last executing test programs: 9.498434457s ago: executing program 0 (id=4566): userfaultfd(0x801) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'bridge_slave_0\x00', &(0x7f0000000800)=@ethtool_per_queue_op={0x4b, 0x14, [0x3, 0x0, 0x5, 0x5, 0x5, 0x10001, 0x7, 0xc0, 0xc205, 0x0, 0x5, 0x1, 0xd7e3, 0xffff, 0x81, 0x2, 0x1, 0x6, 0x100, 0x2, 0x1, 0x7, 0x0, 0x3, 0x2, 0x308, 0x7fff, 0x3fff8000, 0x1, 0x0, 0x6, 0x8adf, 0x101, 0x8, 0x7, 0x371b46f3, 0x1, 0x80000000, 0xffffe8c0, 0x1, 0xfffffe15, 0x401, 0x800, 0x4, 0x2, 0x4, 0x3, 0x3ff, 0x7, 0x3, 0x8, 0x2, 0x8, 0x7fffffff, 0x0, 0xffffff31, 0x8, 0x1ff, 0x1, 0x2, 0x8, 0x8, 0x2, 0xfffffffd, 0xfffffffa, 0xa, 0xb96d, 0x7, 0x2, 0x6, 0x4, 0x26, 0x5, 0xffffffa5, 0x5, 0x7, 0x0, 0x0, 0x2, 0x7fff, 0x40, 0x5b, 0x57d5, 0x101, 0x8, 0x4, 0xffffffff, 0x1, 0x7, 0x7, 0x7f, 0xc6, 0x401, 0x9, 0xfffffff0, 0x8, 0x6, 0x3, 0x3ff, 0xcb, 0x3, 0x800, 0x5, 0xffffff81, 0xf0, 0x8, 0x9, 0x7f2, 0x46e7, 0x8, 0xffffffff, 0x7, 0x8, 0x101, 0xc5, 0x2e5, 0x81, 0x2, 0x3, 0x7fffffff, 0x7, 0x2, 0x5, 0x9, 0x20000000, 0xfffffadb, 0x0, 0xffffffff]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x1, 0x6, 0xf098, 0x4, 0x5, 0x8, 0x8, {0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x7255e9e7, 0x5, 0x6, 0x80000001, 0x6}}, &(0x7f00000002c0)=0xb0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, 0x0, 0x200000c5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = dup2(r6, r4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r7, 0x4) 7.562436336s ago: executing program 0 (id=4573): unshare(0x8000000) r0 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x4}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.88551535s ago: executing program 1 (id=4577): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x54d00000) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005480)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x3c, 0x2, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000080)={0x0, 0x80080}, 0x20) 6.588892531s ago: executing program 0 (id=4580): socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80040, 0x61) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) fcntl$setsig(r4, 0xa, 0x33) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) r6 = socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0xc) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x10010, r6, 0x837d8000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r7, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r7, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r7, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x20, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x16, 0x0, 0x1, [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) epoll_pwait(r4, 0x0, 0x0, 0x10001, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 6.559599219s ago: executing program 2 (id=4581): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.515304888s ago: executing program 0 (id=4585): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x19, 0x7, {0x7, 0xe, "fe52d83db7"}}, 0x0}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0xf, 0x6, "aed2e1a3120f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000640)={0x40, 0xd, 0x3, "9de1cd"}, 0x0, 0x0, 0x0, 0x0}) 4.492347371s ago: executing program 1 (id=4586): socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80040, 0x61) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) fcntl$setsig(r4, 0xa, 0x33) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x0, 0xc8, 0x8, 0x1c0, 0x5803, 0x408, 0x2e8, 0x2e8, 0x408, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xd8, 0x0, {0x0, 0x2000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.390679598s ago: executing program 2 (id=4588): unshare(0x22020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x1, 0xffffffffffffffff, 0x1}) 3.207003005s ago: executing program 2 (id=4589): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 3.010682844s ago: executing program 2 (id=4591): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x1}], 0x1) 2.76673564s ago: executing program 1 (id=4592): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a00", @ANYRES32, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.737379631s ago: executing program 3 (id=4594): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20181, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 2.583619765s ago: executing program 1 (id=4596): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000000)=0x54d00000) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005480)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x3c, 0x2, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000080)={0x0, 0x80080}, 0x20) 2.005586111s ago: executing program 2 (id=4598): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f00000000c0)={0x2, 0xffffffff, 0xd}) 1.347714157s ago: executing program 2 (id=4599): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7}}}}}]}}]}}, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x7, 0x8, {0x8, 0xd, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.275503198s ago: executing program 0 (id=4600): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x3c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xe) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)=""/237, 0xed}], 0x1}, 0x7}], 0x1, 0x120, 0x0) 1.225459296s ago: executing program 4 (id=4601): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000003cc0)=@overlay={0x7, 0x8, 0x4, 0x0, 0x3, {0x0, 0x2710}, {0x3, 0x2, 0x80, 0x2, 0x18, 0xff, "41c4f9e0"}, 0x3, 0x3, {}, 0x7}) 1.048403606s ago: executing program 4 (id=4602): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) 1.027678342s ago: executing program 0 (id=4603): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x9, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4050}, 0x26004090) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000002a80)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) 936.157601ms ago: executing program 4 (id=4604): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000480)="a4d3", 0x2}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000080)=@gcm_256={{0x304}, "023408001e0100", "ab261fcfe10e5258aa02b1f7bf84f40e45f31d1d1a181a5d8ab3333d797f8578", "d0490700", "3728a8319359e731"}, 0x38) 826.095711ms ago: executing program 4 (id=4605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001c40)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x2, 0x3, 0x14}, @ipv4=@gre={{0x10, 0x4, 0x3, 0x3d, 0xfc3, 0x64, 0x0, 0x4, 0x2f, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x29, 0xf9d472f124d4b81c, [{0x1, 0xf, "88909c2e467489d0b767922bc6"}, {0x7, 0x9, "20890f4a207087"}, {0x5, 0x4, "1d15"}, {0x1, 0x7, "539dfeb74d"}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x41, 0x2, 0x0, 0x2}, 0x1, {0x8}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x88, 0x3, 0x0, 0x1, 0x3, 0x8}, 0x2, {0x3, 0x2, 0x1, 0x2, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "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"}}}}, 0xfd1) 690.100183ms ago: executing program 3 (id=4606): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005480)=@newtfilter={0x74, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x40, 0x2, [@TCA_MATCHALL_ACT={0x3c, 0x2, [@m_ife={0x38, 0x1, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) 495.747833ms ago: executing program 4 (id=4607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000000000038005080080003000aac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x0) 482.818972ms ago: executing program 3 (id=4608): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) close(r0) 401.706392ms ago: executing program 3 (id=4609): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @private=0xa010100}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 398.235362ms ago: executing program 1 (id=4610): ptrace(0x10, 0x0) msgget(0x1, 0x2b0) msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x2000) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="a902"], 0x8, 0x800) 343.704786ms ago: executing program 1 (id=4611): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000340)={'filter\x00', 0x0, [0x0, 0x6, 0x1, 0xff, 0x10001]}, &(0x7f0000000200)=0x54) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006040), 0x803) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x1, 0x11}, 0xffffffff, 0x10000000, 'id0\x00', 'timer1\x00', 0x0, 0x9, 0x201, 0xf9f6, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x74, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0xaa, 0x8c, 0x6, 0x2, 0x1, 0x0, 0x4}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x14}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, 0x0, 0x0) listen(r9, 0x0) r10 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r11 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001ac0)={r10, 0x0, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) r12 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) write$binfmt_elf64(r12, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x78) 27.749899ms ago: executing program 3 (id=4612): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x70) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000380)={0xb, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000440)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @local}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) 5.06765ms ago: executing program 3 (id=4613): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0b000000e2ffffff1c001a80180002801400018008000d"], 0x3c}}, 0x0) 0s ago: executing program 4 (id=4614): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0xfffffffffffffffa) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)={0x2, 0x8, 0x8, 0xff76}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) kernel console output (not intermixed with test programs): bing 046d:08ae [ 1974.863525][ T30] audit: type=1800 audit(1747612256.699:1877): pid=23455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3777" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1976.055954][T16760] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1976.190175][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.199740][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.184330][T16397] gspca_zc3xx: reg_w_i err -71 [ 1977.212270][T16397] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 1977.256474][T16397] usb 1-1: USB disconnect, device number 25 [ 1977.501499][T16760] usb 5-1: Using ep0 maxpacket: 16 [ 1978.188571][T16760] usb 5-1: device descriptor read/all, error -71 [ 1978.281514][T16397] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1979.643743][T16397] usb 1-1: config 0 has no interfaces? [ 1979.657092][T16397] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1979.687473][T16397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.719289][T16397] usb 1-1: Product: syz [ 1979.738473][T16397] usb 1-1: Manufacturer: syz [ 1979.754586][T16397] usb 1-1: SerialNumber: syz [ 1979.790370][T16397] usb 1-1: config 0 descriptor?? [ 1980.523299][T16397] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1980.531243][ C1] raw-gadget.2 gadget.4: ignoring, device is not running [ 1980.671689][T16397] usb 5-1: device descriptor read/64, error -32 [ 1980.911735][T16397] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1981.010796][T16395] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1981.099941][T16397] usb 5-1: Using ep0 maxpacket: 8 [ 1981.115401][T16397] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1981.161565][T16397] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1981.180897][T16395] usb 4-1: config 0 has no interfaces? [ 1981.206888][T16397] usb 5-1: config 0 has no interfaces? [ 1981.234030][T16395] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1981.251046][T16397] usb 5-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 1981.270755][T16395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.287942][T16397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.305914][T16395] usb 4-1: Product: syz [ 1981.317968][T16397] usb 5-1: Product: syz [ 1981.324080][T16395] usb 4-1: Manufacturer: syz [ 1981.335735][T16397] usb 5-1: Manufacturer: syz [ 1981.344061][T16395] usb 4-1: SerialNumber: syz [ 1981.356063][T16397] usb 5-1: SerialNumber: syz [ 1981.388249][T16395] usb 4-1: config 0 descriptor?? [ 1981.397145][T16397] usb 5-1: config 0 descriptor?? [ 1981.728001][T23494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1981.742592][T23494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1982.886816][T23505] input: syz1 as /devices/virtual/input/input70 [ 1982.945363][T23505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'. [ 1982.967053][T23505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'. [ 1984.408016][T16397] usb 1-1: USB disconnect, device number 26 [ 1985.473158][T16397] usb 4-1: USB disconnect, device number 47 [ 1985.543594][T16395] usb 5-1: USB disconnect, device number 57 [ 1985.703907][T23530] sctp: [Deprecated]: syz.4.3792 (pid 23530) Use of int in maxseg socket option. [ 1985.703907][T23530] Use struct sctp_assoc_value instead [ 1985.731568][T23530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3792'. [ 1986.391691][T16397] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1986.603578][T16397] usb 1-1: config 0 has no interfaces? [ 1986.661989][T16397] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1986.671116][T16397] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1986.704799][T16397] usb 1-1: Product: syz [ 1986.961640][T16397] usb 1-1: Manufacturer: syz [ 1987.014063][T23540] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3794'. [ 1987.091722][T16397] usb 1-1: SerialNumber: syz [ 1987.109578][T16397] usb 1-1: config 0 descriptor?? [ 1987.370448][T23544] ip6t_srh: unknown srh match flags B153 [ 1987.817191][T23552] netlink: 'syz.3.3795': attribute type 1 has an invalid length. [ 1987.865362][T23551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1987.974323][T23557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3795'. [ 1988.324704][T16761] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1988.436050][T23552] bond5: entered promiscuous mode [ 1988.441701][T23552] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1988.641114][T23544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1988.648880][T23544] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1988.671637][T23544] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1988.705105][T16761] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1988.748666][T16761] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1988.786657][T23544] bond5: (slave ip6gre1): making interface the new active one [ 1988.815091][T16761] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1988.845216][T23544] ip6gre1: entered promiscuous mode [ 1988.864491][T23544] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 1988.915084][T16761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1988.957705][T16761] usb 5-1: SerialNumber: syz [ 1988.991042][T16761] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1989.074543][T16761] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1989.115833][T16761] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1989.276095][T16761] scsi host1: usb-storage 5-1:1.0 [ 1989.945169][T23569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3798'. [ 1989.955896][T23569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3798'. [ 1990.582955][T16761] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1990.857918][T16761] usb 2-1: config 0 has no interfaces? [ 1990.939440][T16761] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1990.997898][T16761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.031673][T16761] usb 2-1: Product: syz [ 1991.047129][T16761] usb 2-1: Manufacturer: syz [ 1991.124128][T16761] usb 2-1: SerialNumber: syz [ 1991.139682][T16761] usb 2-1: config 0 descriptor?? [ 1992.615587][T23589] ALSA: mixer_oss: invalid index 40000 [ 1992.935901][T23596] delete_channel: no stack [ 1993.114872][ T30] audit: type=1800 audit(1747612274.889:1878): pid=23597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3806" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 1993.213239][T16397] usb 5-1: USB disconnect, device number 58 [ 1993.853898][T23602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3807'. [ 1994.128721][T16395] usb 2-1: USB disconnect, device number 34 [ 1994.510721][ T30] audit: type=1326 audit(1747612276.359:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.1.