.389050][T31702] worker_thread+0x8a0/0xda0 [ 984.395663][T31702] kthread+0x70e/0x8a0 [ 984.401772][T31702] ret_from_fork+0x3fc/0x770 [ 984.408662][T31702] ret_from_fork_asm+0x1a/0x30 [ 984.415536][T31702] INITIAL USE at: [ 984.419626][T31702] lock_acquire+0x120/0x360 [ 984.426071][T31702] _raw_write_lock_irq+0xa2/0xf0 [ 984.432954][T31702] copy_process+0x224f/0x3c00 [ 984.439571][T31702] kernel_clone+0x21e/0x870 [ 984.446014][T31702] user_mode_thread+0xdd/0x140 [ 984.452805][T31702] rest_init+0x23/0x300 [ 984.458993][T31702] start_kernel+0x47d/0x500 [ 984.465432][T31702] x86_64_start_reservations+0x24/0x30 [ 984.472853][T31702] x86_64_start_kernel+0x143/0x1c0 [ 984.479958][T31702] common_startup_64+0x13e/0x147 [ 984.486936][T31702] INITIAL READ USE at: [ 984.491467][T31702] lock_acquire+0x120/0x360 [ 984.498385][T31702] _raw_read_lock+0x36/0x50 [ 984.505442][T31702] __do_wait+0xde/0x740 [ 984.511980][T31702] do_wait+0x1f8/0x520 [ 984.518427][T31702] kernel_wait+0xab/0x170 [ 984.525485][T31702] call_usermodehelper_exec_work+0xbe/0x230 [ 984.533767][T31702] process_scheduled_works+0xae1/0x17b0 [ 984.541787][T31702] worker_thread+0x8a0/0xda0 [ 984.548746][T31702] kthread+0x70e/0x8a0 [ 984.555200][T31702] ret_from_fork+0x3fc/0x770 [ 984.562176][T31702] ret_from_fork_asm+0x1a/0x30 [ 984.569313][T31702] } [ 984.571996][T31702] ... key at: [] tasklist_lock+0x18/0x40 [ 984.579945][T31702] ... acquired at: [ 984.584028][T31702] lock_acquire+0x120/0x360 [ 984.588746][T31702] _raw_read_lock+0x36/0x50 [ 984.593456][T31702] send_sigio+0x101/0x370 [ 984.597986][T31702] dnotify_handle_event+0x169/0x440 [ 984.603385][T31702] fsnotify+0x1814/0x1a80 [ 984.607915][T31702] vfs_mkdir+0x477/0x510 [ 984.612364][T31702] do_mkdirat+0x247/0x590 [ 984.616906][T31702] __x64_sys_mkdirat+0x87/0xa0 [ 984.621875][T31702] do_syscall_64+0xfa/0x3b0 [ 984.626603][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.632906][T31702] [ 984.635251][T31702] -> (&f_owner->lock){....}-{3:3} { [ 984.640592][T31702] INITIAL USE at: [ 984.644709][T31702] lock_acquire+0x120/0x360 [ 984.651086][T31702] _raw_write_lock_irq+0xa2/0xf0 [ 984.657819][T31702] __f_setown+0x67/0x370 [ 984.663846][T31702] f_setown+0x23a/0x300 [ 984.669863][T31702] sock_ioctl+0x5c5/0x790 [ 984.675966][T31702] __se_sys_ioctl+0xf9/0x170 [ 984.682341][T31702] do_syscall_64+0xfa/0x3b0 [ 984.688615][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.696276][T31702] INITIAL READ USE at: [ 984.700740][T31702] lock_acquire+0x120/0x360 [ 984.707467][T31702] _raw_read_lock_irqsave+0xaf/0x100 [ 984.714970][T31702] send_sigio+0x38/0x370 [ 984.721413][T31702] dnotify_handle_event+0x169/0x440 [ 984.728817][T31702] fsnotify+0x1814/0x1a80 [ 984.735352][T31702] vfs_set_acl+0xa43/0xb00 [ 984.741977][T31702] filename_setxattr+0x2e0/0x600 [ 984.749122][T31702] path_setxattrat+0x364/0x3a0 [ 984.756102][T31702] __x64_sys_setxattr+0xbc/0xe0 [ 984.763164][T31702] do_syscall_64+0xfa/0x3b0 [ 984.769886][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.777992][T31702] } [ 984.780602][T31702] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 984.789590][T31702] ... acquired at: [ 984.793500][T31702] lock_acquire+0x120/0x360 [ 984.798214][T31702] _raw_read_lock_irqsave+0xaf/0x100 [ 984.803712][T31702] send_sigio+0x38/0x370 [ 984.808155][T31702] kill_fasync+0x24d/0x4d0 [ 984.812858][T31702] lease_break_callback+0x26/0x30 [ 984.818102][T31702] __break_lease+0x6a5/0x1620 [ 984.822984][T31702] do_dentry_open+0xd62/0x1970 [ 984.827946][T31702] vfs_open+0x3b/0x340 [ 984.832222][T31702] path_openat+0x2ee5/0x3830 [ 984.837014][T31702] do_filp_open+0x1fa/0x410 [ 984.841725][T31702] do_sys_openat2+0x121/0x1c0 [ 984.846605][T31702] __x64_sys_open+0x11e/0x150 [ 984.851527][T31702] do_syscall_64+0xfa/0x3b0 [ 984.856248][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.862365][T31702] [ 984.864725][T31702] -> (&new->fa_lock){....