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x50000 [ 1994.663225][ T30] audit: type=1326 audit(1747612276.399:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.1.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x50000 [ 1994.798299][ T30] audit: type=1326 audit(1747612276.399:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.1.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x50000 [ 1994.870317][ T30] audit: type=1326 audit(1747612276.399:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.1.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x50000 [ 1994.999134][ T30] audit: type=1326 audit(1747612276.399:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.1.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x50000 [ 1995.074708][ T30] audit: type=1326 audit(1747612276.399:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.1.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x50000 [ 1995.285109][ T30] audit: type=1326 audit(1747612276.399:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.1.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x50000 [ 1995.332016][ T30] audit: type=1326 audit(1747612276.399:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.1.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x50000 [ 1995.377199][ T30] audit: type=1326 audit(1747612276.399:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23606 comm="syz.1.3808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x50000 [ 1996.829414][T16395] usb 1-1: USB disconnect, device number 27 [ 1996.841846][T16397] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1997.027614][T23628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3813'. [ 1997.037529][T16397] usb 5-1: Using ep0 maxpacket: 16 [ 1997.046603][T16397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1997.059701][T16397] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1997.070848][T16397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1997.084374][T16397] usb 5-1: Product: syz [ 1997.088821][T16397] usb 5-1: Manufacturer: syz [ 1997.095589][T16397] usb 5-1: SerialNumber: syz [ 1997.104304][T16397] usb 5-1: config 0 descriptor?? [ 1997.112536][T16397] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1997.134272][T16397] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1997.747229][T16397] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1998.168002][T16397] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1998.196032][T16397] em28xx 5-1:0.0: board has no eeprom [ 1998.501649][T23647] xt_hashlimit: max too large, truncated to 1048576 [ 1999.275293][ T30] kauditd_printk_skb: 3015 callbacks suppressed [ 1999.275308][ T30] audit: type=1326 audit(1747612281.129:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897d8e969 code=0x7ffc0000 [ 1999.307716][T23617] em28xx 5-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 1999.349097][ T30] audit: type=1326 audit(1747612281.169:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897d8e969 code=0x7ffc0000 [ 1999.381605][T16397] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1999.394579][T16397] em28xx 5-1:0.0: dvb set to bulk mode. [ 1999.416449][T16395] em28xx 5-1:0.0: Binding DVB extension [ 1999.431004][T16397] usb 5-1: USB disconnect, device number 59 [ 1999.445410][T16397] em28xx 5-1:0.0: Disconnecting em28xx [ 1999.461560][ T30] audit: type=1326 audit(1747612281.179:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f0897d8e969 code=0x7ffc0000 [ 1999.496791][ T30] audit: type=1326 audit(1747612281.179:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897d8e969 code=0x7ffc0000 [ 1999.520096][ T30] audit: type=1326 audit(1747612281.179:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897d8e969 code=0x7ffc0000 [ 1999.546676][ T30] audit: type=1326 audit(1747612281.179:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0897d8e969 code=0x7ffc0000 [ 1999.620127][ T30] audit: type=1326 audit(1747612281.179:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897d8e969 code=0x7ffc0000 [ 1999.701346][ T30] audit: type=1326 audit(1747612281.179:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897d8e969 code=0x7ffc0000 [ 1999.751718][ T30] audit: type=1326 audit(1747612281.179:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23654 comm="syz.0.3818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0897d8e969 code=0x7ffc0000 [ 1999.894130][T16395] em28xx 5-1:0.0: Registering input extension [ 1999.901788][T12249] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1999.911062][T16397] em28xx 5-1:0.0: Closing input extension [ 1999.934515][T16397] em28xx 5-1:0.0: Freeing device [ 2000.201478][T12249] usb 2-1: Using ep0 maxpacket: 8 [ 2000.657512][T12249] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2000.718676][T12249] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2000.753797][T12249] usb 2-1: config 0 has no interfaces? [ 2000.999333][ T30] audit: type=1800 audit(1747612282.819:4912): pid=23677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3821" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 2001.348755][T16395] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2001.701604][T16761] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 2001.701642][T16395] usb 5-1: Using ep0 maxpacket: 8 [ 2001.717143][T16395] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2001.729854][T16395] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2001.739714][T16395] usb 5-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 2001.748358][T16395] usb 5-1: Product: syz [ 2001.753013][T16395] usb 5-1: Manufacturer: syz [ 2001.757663][T16395] usb 5-1: SerialNumber: syz [ 2001.767408][T16395] usb 5-1: config 0 descriptor?? [ 2001.877623][T16395] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2001.937879][T16761] usb 1-1: Using ep0 maxpacket: 8 [ 2001.964770][T16761] usb 1-1: config 255 has an invalid interface number: 148 but max is 1 [ 2001.989177][T16761] usb 1-1: config 255 has an invalid interface number: 126 but max is 1 [ 2002.021266][T16761] usb 1-1: config 255 has no interface number 0 [ 2002.050431][T16761] usb 1-1: config 255 has no interface number 1 [ 2002.110297][T16761] usb 1-1: config 255 interface 148 altsetting 8 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 2002.123042][T16761] usb 1-1: config 255 interface 148 altsetting 8 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 2002.203696][T16761] usb 1-1: config 255 interface 148 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 2002.217095][T16761] usb 1-1: config 255 interface 126 altsetting 255 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 2002.231190][T16761] usb 1-1: config 255 interface 126 altsetting 255 endpoint 0xF has an invalid bInterval 255, changing to 7 [ 2002.243532][T16761] usb 1-1: config 255 interface 126 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 2002.255499][T16761] usb 1-1: config 255 interface 126 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 2002.269372][T16761] usb 1-1: config 255 interface 126 altsetting 255 has a duplicate endpoint with address 0x8, skipping [ 2002.283204][T16761] usb 1-1: config 255 interface 126 altsetting 255 endpoint 0x4 has invalid maxpacket 1608, setting to 1024 [ 2002.316646][T12249] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 2002.330137][T12249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.348770][T16761] usb 1-1: config 255 interface 126 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 1024 [ 2002.351571][T12249] usb 2-1: Product: syz [ 2002.378225][T12249] usb 2-1: Manufacturer: syz [ 2002.383529][T16761] usb 1-1: config 255 interface 148 has no altsetting 0 [ 2002.393036][T16761] usb 1-1: config 255 interface 126 has no altsetting 0 [ 2002.393048][T12249] usb 2-1: SerialNumber: syz [ 2002.413275][T16395] gspca_zc3xx: reg_w_i err -110 [ 2002.419531][T12249] usb 2-1: config 0 descriptor?? [ 2002.491291][T16761] usb 1-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=66.8e [ 2002.501095][T16761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2002.542948][T16761] usb 1-1: Product: 퉒ʪ吊됀뵗팾褬٢䍮䜿㿽꣔켙뾄焘턺茑䉂詽폤蚍觟雤ֹḡ༖助뜶⫞콏셯ん㨭弲㓵椂䖠↝ꎘ쭀뭉益慰Ɑ韭䁘벐Ო喭葯暪戦닼哔曇痻儆Ṝ࿲笁Ụ蛉븎 [ 2002.582994][T16761] usb 1-1: Manufacturer: ᐊ [ 2002.587815][T16761] usb 1-1: SerialNumber: 囀螺绕匀ᚣ岣鋑뫆隡켐ﵹ쁾꘶䯙쮘竡ꔐ莵 [ 2002.883161][T23680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2002.894114][T23680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.005755][T16761] usb 1-1: USB disconnect, device number 28 [ 2003.011638][T16395] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2003.018232][T16395] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 2003.927183][T16761] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2003.945361][T16395] usb 5-1: USB disconnect, device number 60 [ 2004.141610][T16761] usb 4-1: Using ep0 maxpacket: 16 [ 2004.232448][T16761] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2004.246460][T16761] usb 4-1: config 1 interface 0 altsetting 8 has an endpoint descriptor with address 0x68, changing to 0x8 [ 2004.260091][T16761] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2004.275156][T16761] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 2004.287301][T16761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.296476][T16761] usb 4-1: Product: syz [ 2004.300870][T16761] usb 4-1: Manufacturer: syz [ 2004.308514][T16761] usb 4-1: SerialNumber: syz [ 2006.787666][T23705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2007.016661][T16761] usb 4-1: can't set config #1, error -71 [ 2007.033305][T16761] usb 4-1: USB disconnect, device number 48 [ 2007.270348][T12249] usb 2-1: can't set config #0, error -71 [ 2007.414646][T12249] usb 2-1: USB disconnect, device number 35 [ 2010.407889][T23749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'. [ 2010.420014][T23749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3836'. [ 2010.431534][T12249] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2010.455589][T23749] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2010.494927][T23749] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2010.512785][T23749] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2010.533241][T23749] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2010.560691][T23749] geneve2: entered promiscuous mode [ 2010.567580][T23749] geneve2: entered allmulticast mode [ 2010.961486][T12249] usb 5-1: config 0 has no interfaces? [ 2011.022214][T12249] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2011.031356][T12249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.039594][T12249] usb 5-1: Product: syz [ 2011.070173][T12249] usb 5-1: Manufacturer: syz [ 2011.080347][T12249] usb 5-1: SerialNumber: syz [ 2011.102554][T12249] usb 5-1: config 0 descriptor?? [ 2014.211016][T16761] usb 5-1: USB disconnect, device number 61 [ 2014.419072][T23780] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 2016.791585][T16761] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 2016.942963][T16761] usb 1-1: Using ep0 maxpacket: 16 [ 2017.337488][T16761] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 2017.373420][T16761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2017.444796][T16761] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 2017.496418][T16761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2017.538265][T16761] usb 1-1: Product: syz [ 2017.557117][T16761] usb 1-1: Manufacturer: syz [ 2017.585989][T16761] usb 1-1: SerialNumber: syz [ 2017.612318][T16761] usb 1-1: config 0 descriptor?? [ 2017.636632][T16761] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 2017.766445][T23816] vivid-000: disconnect [ 2018.011622][T16760] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2018.087252][T23801] vivid-000: reconnect [ 2018.172113][T16761] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 2018.182171][T16760] usb 2-1: Using ep0 maxpacket: 8 [ 2018.199094][T16761] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2018.241527][T16760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2018.268367][T16760] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2018.310378][T16760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2018.383940][T16760] usb 2-1: config 0 descriptor?? [ 2018.489160][T16760] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2018.721724][T16760] gspca_vc032x: reg_r err -32 [ 2018.742064][T16760] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 2018.788809][T16760] usb 2-1: USB disconnect, device number 36 [ 2021.915701][T12249] usb 1-1: USB disconnect, device number 29 [ 2022.241528][ T30] audit: type=1800 audit(1747612304.079:4913): pid=23854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3855" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 2022.839216][T23857] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3856'. [ 2022.853118][T23857] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3856'. [ 2023.101669][T12249] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2023.263707][T12249] usb 4-1: Using ep0 maxpacket: 32 [ 2023.281067][T12249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2023.295521][T12249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 2023.326028][T12249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2023.364945][T12249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2023.388453][T12249] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2023.398385][T12249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.407583][T12249] usb 4-1: Product: syz [ 2023.412327][T12249] usb 4-1: Manufacturer: syz [ 2023.417048][T12249] usb 4-1: SerialNumber: syz [ 2023.428397][T12249] usb 4-1: config 0 descriptor?? [ 2023.518522][T12249] usb 4-1: no audio or video endpoints found [ 2023.938051][T23865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3858'. [ 2024.324707][T23871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3859'. [ 2024.432531][T12249] usb 4-1: USB disconnect, device number 49 [ 2026.179736][T23892] loop6: detected capacity change from 0 to 7 [ 2026.217411][T23892] Dev loop6: unable to read RDB block 7 [ 2026.232929][T23892] loop6: unable to read partition table [ 2026.251125][T23892] loop6: partition table beyond EOD, truncated [ 2026.268114][T23892] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 2026.558529][T23896] batadv_slave_1: entered allmulticast mode [ 2027.393957][T23895] batadv_slave_1: left allmulticast mode [ 2028.571840][T23903] xt_CT: No such helper "snmp" [ 2029.341822][T23929] ip6t_REJECT: ECHOREPLY is not supported [ 2029.591782][T12249] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 2029.753405][T12249] usb 1-1: Using ep0 maxpacket: 8 [ 2029.763517][T12249] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 2029.777778][T12249] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 2029.814428][T12249] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1144, setting to 1024 [ 2029.840601][T12249] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2029.862126][T12249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2029.894031][T23929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2030.129277][T23929] ptrace attach of "./syz-executor exec"[5849] was attempted by ""[23929] [ 2030.143751][T23929] veth1_to_bridge: entered allmulticast mode [ 2030.190111][T12249] usb 1-1: string descriptor 0 read error: -71 [ 2030.284182][T12249] usb 1-1: USB disconnect, device number 30 [ 2031.195492][T23947] hsr0: entered promiscuous mode [ 2031.204717][T23947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3875'. [ 2031.218914][T23947] hsr_slave_0: left promiscuous mode [ 2031.259316][T23947] hsr_slave_1: left promiscuous mode [ 2031.344784][T23947] hsr0 (unregistering): left promiscuous mode [ 2033.949424][T23974] usb usb8: usbfs: process 23974 (syz.2.3877) did not claim interface 0 before use [ 2034.063057][T23976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3878'. [ 2034.075465][T23976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3878'. [ 2034.752360][T23982] fuse: Bad value for 'fd' [ 2035.128542][T12249] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2035.349952][T12249] usb 2-1: Using ep0 maxpacket: 8 [ 2035.436776][T12249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2035.496372][T12249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2035.508816][T12249] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2035.519725][T12249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 2035.656490][T12249] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2035.711539][T12249] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2035.720648][T12249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2035.754101][T12249] usb 2-1: config 0 descriptor?? [ 2035.812540][T23981] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2037.616294][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.630358][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.685672][T16397] usb 2-1: USB disconnect, device number 37 [ 2037.692189][ T5840] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 2037.771184][T24000] xt_CT: No such helper "snmp" [ 2037.941972][T12249] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2037.983225][T24018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3887'. [ 2038.039382][T24010] input: syz0 as /devices/virtual/input/input77 [ 2038.121958][T12249] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2038.211647][T16760] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 2038.216377][T24025] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2038.232289][T12249] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2038.241496][T12249] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2038.249696][T24025] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2038.249842][T24018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3887'. [ 2038.258825][T12249] usb 4-1: Manufacturer: syz [ 2038.272389][T24025] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2038.284311][T12249] usb 4-1: SerialNumber: syz [ 2038.289450][T24025] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2038.343455][T12249] usb 4-1: config 0 descriptor?? [ 2038.358974][T24025] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 2038.367893][T16397] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2038.384253][T16760] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 2038.399452][T12249] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 2038.416578][T12249] usb 4-1: No valid video chain found. [ 2038.469380][T16760] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2038.554881][T16760] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 2038.577403][T16397] usb 2-1: config 0 has no interfaces? [ 2038.601630][T16760] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 2038.626599][T12249] usb 4-1: USB disconnect, device number 50 [ 2038.775436][T16760] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 2038.810933][T16760] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2038.897179][T16397] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2038.934930][T16760] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2038.959100][T16760] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2038.987041][T16760] usb 1-1: Product: syz [ 2038.990438][T16397] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.017632][T16397] usb 2-1: Product: syz [ 2039.043891][T16397] usb 2-1: Manufacturer: syz [ 2039.048690][T16760] usb 1-1: Manufacturer: syz [ 2039.058529][T16760] usb 1-1: SerialNumber: syz [ 2039.092542][T16760] usb 1-1: config 0 descriptor?? [ 2039.122039][T24019] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2039.138766][T16397] usb 2-1: SerialNumber: syz [ 2039.149143][T16760] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 2039.161138][T16397] usb 2-1: config 0 descriptor?? [ 2039.203551][T16760] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 2039.810521][T24024] input: syz1 as /devices/virtual/input/input76 [ 2040.901124][T16760] usb 1-1: USB disconnect, device number 31 [ 2040.971118][T16760] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 2041.437073][T16397] usb 2-1: USB disconnect, device number 38 [ 2042.003678][T24044] netlink: 'syz.0.3890': attribute type 7 has an invalid length. [ 2042.011794][T16397] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2042.077444][T24044] : entered promiscuous mode [ 2042.158420][T24044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3890'. [ 2042.167623][T24044] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2042.242310][T16397] usb 4-1: Using ep0 maxpacket: 16 [ 2043.735378][T24075] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2044.692984][T24084] binder_alloc: 24078: binder_alloc_buf size 16408 failed, no address space [ 2044.708492][T24084] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 2045.449322][T16760] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2045.831566][T16760] usb 5-1: config 0 has no interfaces? [ 2045.918879][T16760] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2046.009132][T16760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.114991][T16760] usb 5-1: Product: syz [ 2046.120469][T16760] usb 5-1: Manufacturer: syz [ 2046.146621][T16760] usb 5-1: SerialNumber: syz [ 2046.147179][T16397] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2046.155939][T16760] usb 5-1: config 0 descriptor?? [ 2046.186716][T16397] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2046.219648][T16397] usb 4-1: can't read configurations, error -71 [ 2046.449447][T24088] xt_CT: No such helper "snmp" [ 2046.515295][T24081] input: syz1 as /devices/virtual/input/input78 [ 2046.861557][T16397] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2047.041470][T16397] usb 4-1: Using ep0 maxpacket: 8 [ 2047.064317][T16397] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2047.089061][T16397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.120562][T16397] usb 4-1: Product: syz [ 2047.130835][T16397] usb 4-1: Manufacturer: syz [ 2047.149677][T16397] usb 4-1: SerialNumber: syz [ 2047.172223][T16397] usb 4-1: config 0 descriptor?? [ 2047.205452][T16397] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2047.784836][T12249] usb 5-1: USB disconnect, device number 62 [ 2048.377915][T24094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2048.390305][T24094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2048.511527][T24103] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2048.671828][T16397] gspca_sonixj: reg_w1 err -110 [ 2048.681605][T24103] usb 2-1: Using ep0 maxpacket: 8 [ 2048.688939][T24103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2048.711592][T16397] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 2048.725271][T24103] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2048.757479][T24103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.805510][T24103] usb 2-1: config 0 descriptor?? [ 2049.052921][T24103] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2049.464219][T24110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.474191][T24110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.626731][T24103] usb 2-1: USB disconnect, device number 39 [ 2050.491684][T16397] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 2050.575227][T16760] usb 4-1: USB disconnect, device number 52 [ 2050.707448][T16397] usb 5-1: config 0 has no interfaces? [ 2050.854370][T16397] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2050.901473][T16397] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.051630][T16397] usb 5-1: Product: syz [ 2051.061597][T16397] usb 5-1: Manufacturer: syz [ 2051.095991][T16397] usb 5-1: SerialNumber: syz [ 2051.149239][T16397] usb 5-1: config 0 descriptor?? [ 2051.154402][T16760] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2051.429778][T16760] usb 4-1: Using ep0 maxpacket: 8 [ 2051.450436][T16760] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2051.509426][T16760] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2051.518891][T16760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.533395][T16760] usb 4-1: Product: syz [ 2051.538995][T16760] usb 4-1: Manufacturer: syz [ 2051.545751][T16760] usb 4-1: SerialNumber: syz [ 2051.552823][T16760] usb 4-1: config 0 descriptor?? [ 2051.561767][T16760] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2052.281516][T16761] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 2052.444416][T16761] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.459767][T16761] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2052.500443][T16761] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2052.531286][T16761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2052.575613][T16761] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2052.610226][T16761] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 2052.638225][T24014] udevd[24014]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2052.844764][T24157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2052.879580][T24157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.837591][T16397] usb 5-1: USB disconnect, device number 63 [ 2054.186771][T24166] xt_CT: No such helper "snmp" [ 2054.461668][T16397] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2054.651608][T16397] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2054.672053][T16760] gspca_zc3xx: reg_r err -32 [ 2054.691542][T16760] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 2054.721317][T16397] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2054.741540][T16397] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2054.755011][T16397] usb 2-1: Manufacturer: syz [ 2054.771535][T16397] usb 2-1: SerialNumber: syz [ 2054.784683][T16397] usb 2-1: config 0 descriptor?? [ 2054.807239][T16397] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 2054.824897][T16397] usb 2-1: No valid video chain found. [ 2054.970913][T16760] usb 4-1: USB disconnect, device number 53 [ 2055.068797][T16397] usb 2-1: USB disconnect, device number 40 [ 2055.217833][T24103] usb 1-1: USB disconnect, device number 32 [ 2055.918513][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3921'. [ 2055.928770][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3921'. [ 2058.033148][T24216] xt_CT: No such helper "snmp" [ 2058.081569][T24103] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2058.277100][T24103] usb 5-1: config 0 has no interfaces? [ 2058.332153][T16760] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2058.412550][T24225] xt_CT: No such helper "snmp" [ 2058.435878][T24103] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2058.454702][T24103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.494610][T16760] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2058.507472][T16760] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2058.517305][T16760] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2058.519367][T24103] usb 5-1: Product: syz [ 2058.527696][T16760] usb 4-1: Manufacturer: syz [ 2058.535171][T16760] usb 4-1: SerialNumber: syz [ 2058.548633][T16760] usb 4-1: config 0 descriptor?? [ 2058.559325][T16760] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 2058.570222][T16760] usb 4-1: No valid video chain found. [ 2058.576257][T24103] usb 5-1: Manufacturer: syz [ 2058.617396][T24103] usb 5-1: SerialNumber: syz [ 2058.671518][T16761] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 2058.767089][T16760] usb 4-1: USB disconnect, device number 54 [ 2058.774984][T24103] usb 5-1: config 0 descriptor?? [ 2058.825118][T16761] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2058.854520][T16761] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2058.863974][T16761] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2058.876805][T16761] usb 1-1: Manufacturer: syz [ 2058.887157][T16761] usb 1-1: SerialNumber: syz [ 2058.908070][T16761] usb 1-1: config 0 descriptor?? [ 2058.923651][T16761] usb 1-1: Found UVC 0.00 device (046d:08c1) [ 2058.931038][T16761] usb 1-1: No valid video chain found. [ 2059.137711][T16761] usb 1-1: USB disconnect, device number 33 [ 2059.144193][T24214] program syz.4.3927 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2059.156438][T24214] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 2059.925363][T24245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2060.151054][T24245] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3933'. [ 2060.182018][T24245] netlink: 'syz.2.3933': attribute type 10 has an invalid length. [ 2061.277988][T24103] usb 5-1: USB disconnect, device number 64 [ 2061.485007][ T30] audit: type=1326 audit(1747612343.339:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24261 comm="syz.4.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c5f8e969 code=0x7ffc0000 [ 2061.540513][ T30] audit: type=1326 audit(1747612343.339:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24261 comm="syz.4.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c5f8e969 code=0x7ffc0000 [ 2061.614169][ T30] audit: type=1326 audit(1747612343.369:4916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24261 comm="syz.4.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fe9c5f8e969 code=0x7ffc0000 [ 2061.687500][ T30] audit: type=1326 audit(1747612343.369:4917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24261 comm="syz.4.