}-{3:3} { [ 984.869890][T31702] INITIAL USE at: [ 984.873814][T31702] lock_acquire+0x120/0x360 [ 984.879917][T31702] _raw_write_lock_irq+0xa2/0xf0 [ 984.886464][T31702] fasync_remove_entry+0xf1/0x1c0 [ 984.893168][T31702] __fput+0x8a2/0xa70 [ 984.898767][T31702] task_work_run+0x1d1/0x260 [ 984.905061][T31702] exit_to_user_mode_loop+0xec/0x110 [ 984.911973][T31702] do_syscall_64+0x2bd/0x3b0 [ 984.918178][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.925697][T31702] INITIAL READ USE at: [ 984.930074][T31702] lock_acquire+0x120/0x360 [ 984.936617][T31702] _raw_read_lock_irqsave+0xaf/0x100 [ 984.943969][T31702] kill_fasync+0x199/0x4d0 [ 984.950424][T31702] mousedev_write+0x8f9/0x950 [ 984.957122][T31702] vfs_write+0x27e/0xa90 [ 984.963381][T31702] ksys_write+0x145/0x250 [ 984.969740][T31702] do_syscall_64+0xfa/0x3b0 [ 984.976264][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.984186][T31702] } [ 984.986701][T31702] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 984.995402][T31702] ... acquired at: [ 984.999225][T31702] lock_acquire+0x120/0x360 [ 985.003935][T31702] _raw_read_lock_irqsave+0xaf/0x100 [ 985.009423][T31702] kill_fasync+0x199/0x4d0 [ 985.014048][T31702] evdev_pass_values+0x627/0xbd0 [ 985.019276][T31702] evdev_events+0x1e6/0x340 [ 985.023978][T31702] input_pass_values+0x285/0x890 [ 985.029152][T31702] input_event_dispose+0x330/0x6b0 [ 985.034495][T31702] input_inject_event+0x1fe/0x320 [ 985.039764][T31702] evdev_write+0x2fc/0x480 [ 985.044395][T31702] vfs_write+0x27e/0xa90 [ 985.048840][T31702] ksys_write+0x145/0x250 [ 985.053378][T31702] do_syscall_64+0xfa/0x3b0 [ 985.058097][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.064199][T31702] [ 985.066533][T31702] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 985.066533][T31702] stack backtrace: [ 985.072453][T31702] CPU: 1 UID: 0 PID: 31702 Comm: syz.6.11242 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 985.072482][T31702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 985.072494][T31702] Call Trace: [ 985.072502][T31702] [ 985.072511][T31702] dump_stack_lvl+0x189/0x250 [ 985.072546][T31702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 985.072575][T31702] ? __pfx__printk+0x10/0x10 [ 985.072632][T31702] validate_chain+0x1f05/0x2140 [ 985.072661][T31702] __lock_acquire+0xab9/0xd20 [ 985.072689][T31702] ? kill_fasync+0x199/0x4d0 [ 985.072715][T31702] lock_acquire+0x120/0x360 [ 985.072739][T31702] ? kill_fasync+0x199/0x4d0 [ 985.072773][T31702] _raw_read_lock_irqsave+0xaf/0x100 [ 985.072799][T31702] ? kill_fasync+0x199/0x4d0 [ 985.072823][T31702] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 985.072848][T31702] ? do_raw_spin_lock+0x121/0x290 [ 985.072873][T31702] kill_fasync+0x199/0x4d0 [ 985.072902][T31702] ? kill_fasync+0x53/0x4d0 [ 985.072927][T31702] evdev_pass_values+0x627/0xbd0 [ 985.072951][T31702] ? evdev_pass_values+0x5a1/0xbd0 [ 985.072973][T31702] evdev_events+0x1e6/0x340 [ 985.072993][T31702] ? evdev_events+0x79/0x340 [ 985.073012][T31702] ? input_pass_values+0x8d/0x890 [ 985.073035][T31702] input_pass_values+0x285/0x890 [ 985.073057][T31702] ? input_handle_event+0x70c/0xf30 [ 985.073085][T31702] input_event_dispose+0x330/0x6b0 [ 985.073114][T31702] input_inject_event+0x1fe/0x320 [ 985.073141][T31702] ? input_inject_event+0xbc/0x320 [ 985.073174][T31702] evdev_write+0x2fc/0x480 [ 985.073196][T31702] ? __pfx_evdev_write+0x10/0x10 [ 985.073217][T31702] ? bpf_lsm_file_permission+0x9/0x20 [ 985.073244][T31702] ? security_file_permission+0x75/0x290 [ 985.073265][T31702] ? rw_verify_area+0x258/0x650 [ 985.073295][T31702] ? __pfx_evdev_write+0x10/0x10 [ 985.073318][T31702] vfs_write+0x27e/0xa90 [ 985.073337][T31702] ? __pfx_vfs_write+0x10/0x10 [ 985.073365][T31702] ? __fget_files+0x2a/0x420 [ 985.073386][T31702] ? __fget_files+0x2a/0x420 [ 985.073404][T31702] ? __fget_files+0x3a0/0x420 [ 985.073423][T31702] ? __fget_files+0x2a/0x420 [ 985.073450][T31702] ksys_write+0x145/0x250 [ 985.073467][T31702] ? __pfx_ksys_write+0x10/0x10 [ 985.073481][T31702] ? rcu_is_watching+0x15/0xb0 [ 985.073511][T31702] ? do_syscall_64+0xbe/0x3b0 [ 985.073529][T31702] do_syscall_64+0xfa/0x3b0 [ 985.073545][T31702] ? lockdep_hardirqs_on+0x9c/0x150 [ 985.073576][T31702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.073594][T31702] ? clear_bhb_loop+0x60/0xb0 [ 985.073613][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.073639][T31702] RIP: 0033:0x7f4c8378e929 [ 985.073656][T31702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.073673][T31702] RSP: 002b:00007f4c8456d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 985.073692][T31702] RAX: ffffffffffffffda RBX: 00007f4c839b5fa0 RCX: 00007f4c8378e929 [ 985.073710][T31702] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 985.073723][T31702] RBP: 00007f4c83810b39 R08: 0000000000000000 R09: 0000000000000000 [ 985.073735][T31702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 985.073746][T31702] R13: 0000000000000000 R14: 00007f4c839b5fa0 R15: 00007f4c83adfa28 [ 985.073765][T31702] [ 985.404997][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 985.416212][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 985.425997][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 985.435662][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 985.510952][ T10] usb 1-1: USB disconnect, device number 112 [ 986.336966][T26884] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.604087][T26884] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.738696][T26884] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.835907][T26884] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.988348][T26884] bridge_slave_1: left allmulticast mode [ 986.994095][T26884] bridge_slave_1: left promiscuous mode [ 987.007596][T26884] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.016629][T26884] bridge_slave_0: left allmulticast mode [ 987.035295][T26884] bridge_slave_0: left promiscuous mode [ 987.041321][T26884] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.196002][T26884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.212500][T26884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.222411][T26884] bond0 (unregistering): Released all slaves [ 987.478719][T26884] hsr_slave_0: left promiscuous mode [ 987.484723][T26884] hsr_slave_1: left promiscuous mode [ 987.492894][T26884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.501857][T26884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.512175][T26884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.520348][T26884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.535516][T26884] veth1_macvtap: left promiscuous mode [ 987.541338][T26884] veth0_macvtap: left promiscuous mode [ 987.551563][T26884] veth1_vlan: left promiscuous mode [ 987.556959][T26884] veth0_vlan: left promiscuous mode [ 987.765548][T26884] team0 (unregistering): Port device team_slave_1 removed [ 987.802266][T26884] team0 (unregistering): Port device team_slave_0 removed [ 988.285751][T26884] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.334264][T26884] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.402571][T26884] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.479107][T26884] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.596304][T26884] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.643779][T26884] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.716976][T26884] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.775250][T26884] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.892936][T26884] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.933204][T26884] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.974251][T26884] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.065935][T26884] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.188266][T26884] bridge_slave_1: left allmulticast mode [ 989.194005][T26884] bridge_slave_1: left promiscuous mode [ 989.200973][T26884] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.210810][T26884] bridge_slave_0: left allmulticast mode [ 989.216537][T26884] bridge_slave_0: left promiscuous mode [ 989.224716][T26884] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.234821][T26884] bridge_slave_1: left allmulticast mode [ 989.241310][T26884] bridge_slave_1: left promiscuous mode [ 989.247079][T26884] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.256102][T26884] bridge_slave_0: left allmulticast mode [ 989.263513][T26884] bridge_slave_0: left promiscuous mode [ 989.270531][T26884] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.285179][T26884] bridge_slave_1: left allmulticast mode [ 989.292230][T26884] bridge_slave_1: left promiscuous mode [ 989.298091][T26884] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.308456][T26884] bridge_slave_0: left allmulticast mode [ 989.314187][T26884] bridge_slave_0: left promiscuous mode [ 989.320024][T26884] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.503856][T26884] team0: Port device geneve0 removed [ 989.564324][T26884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.574969][T26884] bond_slave_0: left promiscuous mode [ 989.584591][T26884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.596347][T26884] bond_slave_1: left promiscuous mode [ 989.603188][T26884] bond0 (unregistering): Released all slaves [ 989.618442][T26884] bond1 (unregistering): Released all slaves [ 989.693750][T26884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.704281][T26884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.714224][T26884] bond0 (unregistering): Released all slaves [ 989.974622][T26884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.984023][T26884] bond_slave_0: left promiscuous mode [ 989.990964][T26884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.999869][T26884] bond_slave_1: left promiscuous mode [ 990.006525][T26884] bond0 (unregistering): (slave bond1): Releasing backup interface [ 990.015649][T26884] bond1 (unregistering): left promiscuous mode [ 990.023077][T26884] bond0 (unregistering): (slave team0): Releasing backup interface [ 990.031711][T26884] team0: left promiscuous mode [ 990.036517][T26884] team_slave_0: left promiscuous mode [ 990.042205][T26884] team_slave_1: left promiscuous mode [ 990.049006][T26884] bond0 (unregistering): Released all slaves [ 990.237129][T26884] bond1 (unregistering): Released all slaves [ 992.325442][T26884] hsr_slave_0: left promiscuous mode [ 992.334008][T26884] hsr_slave_1: left promiscuous mode [ 992.341166][T26884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.352600][T26884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.360870][T26884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.370757][T26884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.381861][T26884] hsr_slave_0: left promiscuous mode [ 992.388610][T26884] hsr_slave_1: left promiscuous mode [ 992.394583][T26884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.405300][T26884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.418693][T26884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.426193][T26884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.441047][T26884] hsr_slave_0: left promiscuous mode [ 992.455475][T26884] hsr_slave_1: left promiscuous mode [ 992.464919][T26884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.472858][T26884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.482794][T26884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.501225][T26884] veth1_macvtap: left promiscuous mode [ 992.506835][T26884] veth0_macvtap: left promiscuous mode [ 992.512986][T26884] veth1_vlan: left promiscuous mode [ 992.518865][T26884] veth0_vlan: left promiscuous mode [ 992.525030][T26884] veth1_macvtap: left promiscuous mode [ 992.531036][T26884] veth0_macvtap: left promiscuous mode [ 992.536959][T26884] veth1_vlan: left promiscuous mode [ 992.542457][T26884] veth0_vlan: left promiscuous mode [ 992.554821][T26884] veth1_macvtap: left promiscuous mode [ 992.560531][T26884] veth0_macvtap: left promiscuous mode [ 992.566168][T26884] veth1_vlan: left promiscuous mode [ 992.571650][T26884] veth0_vlan: left promiscuous mode [ 992.890655][T26884] team0 (unregistering): Port device team_slave_1 removed [ 992.932747][T26884] team0 (unregistering): Port device team_slave_0 removed [ 993.162510][T26884] team0 (unregistering): Port device team_slave_1 removed [ 993.201249][T26884] team0 (unregistering): Port device team_slave_0 removed