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c5f8e969 code=0x7ffc0000 [ 2061.747959][ T30] audit: type=1326 audit(1747612343.369:4918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24261 comm="syz.4.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c5f8e969 code=0x7ffc0000 [ 2061.811550][ T30] audit: type=1326 audit(1747612343.369:4919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24261 comm="syz.4.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe9c5f8e969 code=0x7ffc0000 [ 2061.881541][ T30] audit: type=1326 audit(1747612343.369:4920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24261 comm="syz.4.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c5f8e969 code=0x7ffc0000 [ 2061.948870][T24269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3940'. [ 2061.974082][ T30] audit: type=1326 audit(1747612343.369:4921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24261 comm="syz.4.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c5f8e969 code=0x7ffc0000 [ 2062.045049][ T30] audit: type=1326 audit(1747612343.369:4922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24261 comm="syz.4.3939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe9c5f8e969 code=0x7ffc0000 [ 2062.817020][T24282] xt_CT: No such helper "snmp" [ 2063.101588][T24103] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2063.283854][T24103] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2063.313390][T24103] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2063.343608][T24103] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2063.377592][T24103] usb 4-1: Manufacturer: syz [ 2063.397891][T24103] usb 4-1: SerialNumber: syz [ 2063.412407][T24103] usb 4-1: config 0 descriptor?? [ 2063.430230][T24103] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 2063.458823][T24103] usb 4-1: No valid video chain found. [ 2063.650088][T24103] usb 4-1: USB disconnect, device number 55 [ 2064.841608][T24325] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3952'. [ 2065.086146][T24325] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 2066.653440][T24340] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 2066.660004][T24340] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2066.706309][T24341] netlink: 'syz.2.3959': attribute type 11 has an invalid length. [ 2066.751461][T24340] vhci_hcd vhci_hcd.0: Device attached [ 2066.810081][T24342] vhci_hcd: connection closed [ 2066.810515][ T53] vhci_hcd: stop threads [ 2066.848459][ T53] vhci_hcd: release socket [ 2066.876670][ T53] vhci_hcd: disconnect device [ 2066.921536][T16761] vhci_hcd: vhci_device speed not set [ 2067.072980][T24350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3961'. [ 2067.761219][T24361] xt_CT: No such helper "snmp" [ 2068.021441][T24103] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2068.190378][T24103] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2068.201737][T16761] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2068.342298][T24103] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2068.472833][T24103] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2068.494409][T24103] usb 2-1: Manufacturer: syz [ 2068.499072][T24103] usb 2-1: SerialNumber: syz [ 2068.532540][T24103] usb 2-1: config 0 descriptor?? [ 2068.566269][T24103] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 2068.593676][T24103] usb 2-1: No valid video chain found. [ 2068.771651][T24103] usb 2-1: USB disconnect, device number 41 [ 2069.024972][T16761] usb 4-1: config 0 has no interfaces? [ 2069.114741][T16761] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2069.138255][T16761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.156637][T16761] usb 4-1: Product: syz [ 2069.165023][T16761] usb 4-1: Manufacturer: syz [ 2069.175101][T16761] usb 4-1: SerialNumber: syz [ 2069.197655][T16761] usb 4-1: config 0 descriptor?? [ 2069.436404][T24389] netlink: 'syz.0.3973': attribute type 1 has an invalid length. [ 2069.696438][T24394] netlink: 'syz.3.3965': attribute type 4 has an invalid length. [ 2069.870196][T16761] usb 4-1: USB disconnect, device number 56 [ 2070.181509][T24103] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2070.491097][T24103] usb 2-1: config 0 has no interfaces? [ 2070.589845][T24103] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2070.637067][T24103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.680903][T24103] usb 2-1: Product: syz [ 2070.711805][T24103] usb 2-1: Manufacturer: syz [ 2070.754070][T24103] usb 2-1: SerialNumber: syz [ 2070.780293][T24103] usb 2-1: config 0 descriptor?? [ 2071.321990][T24407] netlink: 'syz.1.3976': attribute type 4 has an invalid length. [ 2071.527837][T24103] usb 2-1: USB disconnect, device number 42 [ 2072.006039][T24432] xt_CT: No such helper "snmp" [ 2072.651607][T16397] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2072.834089][T16397] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2072.996497][T16397] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2073.005987][T16397] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2073.024403][T16397] usb 4-1: Manufacturer: syz [ 2073.039392][T16397] usb 4-1: SerialNumber: syz [ 2073.070298][T16397] usb 4-1: config 0 descriptor?? [ 2073.093449][T16397] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 2073.110426][T16397] usb 4-1: No valid video chain found. [ 2073.286063][T16397] usb 4-1: USB disconnect, device number 57 [ 2073.391588][T16761] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 2073.603956][T16761] usb 5-1: Using ep0 maxpacket: 8 [ 2073.633396][T16761] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 2073.652076][T16761] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2073.662496][T21926] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 2073.672091][T16761] usb 5-1: config 0 has no interface number 0 [ 2073.821550][T21926] usb 1-1: Using ep0 maxpacket: 16 [ 2073.829084][T21926] usb 1-1: config index 0 descriptor too short (expected 1810, got 18) [ 2073.839930][T21926] usb 1-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 2073.850248][T21926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.884310][T21926] usb 1-1: config 0 descriptor?? [ 2073.914003][T21926] gspca_main: etoms-2.14.0 probing 102c:6151 [ 2073.992673][T16761] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2074.024824][T16761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.063115][T16761] usb 5-1: Product: syz [ 2074.074548][T16761] usb 5-1: Manufacturer: syz [ 2074.091074][T16761] usb 5-1: SerialNumber: syz [ 2074.265459][T16761] usb 5-1: config 0 descriptor?? [ 2074.270954][T21926] usb 1-1: USB disconnect, device number 34 [ 2074.337605][T16761] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 2074.374897][T16761] usb 5-1: No valid video chain found. [ 2074.903212][T24463] netlink: 'syz.2.3992': attribute type 10 has an invalid length. [ 2075.000728][T24463] loop6: detected capacity change from 0 to 63 [ 2075.386105][T24478] netlink: 368 bytes leftover after parsing attributes in process `syz.3.3996'. [ 2075.519223][T24478] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.537486][T24478] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.547345][T24478] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.557686][T24478] geneve2: entered promiscuous mode [ 2075.565446][T24478] geneve2: entered allmulticast mode [ 2075.902362][T24478] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2075.935446][T24478] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2075.950951][T24478] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2076.985374][T16397] usb 5-1: USB disconnect, device number 65 [ 2077.621663][T24103] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2077.629490][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 2077.787376][T24103] usb 1-1: device descriptor read/64, error -32 [ 2078.031670][T24103] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2078.041311][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 2078.183070][T24103] usb 1-1: device descriptor read/64, error -32 [ 2078.291883][T24103] usb usb1-port1: attempt power cycle [ 2078.652265][T24103] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2079.423324][T24103] usb 1-1: config 0 has no interfaces? [ 2079.797694][T24103] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2079.806963][T24103] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2079.833400][T24103] usb 1-1: Product: syz [ 2079.837767][T24103] usb 1-1: Manufacturer: syz [ 2079.842905][T24103] usb 1-1: SerialNumber: syz [ 2079.850050][T24103] usb 1-1: config 0 descriptor?? [ 2080.164144][T24533] netlink: 368 bytes leftover after parsing attributes in process `syz.4.4012'. [ 2081.336738][ T30] audit: type=1326 audit(1747612363.189:4923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.1.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2081.386751][ T30] audit: type=1326 audit(1747612363.189:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.1.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2081.409964][ T30] audit: type=1326 audit(1747612363.219:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.1.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2081.450708][ T30] audit: type=1326 audit(1747612363.219:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.1.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2081.592083][ T30] audit: type=1326 audit(1747612363.219:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.1.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2081.677407][ T30] audit: type=1326 audit(1747612363.219:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.1.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2081.704814][ T30] audit: type=1326 audit(1747612363.219:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.1.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2081.728474][ T30] audit: type=1326 audit(1747612363.219:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.1.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2081.782914][ T30] audit: type=1326 audit(1747612363.229:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24547 comm="syz.1.4016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2082.218900][T24567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4022'. [ 2082.397343][T24574] netlink: 368 bytes leftover after parsing attributes in process `syz.3.4023'. [ 2082.560389][T24574] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.571004][T24574] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.647414][T24574] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2082.724878][T24574] geneve2: entered promiscuous mode [ 2082.754600][T24574] geneve2: entered allmulticast mode [ 2082.777951][T16397] usb 1-1: USB disconnect, device number 37 [ 2082.849809][T24574] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.882896][T24574] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.895666][T24574] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.957684][T24601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4029'. [ 2083.983863][T24600] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4030'. [ 2084.123796][T24601] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 2087.910362][T24679] netlink: 'syz.0.4055': attribute type 11 has an invalid length. [ 2088.214168][T24674] xt_CT: No such helper "snmp" [ 2088.511781][T24103] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2088.704027][T24103] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.818449][T24103] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2088.838447][T24103] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2088.861673][T24103] usb 4-1: Manufacturer: syz [ 2088.866402][T24103] usb 4-1: SerialNumber: syz [ 2088.882671][T24103] usb 4-1: config 0 descriptor?? [ 2088.896917][T24103] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 2088.921466][T24103] usb 4-1: No valid video chain found. [ 2089.096585][T24103] usb 4-1: USB disconnect, device number 58 [ 2089.365369][T24715] netlink: 368 bytes leftover after parsing attributes in process `syz.4.4065'. [ 2089.648916][T24724] netlink: zone id is out of range [ 2089.654304][T24724] netlink: zone id is out of range [ 2089.661317][T24724] netlink: zone id is out of range [ 2089.667027][T24724] netlink: zone id is out of range [ 2089.677704][T24724] netlink: del zone limit has 4 unknown bytes [ 2089.831293][T24732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4070'. [ 2089.869937][T24732] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 2092.142433][T24759] xt_CT: No such helper "snmp" [ 2092.231449][T21926] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 2092.285887][T24776] xt_CT: No such helper "snmp" [ 2092.384682][T21926] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2092.400285][T21926] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2092.413281][T21926] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2092.422482][T21926] usb 4-1: Manufacturer: syz [ 2092.427948][T21926] usb 4-1: SerialNumber: syz [ 2092.439869][T21926] usb 4-1: config 0 descriptor?? [ 2092.457405][T21926] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 2092.465728][T21926] usb 4-1: No valid video chain found. [ 2092.531575][T16760] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2092.722931][T21926] usb 4-1: USB disconnect, device number 59 [ 2092.729767][T16760] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2092.753453][T16760] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2092.765083][T16760] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2092.777007][T16760] usb 2-1: Manufacturer: syz [ 2092.786195][T16760] usb 2-1: SerialNumber: syz [ 2092.802841][T16760] usb 2-1: config 0 descriptor?? [ 2092.851832][T16760] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 2092.870534][T16760] usb 2-1: No valid video chain found. [ 2093.024871][T24103] usb 2-1: USB disconnect, device number 43 [ 2093.779604][T24798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2093.799095][T24798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2093.821110][T24798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2094.238983][T24798] geneve2: entered promiscuous mode [ 2094.247234][T24798] geneve2: entered allmulticast mode [ 2094.644077][T24798] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.678058][T24798] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.708646][T24798] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2094.996128][T24820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4099'. [ 2096.009442][T24831] xt_CT: No such helper "snmp" [ 2096.291537][T21926] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 2096.457180][T21926] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2096.479389][T21926] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2096.513289][T21926] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2096.563781][T21926] usb 5-1: Manufacturer: syz [ 2096.653134][T21926] usb 5-1: SerialNumber: syz [ 2096.682607][T21926] usb 5-1: config 0 descriptor?? [ 2096.741497][T21926] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 2096.780461][T21926] usb 5-1: No valid video chain found. [ 2097.109167][T21926] usb 5-1: USB disconnect, device number 66 [ 2097.871552][T24103] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 2098.128186][T24103] usb 2-1: config 0 has no interfaces? [ 2098.187107][T24103] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2098.226885][T24103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.254736][T24103] usb 2-1: Product: syz [ 2098.267212][T24103] usb 2-1: Manufacturer: syz [ 2098.286141][T24103] usb 2-1: SerialNumber: syz [ 2098.302861][T24103] usb 2-1: config 0 descriptor?? [ 2099.125593][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.132178][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.541498][T21926] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 2099.819041][T21926] usb 4-1: config 0 has no interfaces? [ 2099.884235][T21926] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2099.962971][T21926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.996757][T21926] usb 4-1: Product: syz [ 2100.047662][T21926] usb 4-1: Manufacturer: syz [ 2100.064348][T21926] usb 4-1: SerialNumber: syz [ 2100.098841][T21926] usb 4-1: config 0 descriptor?? [ 2100.773083][T24103] usb 2-1: USB disconnect, device number 44 [ 2101.013920][T24926] netlink: 'syz.0.4129': attribute type 11 has an invalid length. [ 2103.270924][T21926] usb 4-1: USB disconnect, device number 60 [ 2104.419911][T24970] netlink: 'syz.1.4142': attribute type 11 has an invalid length. [ 2104.464879][T24976] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4140'. [ 2104.590089][T21926] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2104.625255][T24977] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 2104.851428][T21926] usb 1-1: Using ep0 maxpacket: 16 [ 2104.891277][T21926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2104.937149][T21926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2104.978462][T21926] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 2105.013309][T21926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.202126][T21926] usb 1-1: config 0 descriptor?? [ 2105.631472][T21926] playstation 0003:054C:05C4.001C: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 2105.821009][T21926] playstation 0003:054C:05C4.001C: Failed to retrieve feature with reportID 18: -71 [ 2105.894404][T21926] playstation 0003:054C:05C4.001C: Failed to retrieve DualShock4 pairing info: -71 [ 2105.928226][T21926] playstation 0003:054C:05C4.001C: Failed to get MAC address from DualShock4 [ 2105.983577][T21926] playstation 0003:054C:05C4.001C: Failed to create dualshock4. [ 2106.085366][T21926] playstation 0003:054C:05C4.001C: probe with driver playstation failed with error -71 [ 2106.209242][T21926] usb 1-1: USB disconnect, device number 38 [ 2106.821543][T21926] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2107.055087][T21926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2107.102197][T21926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2107.175051][T21926] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 2107.223953][T21926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2107.308602][T21926] usb 1-1: config 0 descriptor?? [ 2107.760225][T21926] steelseries 0003:1038:12B6.001D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0 [ 2107.945459][T21926] steelseries 0003:1038:12B6.001D: hid_hw_raw_request() failed with -71 [ 2108.008788][T21926] usb 1-1: USB disconnect, device number 39 [ 2108.346073][T25011] fido_id[25011]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2114.511778][T16397] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 2114.685709][T16397] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2114.707197][T16397] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2114.732446][T16397] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2114.740491][T16397] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 2114.752825][T16397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2114.768006][T16397] usb 5-1: config 0 descriptor?? [ 2114.822811][T24103] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2114.981799][T24103] usb 4-1: Using ep0 maxpacket: 16 [ 2115.027024][T24103] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 2115.035474][T12249] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2115.055497][T24103] usb 4-1: config 0 has no interface number 0 [ 2115.071455][T24103] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 2115.086514][T24103] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 2115.106289][T24103] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 2115.121757][T24103] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 2115.150737][T24103] usb 4-1: Manufacturer: syz [ 2115.156068][T24103] usb 4-1: SerialNumber: syz [ 2115.184412][T24103] usb 4-1: config 0 descriptor?? [ 2115.191026][T25137] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2115.198687][T12249] usb 2-1: Using ep0 maxpacket: 8 [ 2115.212407][T12249] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2115.233464][T16397] corsair-psu 0003:1B1C:1C09.001E: hidraw0: USB HID v0.00 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 2115.263090][T12249] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2115.277664][T12249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.291576][T12249] usb 2-1: Product: syz [ 2115.295930][T12249] usb 2-1: Manufacturer: syz [ 2115.300915][T12249] usb 2-1: SerialNumber: syz [ 2115.322107][T12249] usb 2-1: config 0 descriptor?? [ 2115.341727][T16397] corsair-psu 0003:1B1C:1C09.001E: unable to initialize device (-38) [ 2115.360654][T25144] xt_CT: No such helper "snmp" [ 2115.369394][T12249] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2115.399958][T16397] corsair-psu 0003:1B1C:1C09.001E: probe with driver corsair-psu failed with error -38 [ 2115.463404][T16397] usb 5-1: USB disconnect, device number 67 [ 2115.541054][T25148] fido_id[25148]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2115.676536][T24103] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 2115.757080][T24103] usb 4-1: USB disconnect, device number 61 [ 2116.701533][T21926] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2116.883699][T21926] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2116.909261][T21926] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2116.935014][T21926] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2116.944976][T21926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2116.963041][T21926] usb 4-1: SerialNumber: syz [ 2117.198468][T21926] usb 4-1: 0:2 : does not exist [ 2117.219318][T21926] usb 4-1: unit 255 not found! [ 2117.281515][T21926] usb 4-1: USB disconnect, device number 62 [ 2117.334673][T25151] udevd[25151]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2117.505805][T25174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4198'. [ 2117.515116][T25174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4198'. [ 2117.526204][T25174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4198'. [ 2117.800861][T25186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4204'. [ 2117.817285][T25186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4204'. [ 2118.181781][T24103] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2118.343813][T24103] usb 4-1: Using ep0 maxpacket: 16 [ 2118.352866][T24103] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2118.366990][T24103] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2118.377485][T24103] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 2118.424280][T24103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.504759][T24103] usb 4-1: config 0 descriptor?? [ 2118.607702][ T30] audit: type=1326 audit(1747612400.459:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2118.630717][T12249] gspca_zc3xx: reg_w_i err -71 [ 2118.682729][T12249] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2118.762102][T12249] usb 2-1: USB disconnect, device number 45 [ 2118.790557][ T30] audit: type=1326 audit(1747612400.459:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2118.840815][ T30] audit: type=1326 audit(1747612400.459:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2118.938682][ T30] audit: type=1326 audit(1747612400.459:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2118.989702][T24103] hid-picolcd 0003:04D8:F002.001F: unbalanced collection at end of report description [ 2119.005215][T24103] hid-picolcd 0003:04D8:F002.001F: device report parse failed [ 2119.015947][ T30] audit: type=1326 audit(1747612400.459:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2119.042308][T24103] hid-picolcd 0003:04D8:F002.001F: probe with driver hid-picolcd failed with error -22 [ 2119.103627][ T30] audit: type=1326 audit(1747612400.459:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2119.204278][ T30] audit: type=1326 audit(1747612400.459:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2119.235276][ T30] audit: type=1326 audit(1747612400.459:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2119.263151][T24103] usb 4-1: USB disconnect, device number 63 [ 2119.291645][ T30] audit: type=1326 audit(1747612400.459:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.2.4209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2120.353400][T24103] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 2120.508513][T25228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4216'. [ 2120.715710][T24103] usb 5-1: config 0 has no interfaces? [ 2120.785912][T24103] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2120.879804][T24103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2120.950914][T24103] usb 5-1: Product: syz [ 2120.961120][T24103] usb 5-1: Manufacturer: syz [ 2120.973346][T24103] usb 5-1: SerialNumber: syz [ 2120.987715][T24103] usb 5-1: config 0 descriptor?? [ 2121.343604][T25223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4213'. [ 2121.354110][T25223] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4213'. [ 2122.161628][T21926] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2122.361464][T21926] usb 4-1: Using ep0 maxpacket: 32 [ 2122.373421][T21926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2122.387067][ T30] audit: type=1326 audit(1747612404.229:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25252 comm="syz.0.4226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0897d8e969 code=0x7ffc0000 [ 2122.425311][T21926] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2122.521704][T21926] usb 4-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 2122.631493][T21926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.700259][T21926] usb 4-1: config 0 descriptor?? [ 2123.145688][T21926] hid_mf 0003:0079:1843.0020: unbalanced collection at end of report description [ 2123.166951][T24103] usb 5-1: USB disconnect, device number 68 [ 2123.292263][T21926] hid_mf 0003:0079:1843.0020: HID parse failed. [ 2123.411511][T21926] hid_mf 0003:0079:1843.0020: probe with driver hid_mf failed with error -22 [ 2123.543111][T21926] usb 4-1: USB disconnect, device number 64 [ 2123.655565][T25265] netlink: 'syz.4.4227': attribute type 11 has an invalid length. [ 2123.958883][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2123.959005][ T30] audit: type=1326 audit(1747612405.809:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2124.133966][ T30] audit: type=1326 audit(1747612405.809:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2124.209286][ T30] audit: type=1326 audit(1747612405.809:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2124.293004][ T30] audit: type=1326 audit(1747612405.809:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2124.361773][ T30] audit: type=1326 audit(1747612405.809:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2124.437409][ T30] audit: type=1326 audit(1747612405.809:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2124.518996][ T30] audit: type=1326 audit(1747612405.809:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2124.722585][ T30] audit: type=1326 audit(1747612405.809:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2124.772676][ T30] audit: type=1326 audit(1747612405.809:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.2.4229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f84fd78e969 code=0x7ffc0000 [ 2125.071470][T12249] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2125.171552][T16761] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2125.221559][T12249] usb 2-1: Using ep0 maxpacket: 16 [ 2125.228571][T12249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2125.239795][T12249] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2125.259076][T12249] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 2125.268626][T12249] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.308494][T12249] usb 2-1: config 0 descriptor?? [ 2125.343094][T16761] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2125.352228][T16761] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2125.364125][T16761] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2125.373429][T16761] usb 4-1: config 1 has no interface number 1 [ 2125.379734][T16761] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2125.402952][T16761] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2125.413033][T16761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.424596][T16761] usb 4-1: Product: syz [ 2125.428976][T16761] usb 4-1: Manufacturer: syz [ 2125.434772][T16761] usb 4-1: SerialNumber: syz [ 2125.617611][T25292] netlink: 368 bytes leftover after parsing attributes in process `syz.2.4234'. [ 2125.673619][T16761] usb 4-1: Failed to set altset [ 2125.680049][T16761] usb 4-1: 0:2: cannot create sequencer device [ 2125.698266][T16761] usb 4-1: Failed to set altset [ 2125.720830][T16761] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 2125.735037][T16761] usb 4-1: USB disconnect, device number 65 [ 2125.809023][T12249] aquacomputer_d5next 0003:0C70:F00A.0021: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.1-1/input0 [ 2125.857711][T25151] udevd[25151]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2125.975793][T12249] usb 2-1: USB disconnect, device number 46 [ 2126.167358][T25293] fido_id[25293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2126.921574][T25308] netlink: 368 bytes leftover after parsing attributes in process `syz.3.4236'. [ 2127.001570][T12249] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2127.104815][T25308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.115616][T25308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.242906][T12249] usb 2-1: config 0 has no interfaces? [ 2127.251273][T12249] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2127.261458][T12249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2127.269927][T12249] usb 2-1: Product: syz [ 2127.276174][T12249] usb 2-1: Manufacturer: syz [ 2127.280885][T12249] usb 2-1: SerialNumber: syz [ 2127.317813][T12249] usb 2-1: config 0 descriptor?? [ 2127.332891][T25316] xt_CT: No such helper "snmp" [ 2127.364905][T25308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2127.441566][T25308] geneve2: entered promiscuous mode [ 2127.446857][T25308] geneve2: entered allmulticast mode [ 2127.895225][T25307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4237'. [ 2127.914587][T25307] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4237'. [ 2128.180991][T25308] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.197967][T25308] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.213347][T25308] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.794546][ T30] audit: type=1326 audit(1747612410.649:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25329 comm="syz.3.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67898e969 code=0x7ffc0000 [ 2129.699224][T25338] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4245'. [ 2129.781164][T21926] usb 2-1: USB disconnect, device number 47 [ 2129.962849][T16761] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 2130.124898][T16761] usb 5-1: Using ep0 maxpacket: 8 [ 2130.148481][T16761] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2130.178408][T16761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.209791][T16761] usb 5-1: Product: syz [ 2130.215050][T21926] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2130.231821][T16761] usb 5-1: Manufacturer: syz [ 2130.239487][T16761] usb 5-1: SerialNumber: syz [ 2130.262885][T16761] usb 5-1: config 0 descriptor?? [ 2130.283795][T16761] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2130.294644][T16761] usb 5-1: setting power ON [ 2130.299273][T16761] dvb-usb: bulk message failed: -22 (2/0) [ 2130.325074][T16761] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2130.362997][T16761] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2130.377520][T21926] usb 2-1: Using ep0 maxpacket: 8 [ 2130.397412][T21926] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2130.409190][T16761] usb 5-1: media controller created [ 2130.437152][T21926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.471867][T21926] usb 2-1: Product: syz [ 2130.480624][T21926] usb 2-1: Manufacturer: syz [ 2130.490105][T16761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2130.503134][T21926] usb 2-1: SerialNumber: syz [ 2130.511454][T25337] dvb-usb: bulk message failed: -22 (3/0) [ 2130.518253][T21926] usb 2-1: config 0 descriptor?? [ 2130.530498][T25337] usb 5-1: gpio_write failed. [ 2130.537319][T25337] cxusb: i2c rd: len=8192 is too big! [ 2130.537319][T25337] [ 2130.563584][T21926] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2130.639318][T16761] usb 5-1: selecting invalid altsetting 6 [ 2130.645929][T16761] usb 5-1: digital interface selection failed (-22) [ 2130.652955][T16761] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2130.662608][T16761] usb 5-1: setting power OFF [ 2130.667345][T16761] dvb-usb: bulk message failed: -22 (2/0) [ 2130.673480][T16761] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2130.683114][T16761] (NULL device *): no alternate interface [ 2130.756022][T16761] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2130.798061][T16761] usb 5-1: USB disconnect, device number 69 [ 2131.181146][T21926] gspca_sonixj: reg_w1 err -71 [ 2131.186141][T21926] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 2131.197966][T21926] usb 2-1: USB disconnect, device number 48 [ 2133.581505][T21926] usb 5-1: new low-speed USB device number 70 using dummy_hcd [ 2133.746510][T21926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2133.776295][T21926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2133.810444][T21926] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 2133.839098][T21926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.873818][T21926] usb 5-1: config 0 descriptor?? [ 2134.108540][T25401] xt_CT: No such helper "snmp" [ 2134.385809][T21926] kone 0003:1E7D:2CED.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 2134.421576][T16761] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2134.587753][T21926] usb 5-1: USB disconnect, device number 70 [ 2134.612903][T16761] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2134.626434][T16761] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2134.636141][T16761] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2134.649835][T16761] usb 2-1: Manufacturer: syz [ 2134.655128][T16761] usb 2-1: SerialNumber: syz [ 2134.680050][T16761] usb 2-1: config 0 descriptor?? [ 2134.698747][T16761] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 2134.721079][T16761] usb 2-1: No valid video chain found. [ 2134.897223][T21926] usb 2-1: USB disconnect, device number 49 [ 2134.940514][T25408] fido_id[25408]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2135.692008][T21926] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2135.881452][T21926] usb 5-1: Using ep0 maxpacket: 8 [ 2135.890211][T21926] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2135.900005][T21926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.082695][T21926] usb 5-1: Product: syz [ 2136.090445][T21926] usb 5-1: Manufacturer: syz [ 2136.103207][T21926] usb 5-1: SerialNumber: syz [ 2136.109994][T21926] usb 5-1: config 0 descriptor?? [ 2136.323590][T21926] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2136.793847][T21926] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2136.820307][T21926] usb 5-1: USB disconnect, device number 71 [ 2137.010450][T25444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4280'. [ 2137.702984][T24103] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2137.879764][T24103] usb 2-1: config 0 has no interfaces? [ 2137.935308][T12249] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2138.189254][T24103] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2138.203377][T12249] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2138.216640][T12249] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2138.233082][T24103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.261563][T12249] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2138.281519][T24103] usb 2-1: Product: syz [ 2138.288045][T24103] usb 2-1: Manufacturer: syz [ 2138.301767][T24103] usb 2-1: SerialNumber: syz [ 2138.313700][T12249] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2138.344388][T24103] usb 2-1: config 0 descriptor?? [ 2138.351542][T12249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.381243][T12249] usb 4-1: Product: syz [ 2138.398635][T12249] usb 4-1: Manufacturer: syz [ 2138.421274][T12249] usb 4-1: SerialNumber: syz [ 2138.613383][T25454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4282'. [ 2138.622758][T25454] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4282'. [ 2138.694603][T12249] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 2138.891121][T21926] usb 4-1: USB disconnect, device number 66 [ 2138.965248][T21926] usblp0: removed [ 2140.161505][T21926] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2140.341648][T21926] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2140.352809][T21926] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2140.364595][T21926] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2140.375358][T21926] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2140.385172][T21926] usb 4-1: Product: syz [ 2140.390607][T21926] usb 4-1: Manufacturer: syz [ 2140.396095][T21926] usb 4-1: SerialNumber: syz [ 2140.407653][T21926] usb 4-1: config 0 descriptor?? [ 2140.428328][T21926] usb 4-1: selecting invalid altsetting 0 [ 2140.644105][T21926] usb 2-1: USB disconnect, device number 50 [ 2140.721580][T16761] usb 4-1: USB disconnect, device number 67 [ 2141.123838][T12249] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2141.425618][T12249] usb 2-1: config 0 has no interfaces? [ 2141.610978][T12249] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2141.818512][T12249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2141.952091][T12249] usb 2-1: Product: syz [ 2141.963536][T12249] usb 2-1: Manufacturer: syz [ 2141.977174][T12249] usb 2-1: SerialNumber: syz [ 2142.018045][T12249] usb 2-1: config 0 descriptor?? [ 2142.318632][T25534] xt_CT: No such helper "snmp" [ 2144.652314][T24103] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2144.778436][T12249] usb 2-1: USB disconnect, device number 51 [ 2144.821495][T24103] usb 4-1: Using ep0 maxpacket: 16 [ 2144.858339][T24103] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2144.904069][T24103] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 2144.955913][T24103] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 2145.011576][T24103] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2145.066925][T24103] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2145.096950][T24103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.117309][T24103] usb 4-1: Product: syz [ 2145.131703][T24103] usb 4-1: Manufacturer: syz [ 2145.136740][T24103] usb 4-1: SerialNumber: syz [ 2145.154329][T24103] usb 4-1: config 0 descriptor?? [ 2145.160187][T25559] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2145.407705][T25558] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 2145.446847][T24103] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input80 [ 2145.672070][T24103] usb 4-1: USB disconnect, device number 68 [ 2146.831443][T16761] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2146.981573][T16761] usb 5-1: Using ep0 maxpacket: 16 [ 2147.000643][T16761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2147.034749][T16761] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2147.045457][T16761] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2147.061480][T16761] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2147.070812][T16761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.096631][T16761] usb 5-1: config 0 descriptor?? [ 2147.882271][T16761] microsoft 0003:045E:07DA.0023: ignoring exceeding usage max [ 2147.952612][T16761] HID 045e:07da: Invalid code 65791 type 1 [ 2147.971859][T16761] HID 045e:07da: Invalid code 768 type 1 [ 2147.977605][T16761] HID 045e:07da: Invalid code 769 type 1 [ 2147.984181][T16761] HID 045e:07da: Invalid code 770 type 1 [ 2147.997922][T16761] HID 045e:07da: Invalid code 771 type 1 [ 2148.011614][T16761] HID 045e:07da: Invalid code 772 type 1 [ 2148.026260][T16761] HID 045e:07da: Invalid code 773 type 1 [ 2148.091564][T16761] HID 045e:07da: Invalid code 774 type 1 [ 2148.131622][T16761] HID 045e:07da: Invalid code 775 type 1 [ 2148.146352][T16761] HID 045e:07da: Invalid code 776 type 1 [ 2149.034842][T16761] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0023/input/input81 [ 2149.266697][T16761] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 2149.444716][T16761] usb 5-1: USB disconnect, device number 72 [ 2150.457920][T25664] xt_CT: No such helper "snmp" [ 2150.711666][T16761] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2150.875324][T16761] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2150.963908][T16761] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2151.044480][T16761] usb 2-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2151.061145][T16761] usb 2-1: Manufacturer: syz [ 2151.066533][T16761] usb 2-1: SerialNumber: syz [ 2151.085779][T16761] usb 2-1: config 0 descriptor?? [ 2151.105983][T16761] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 2151.134824][T16761] usb 2-1: No valid video chain found. [ 2151.310372][T16761] usb 2-1: USB disconnect, device number 52 [ 2152.926065][T25710] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2153.041781][T24103] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2153.319294][T24103] usb 5-1: config 0 has no interfaces? [ 2153.610370][T24103] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2153.620511][T24103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.628751][T24103] usb 5-1: Product: syz [ 2153.637343][T24103] usb 5-1: Manufacturer: syz [ 2153.657490][T24103] usb 5-1: SerialNumber: syz [ 2153.739351][T24103] usb 5-1: config 0 descriptor?? [ 2155.832192][T24103] usb 5-1: USB disconnect, device number 73 [ 2156.571573][T24103] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 2156.745584][T24103] usb 5-1: config 0 has no interfaces? [ 2156.840818][T24103] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2156.866988][T24103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.900621][T24103] usb 5-1: Product: syz [ 2156.909946][T24103] usb 5-1: Manufacturer: syz [ 2156.921196][T24103] usb 5-1: SerialNumber: syz [ 2156.940738][T24103] usb 5-1: config 0 descriptor?? [ 2157.380440][T25754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4376'. [ 2157.390216][T25754] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4376'. [ 2159.001459][T12249] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2159.123718][T16761] usb 5-1: USB disconnect, device number 74 [ 2159.427809][T12249] usb 4-1: config 0 has no interfaces? [ 2159.666244][T12249] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2159.685664][T12249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2159.715798][T12249] usb 4-1: Product: syz [ 2159.730220][T12249] usb 4-1: Manufacturer: syz [ 2159.750575][T12249] usb 4-1: SerialNumber: syz [ 2159.772405][T12249] usb 4-1: config 0 descriptor?? [ 2160.495580][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.503725][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.477932][T12249] usb 4-1: USB disconnect, device number 69 [ 2163.521640][T12249] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2163.851685][T12249] usb 2-1: config 0 has no interfaces? [ 2163.883210][T12249] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2163.899239][T12249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2163.910823][T12249] usb 2-1: Product: syz [ 2163.921868][T12249] usb 2-1: Manufacturer: syz [ 2163.929627][T12249] usb 2-1: SerialNumber: syz [ 2163.962754][T12249] usb 2-1: config 0 descriptor?? [ 2164.176188][T25836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4398'. [ 2164.185547][T25836] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4398'. [ 2164.559332][T25839] netlink: 'syz.2.4400': attribute type 13 has an invalid length. [ 2164.597638][T25839] tipc: Resetting bearer [ 2164.624623][T25839] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2164.635675][T25839] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2164.646082][T25839] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2164.657174][T25839] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2164.669208][T25839] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2164.680524][T25839] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2164.689931][T25839] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2164.700990][T25839] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 2165.411601][T12249] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2165.791087][T12249] usb 4-1: config 0 has no interfaces? [ 2165.890047][T12249] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2165.899409][T12249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2165.908577][T12249] usb 4-1: Product: syz [ 2165.912927][T12249] usb 4-1: Manufacturer: syz [ 2165.917596][T12249] usb 4-1: SerialNumber: syz [ 2165.928237][T12249] usb 4-1: config 0 descriptor?? [ 2168.705396][T16761] usb 4-1: USB disconnect, device number 70 [ 2168.789050][T25889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4417'. [ 2170.145614][T25901] netlink: 368 bytes leftover after parsing attributes in process `syz.3.4419'. [ 2170.186674][T16761] usb 2-1: USB disconnect, device number 53 [ 2170.270230][T25904] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.279331][T25904] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.326828][T25904] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2170.337313][T25904] geneve2: entered promiscuous mode [ 2170.344756][T25904] geneve2: entered allmulticast mode [ 2170.354739][T25904] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2170.371384][T25904] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2170.434874][T25904] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2172.146153][T25938] netlink: 'syz.1.4432': attribute type 11 has an invalid length. [ 2172.701411][T21926] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 2173.066208][T21926] usb 5-1: config 0 has no interfaces? [ 2173.078217][T21926] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2173.087992][T21926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.098049][T21926] usb 5-1: Product: syz [ 2173.108136][T21926] usb 5-1: Manufacturer: syz [ 2173.126715][T21926] usb 5-1: SerialNumber: syz [ 2173.152127][T21926] usb 5-1: config 0 descriptor?? [ 2173.715806][T25958] syz.1.4437: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2173.750906][T25958] CPU: 0 UID: 0 PID: 25958 Comm: syz.1.4437 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 2173.750936][T25958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2173.750951][T25958] Call Trace: [ 2173.750960][T25958] [ 2173.750970][T25958] dump_stack_lvl+0x189/0x250 [ 2173.751010][T25958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2173.751039][T25958] ? __pfx__printk+0x10/0x10 [ 2173.751060][T25958] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2173.751083][T25958] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2173.751107][T25958] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2173.751131][T25958] warn_alloc+0x214/0x310 [ 2173.751163][T25958] ? __pfx___schedule+0x10/0x10 [ 2173.751192][T25958] ? __pfx_warn_alloc+0x10/0x10 [ 2173.751222][T25958] ? kasan_save_track+0x4f/0x80 [ 2173.751246][T25958] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 2173.751272][T25958] ? xskq_create+0x56/0x170 [ 2173.751302][T25958] ? __x64_sys_setsockopt+0x18b/0x220 [ 2173.751328][T25958] ? do_syscall_64+0xf6/0x210 [ 2173.751355][T25958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2173.751406][T25958] __vmalloc_node_range_noprof+0x125/0x12c0 [ 2173.751464][T25958] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2173.751496][T25958] ? __kasan_kmalloc+0x93/0xb0 [ 2173.751525][T25958] vmalloc_user_noprof+0x74/0x80 [ 2173.751555][T25958] ? xskq_create+0xbf/0x170 [ 2173.751579][T25958] xskq_create+0xbf/0x170 [ 2173.751607][T25958] xsk_init_queue+0xb0/0x110 [ 2173.751652][T25958] xsk_setsockopt+0x43f/0x710 [ 2173.751674][T25958] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2173.751700][T25958] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2173.751719][T25958] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2173.751738][T25958] do_sock_setsockopt+0x257/0x3e0 [ 2173.751762][T25958] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2173.751790][T25958] ? __fget_files+0x2a/0x420 [ 2173.751814][T25958] ? __fget_files+0x3a0/0x420 [ 2173.751834][T25958] ? __fget_files+0x2a/0x420 [ 2173.751861][T25958] __x64_sys_setsockopt+0x18b/0x220 [ 2173.751887][T25958] do_syscall_64+0xf6/0x210 [ 2173.751909][T25958] ? clear_bhb_loop+0x60/0xb0 [ 2173.751928][T25958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2173.751943][T25958] RIP: 0033:0x7f01a3b8e969 [ 2173.751958][T25958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2173.751971][T25958] RSP: 002b:00007f01a4ab1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2173.751988][T25958] RAX: ffffffffffffffda RBX: 00007f01a3db5fa0 RCX: 00007f01a3b8e969 [ 2173.752000][T25958] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 2173.752009][T25958] RBP: 00007f01a3c10ab1 R08: 0000000000000052 R09: 0000000000000000 [ 2173.752019][T25958] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2173.752029][T25958] R13: 0000000000000000 R14: 00007f01a3db5fa0 R15: 00007f01a3edfa28 [ 2173.752052][T25958] [ 2174.371712][T25958] Mem-Info: [ 2174.381490][T25958] active_anon:51118 inactive_anon:21 isolated_anon:0 [ 2174.381490][T25958] active_file:16413 inactive_file:5007 isolated_file:0 [ 2174.381490][T25958] unevictable:778 dirty:199 writeback:0 [ 2174.381490][T25958] slab_reclaimable:6564 slab_unreclaimable:199242 [ 2174.381490][T25958] mapped:32337 shmem:44068 pagetables:1369 [ 2174.381490][T25958] sec_pagetables:0 bounce:0 [ 2174.381490][T25958] kernel_misc_reclaimable:0 [ 2174.381490][T25958] free:1206585 free_pcp:396 free_cma:0 [ 2174.471437][T25958] Node 0 active_anon:205172kB inactive_anon:84kB active_file:65624kB inactive_file:19888kB unevictable:1576kB isolated(anon):0kB isolated(file):0kB mapped:129320kB dirty:796kB writeback:0kB shmem:174736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12184kB pagetables:5476kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2174.559625][T25962] netlink: 368 bytes leftover after parsing attributes in process `syz.2.4438'. [ 2174.595828][T25958] Node 1 active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2174.791368][T25958] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2174.844598][T25958] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 2174.860009][T25958] Node 0 DMA32 free:898040kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:206184kB inactive_anon:84kB active_file:65624kB inactive_file:19804kB unevictable:1576kB writepending:828kB present:3129332kB managed:2564112kB mlocked:40kB bounce:0kB free_pcp:3972kB local_pcp:616kB free_cma:0kB [ 2175.001402][T25958] lowmem_reserve[]: 0 0 0 0 0 [ 2175.105816][T25958] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 2175.196460][T25958] lowmem_reserve[]: 0 0 0 0 0 [ 2175.226550][T25958] Node 1 Normal free:3908668kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:140kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:48kB local_pcp:48kB free_cma:0kB [ 2175.444825][T25958] lowmem_reserve[]: 0 0 0 0 0 [ 2175.463072][T25958] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2175.500435][T25958] Node 0 DMA32: 782*4kB (UE) 486*8kB (UME) 350*16kB (UME) 596*32kB (UME) 231*64kB (UME) 120*128kB (UME) 45*256kB (UME) 22*512kB (UME) 27*1024kB (UME) 8*2048kB (UM) 185*4096kB (M) = 886408kB [ 2175.559205][T25958] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2175.597436][T25958] Node 1 Normal: 245*4kB (UM) 57*8kB (UME) 34*16kB (UME) 208*32kB (UME) 96*64kB (UME) 27*128kB (UM) 13*256kB (UME) 6*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 946*4096kB (UM) = 3908668kB [ 2175.655106][T21926] usb 5-1: USB disconnect, device number 75 [ 2175.711466][T25958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2175.757685][T25958] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2175.797786][T25958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2175.828282][T25958] Node 1 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2175.876733][T25958] 65512 total pagecache pages [ 2175.901421][T25958] 26 pages in swap cache [ 2175.916772][T25958] Free swap = 124912kB [ 2175.941219][T25958] Total swap = 124996kB [ 2175.948625][T25958] 2097051 pages RAM [ 2175.957885][T25958] 0 pages HighMem/MovableOnly [ 2175.963297][T25958] 424365 pages reserved [ 2175.967483][T25958] 0 pages cma reserved [ 2177.321443][T24103] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2177.736913][T24103] usb 4-1: config 0 has no interfaces? [ 2177.753217][T24103] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2177.777636][T24103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.821179][T24103] usb 4-1: Product: syz [ 2177.839013][T24103] usb 4-1: Manufacturer: syz [ 2177.859799][T24103] usb 4-1: SerialNumber: syz [ 2178.000437][T24103] usb 4-1: config 0 descriptor?? [ 2178.470128][T26016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4455'. [ 2178.917872][T26023] ipvlan2: entered promiscuous mode [ 2178.974927][T26023] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2180.860282][T21926] usb 4-1: USB disconnect, device number 71 [ 2181.161559][T16761] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 2181.271450][T21926] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2181.333079][T16761] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.348115][T16761] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2181.357722][T16761] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2181.368660][T16761] usb 5-1: Manufacturer: syz [ 2181.373787][T16761] usb 5-1: SerialNumber: syz [ 2181.380706][T16761] usb 5-1: config 0 descriptor?? [ 2181.395191][T16761] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 2181.405501][T16761] usb 5-1: No valid video chain found. [ 2181.441538][T21926] usb 4-1: Using ep0 maxpacket: 8 [ 2181.464600][T21926] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2181.483835][T21926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2181.498276][T21926] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2181.514067][T21926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2181.525651][T21926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2181.540023][T21926] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2181.547735][T21926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2181.560786][T21926] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2181.574691][T21926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2181.586582][T21926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2181.601790][T21926] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 2181.621487][T16761] usb 5-1: USB disconnect, device number 76 [ 2181.639959][T21926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2181.658148][T21926] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2181.670403][T21926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2181.684598][T21926] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2181.701093][T21926] usb 4-1: string descriptor 0 read error: -22 [ 2181.710144][T21926] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2181.720312][T21926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.752065][T21926] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2181.973223][T16761] usb 4-1: USB disconnect, device number 72 [ 2183.559461][T26083] netlink: 'syz.3.4476': attribute type 10 has an invalid length. [ 2183.878769][T26092] xt_CT: No such helper "snmp" [ 2184.161658][T24103] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2184.341516][T12249] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 2184.503612][T24103] usb 2-1: config 0 has no interfaces? [ 2184.515071][T12249] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.540084][T12249] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 2184.550673][T12249] usb 5-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 2184.566311][T12249] usb 5-1: Manufacturer: syz [ 2184.571261][T12249] usb 5-1: SerialNumber: syz [ 2184.579919][T12249] usb 5-1: config 0 descriptor?? [ 2184.593665][T12249] usb 5-1: Found UVC 0.00 device (046d:08c1) [ 2184.603209][T12249] usb 5-1: No valid video chain found. [ 2184.639731][T24103] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2184.651279][T24103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.660587][T24103] usb 2-1: Product: syz [ 2184.666681][T24103] usb 2-1: Manufacturer: syz [ 2184.687120][T24103] usb 2-1: SerialNumber: syz [ 2184.703641][T24103] usb 2-1: config 0 descriptor?? [ 2184.794929][T12249] usb 5-1: USB disconnect, device number 77 [ 2186.181441][T12249] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 2186.353218][T12249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2186.534682][T12249] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2186.637201][T12249] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2186.762343][T12249] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2186.857244][T12249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.912424][T12249] usb 5-1: config 0 descriptor?? [ 2187.293223][T16761] usb 2-1: USB disconnect, device number 54 [ 2187.415536][T12249] plantronics 0003:047F:FFFF.0024: No inputs registered, leaving [ 2187.498241][T12249] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2188.310722][T26142] netlink: 'syz.0.4490': attribute type 10 has an invalid length. [ 2188.334978][T26142] loop6: detected capacity change from 0 to 63 [ 2188.658596][ C1] plantronics 0003:047F:FFFF.0024: usb_submit_urb(ctrl) failed: -1 [ 2188.682184][T24103] usb 5-1: USB disconnect, device number 78 [ 2188.928674][T26155] tun0: tun_chr_ioctl cmd 1074025675 [ 2188.961381][T26155] tun0: persist enabled [ 2189.203288][T26155] tun0: tun_chr_ioctl cmd 1074025675 [ 2189.208765][T26155] tun0: persist disabled [ 2189.371071][T26161] loop6: detected capacity change from 0 to 63 [ 2189.411216][T26161] buffer_io_error: 24 callbacks suppressed [ 2189.411240][T26161] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 2189.426536][T25151] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 2189.441626][T25151] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 2189.450334][T26161] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 2189.463647][T25151] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 2189.477606][T26161] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 2189.498235][T26161] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 2189.519867][T25151] Buffer I/O error on dev loop6, logical block 0, async page read [ 2189.542435][T25151] Buffer I/O error on dev loop6, logical block 0, async page read [ 2189.569320][T25151] Buffer I/O error on dev loop6, logical block 0, async page read [ 2189.731544][T24103] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2189.895168][T24103] usb 4-1: Using ep0 maxpacket: 16 [ 2189.917229][T24103] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2189.956847][T24103] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2189.995174][T24103] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2190.018361][T24103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.038237][T24103] usb 4-1: Product: syz [ 2190.048660][T24103] usb 4-1: Manufacturer: syz [ 2190.060485][T24103] usb 4-1: SerialNumber: syz [ 2190.077918][T24103] usb 4-1: config 0 descriptor?? [ 2190.106962][T24103] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2190.147239][T24103] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 2190.708111][T24103] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2190.730839][T24103] em28xx 4-1:0.0: Config register raw data: 0x41 [ 2190.899208][T26186] ======================================================= [ 2190.899208][T26186] WARNING: The mand mount option has been deprecated and [ 2190.899208][T26186] and is ignored by this kernel. Remove the mand [ 2190.899208][T26186] option from the mount to silence this warning. [ 2190.899208][T26186] ======================================================= [ 2190.937672][T24103] usb 4-1: USB disconnect, device number 73 [ 2190.947230][T24103] em28xx 4-1:0.0: Disconnecting em28xx [ 2190.956892][T24103] em28xx 4-1:0.0: Freeing device [ 2191.261524][T12249] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 2191.494607][T12249] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2191.523863][T12249] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2191.622212][T12249] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2191.656299][T12249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.791525][T24103] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2191.899900][T12249] usb 5-1: usb_control_msg returned -32 [ 2191.906474][T12249] usbtmc 5-1:16.0: can't read capabilities [ 2191.981443][T24103] usb 4-1: Using ep0 maxpacket: 8 [ 2191.996586][T24103] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2192.008106][T24103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.031522][T24103] usb 4-1: Product: syz [ 2192.040040][T24103] usb 4-1: Manufacturer: syz [ 2192.047249][T24103] usb 4-1: SerialNumber: syz [ 2192.054360][T24103] usb 4-1: config 0 descriptor?? [ 2192.333641][T24103] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2192.474208][T16761] usb 5-1: USB disconnect, device number 79 [ 2192.742656][T24103] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2192.819522][T24103] usb 4-1: USB disconnect, device number 74 [ 2192.894361][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2192.894377][ T30] audit: type=1326 audit(1747612474.739:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26208 comm="syz.1.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2192.981717][ T30] audit: type=1326 audit(1747612474.739:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26208 comm="syz.1.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2193.040560][ T30] audit: type=1326 audit(1747612474.739:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26208 comm="syz.1.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2193.063396][ T30] audit: type=1326 audit(1747612474.739:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26208 comm="syz.1.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2193.136667][ T30] audit: type=1326 audit(1747612474.739:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26208 comm="syz.1.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2193.186930][ T30] audit: type=1326 audit(1747612474.739:4973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26208 comm="syz.1.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2193.224365][ T30] audit: type=1326 audit(1747612474.739:4974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26208 comm="syz.1.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2193.254232][ T30] audit: type=1326 audit(1747612474.739:4975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26208 comm="syz.1.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2193.402037][ T30] audit: type=1326 audit(1747612474.739:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26208 comm="syz.1.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2196.286683][T26264] syzkaller1: entered promiscuous mode [ 2196.292705][T26264] syzkaller1: entered allmulticast mode [ 2196.431734][T12249] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 2196.644896][T12249] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2196.684823][T12249] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2197.007472][T12249] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2197.021712][T12249] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.030735][T26284] netlink: 368 bytes leftover after parsing attributes in process `syz.2.4531'. [ 2197.051535][T12249] usb 2-1: Product: syz [ 2197.084381][T12249] usb 2-1: Manufacturer: syz [ 2197.103216][T12249] usb 2-1: SerialNumber: syz [ 2197.379879][T12249] usb 2-1: 0:2 : does not exist [ 2197.411544][T12249] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2197.610964][T12249] usb 2-1: USB disconnect, device number 55 [ 2197.748981][T26260] udevd[26260]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2198.792470][ T30] audit: type=1326 audit(1747612480.649:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26316 comm="syz.1.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2198.819663][ T30] audit: type=1326 audit(1747612480.669:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26316 comm="syz.1.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2198.844161][ T30] audit: type=1326 audit(1747612480.669:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26316 comm="syz.1.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2198.873581][ T30] audit: type=1326 audit(1747612480.669:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26316 comm="syz.1.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2198.928407][ T30] audit: type=1326 audit(1747612480.669:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26316 comm="syz.1.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2198.984817][ T30] audit: type=1326 audit(1747612480.669:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26316 comm="syz.1.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2199.044139][ T30] audit: type=1326 audit(1747612480.669:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26316 comm="syz.1.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2199.119184][ T30] audit: type=1326 audit(1747612480.669:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26316 comm="syz.1.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2199.194864][ T30] audit: type=1326 audit(1747612480.669:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26316 comm="syz.1.4547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2200.561463][T12249] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2200.731512][T12249] usb 2-1: Using ep0 maxpacket: 8 [ 2200.752518][T12249] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2200.767721][T12249] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 2200.775941][T12249] usb 2-1: can't read configurations, error -71 [ 2202.104015][T26354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4557'. [ 2202.121922][T21926] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 2202.192940][ T30] audit: type=1326 audit(1747612484.049:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26357 comm="syz.1.4558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a3b8e969 code=0x7ffc0000 [ 2202.323661][T21926] usb 5-1: config 4 has an invalid interface number: 156 but max is 0 [ 2202.371069][T21926] usb 5-1: config 4 has no interface number 0 [ 2202.378166][T21926] usb 5-1: config 4 interface 156 has no altsetting 0 [ 2202.388035][T21926] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 2202.418177][T21926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.470927][T21926] usb 5-1: Product: syz [ 2202.479819][T21926] usb 5-1: Manufacturer: syz [ 2202.506123][T21926] usb 5-1: SerialNumber: syz [ 2202.535699][T21926] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 2202.559605][T21926] usb 5-1: setting power ON [ 2202.568547][T21926] dvb-usb: bulk message failed: -22 (2/0) [ 2202.623944][T21926] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2202.714236][T21926] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 2202.867310][T26367] netlink: 368 bytes leftover after parsing attributes in process `syz.3.4559'. [ 2202.884197][T21926] dvb_usb_cxusb 5-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 2202.913539][T21926] usb 5-1: USB disconnect, device number 80 [ 2203.888764][T26380] loop6: detected capacity change from 0 to 63 [ 2203.945984][T26260] buffer_io_error: 4 callbacks suppressed [ 2203.946005][T26260] Buffer I/O error on dev loop6, logical block 0, async page read [ 2203.994017][T26380] Buffer I/O error on dev loop6, logical block 0, async page read [ 2204.022640][T26260] Buffer I/O error on dev loop6, logical block 0, async page read [ 2204.038960][T26380] Buffer I/O error on dev loop6, logical block 0, async page read [ 2204.055128][T26260] Buffer I/O error on dev loop6, logical block 0, async page read [ 2204.072842][T26380] Buffer I/O error on dev loop6, logical block 0, async page read [ 2204.087929][T26260] Buffer I/O error on dev loop6, logical block 0, async page read [ 2204.104505][T26380] Buffer I/O error on dev loop6, logical block 0, async page read [ 2204.114099][T26260] Buffer I/O error on dev loop6, logical block 0, async page read [ 2204.705098][T26381] netlink: 'syz.4.4562': attribute type 10 has an invalid length. [ 2204.719262][T26381] loop6: detected capacity change from 0 to 63 [ 2204.946374][T26406] netlink: 'syz.3.4570': attribute type 11 has an invalid length. [ 2205.791782][T16761] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2205.951522][T16761] usb 5-1: Using ep0 maxpacket: 8 [ 2205.975970][T16761] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2206.005691][T16761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.054034][T16761] usb 5-1: Product: syz [ 2206.064185][T16761] usb 5-1: Manufacturer: syz [ 2206.074324][T16761] usb 5-1: SerialNumber: syz [ 2206.100896][T16761] usb 5-1: config 0 descriptor?? [ 2206.126166][T16761] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2206.211871][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2206.211887][ T30] audit: type=1326 audit(1747612488.069:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26411 comm="syz.0.4573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0897d8e969 code=0x0 [ 2207.188204][T16761] gspca_sonixj: reg_w1 err -71 [ 2207.231503][T16761] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 2207.249966][T16761] usb 5-1: USB disconnect, device number 81 [ 2207.411788][T26438] netlink: 'syz.0.4580': attribute type 11 has an invalid length. [ 2208.570978][T26442] netlink: 'syz.4.4582': attribute type 10 has an invalid length. [ 2208.605392][T26442] loop6: detected capacity change from 0 to 63 [ 2209.056088][T26451] netlink: 'syz.3.4584': attribute type 11 has an invalid length. [ 2209.528706][T26464] netlink: 368 bytes leftover after parsing attributes in process `syz.4.4587'. [ 2211.007732][T26478] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4592'. [ 2211.017137][T26478] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4592'. [ 2211.922363][T26490] netlink: 'syz.4.4597': attribute type 10 has an invalid length. [ 2211.936108][T26490] loop6: detected capacity change from 0 to 63 [ 2212.935595][T26515] syzkaller1: entered promiscuous mode [ 2212.945935][T26515] syzkaller1: entered allmulticast mode [ 2213.796351][T26530] netlink: 'syz.1.4611': attribute type 10 has an invalid length. [ 2213.816864][T26530] loop6: detected capacity change from 0 to 63 [ 2214.058199][T26540] [ 2214.060592][T26540] ===================================================== [ 2214.067522][T26540] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2214.074985][T26540] 6.15.0-rc7-syzkaller #0 Not tainted [ 2214.080346][T26540] ----------------------------------------------------- [ 2214.087276][T26540] syz.4.4614/26540 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2214.094998][T26540] ffff88802f76c948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2214.103711][T26540] [ 2214.103711][T26540] and this task is already holding: [ 2214.111072][T26540] ffff888029539230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 2214.120836][T26540] which would create a new lock dependency: [ 2214.126721][T26540] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 2214.134671][T26540] [ 2214.134671][T26540] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2214.144133][T26540] (&dev->event_lock#2){..-.}-{3:3} [ 2214.144168][T26540] [ 2214.144168][T26540] ... which became SOFTIRQ-irq-safe at: [ 2214.157074][T26540] lock_acquire+0x120/0x360 [ 2214.161691][T26540] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2214.166996][T26540] input_inject_event+0xab/0x320 [ 2214.172071][T26540] kd_sound_helper+0x101/0x210 [ 2214.176945][T26540] input_handler_for_each_handle+0xfe/0x1c0 [ 2214.182944][T26540] call_timer_fn+0x17b/0x5f0 [ 2214.187631][T26540] __run_timer_base+0x61a/0x860 [ 2214.192574][T26540] run_timer_softirq+0xb7/0x180 [ 2214.197519][T26540] handle_softirqs+0x286/0x870 [ 2214.202371][T26540] __irq_exit_rcu+0xca/0x1f0 [ 2214.207050][T26540] irq_exit_rcu+0x9/0x30 [ 2214.211389][T26540] sysvec_apic_timer_interrupt+0x57/0xc0 [ 2214.217118][T26540] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2214.223193][T26540] [ 2214.223193][T26540] to a SOFTIRQ-irq-unsafe lock: [ 2214.230214][T26540] (tasklist_lock){.+.+}-{3:3} [ 2214.230244][T26540] [ 2214.230244][T26540] ... which became SOFTIRQ-irq-unsafe at: [ 2214.242879][T26540] ... [ 2214.242888][T26540] lock_acquire+0x120/0x360 [ 2214.250064][T26540] _raw_read_lock+0x36/0x50 [ 2214.254661][T26540] __do_wait+0xde/0x740 [ 2214.258909][T26540] do_wait+0x1f8/0x520 [ 2214.263073][T26540] kernel_wait+0xab/0x170 [ 2214.267525][T26540] call_usermodehelper_exec_work+0xbe/0x230 [ 2214.273528][T26540] process_scheduled_works+0xadb/0x17a0 [ 2214.279169][T26540] worker_thread+0x8a0/0xda0 [ 2214.283849][T26540] kthread+0x70e/0x8a0 [ 2214.288016][T26540] ret_from_fork+0x4b/0x80 [ 2214.292530][T26540] ret_from_fork_asm+0x1a/0x30 [ 2214.297383][T26540] [ 2214.297383][T26540] other info that might help us debug this: [ 2214.297383][T26540] [ 2214.307613][T26540] Chain exists of: [ 2214.307613][T26540] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 2214.307613][T26540] [ 2214.320582][T26540] Possible interrupt unsafe locking scenario: [ 2214.320582][T26540] [ 2214.328901][T26540] CPU0 CPU1 [ 2214.334272][T26540] ---- ---- [ 2214.339638][T26540] lock(tasklist_lock); [ 2214.343886][T26540] local_irq_disable(); [ 2214.350659][T26540] lock(&dev->event_lock#2); [ 2214.357892][T26540] lock(&new->fa_lock); [ 2214.364679][T26540] [ 2214.368149][T26540] lock(&dev->event_lock#2); [ 2214.373031][T26540] [ 2214.373031][T26540] *** DEADLOCK *** [ 2214.373031][T26540] [ 2214.381181][T26540] 6 locks held by syz.4.4614/26540: [ 2214.386379][T26540] #0: ffff88802953b118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 2214.395533][T26540] #1: ffff888029539230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 2214.405653][T26540] #2: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 2214.415334][T26540] #3: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2214.424952][T26540] #4: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 2214.435069][T26540] #5: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2214.444143][T26540] [ 2214.444143][T26540] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2214.454552][T26540] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2214.460171][T26540] IN-SOFTIRQ-W at: [ 2214.464155][T26540] lock_acquire+0x120/0x360 [ 2214.470324][T26540] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2214.477198][T26540] input_inject_event+0xab/0x320 [ 2214.483812][T26540] kd_sound_helper+0x101/0x210 [ 2214.490250][T26540] input_handler_for_each_handle+0xfe/0x1c0 [ 2214.497816][T26540] call_timer_fn+0x17b/0x5f0 [ 2214.504075][T26540] __run_timer_base+0x61a/0x860 [ 2214.510594][T26540] run_timer_softirq+0xb7/0x180 [ 2214.517103][T26540] handle_softirqs+0x286/0x870 [ 2214.523519][T26540] __irq_exit_rcu+0xca/0x1f0 [ 2214.529763][T26540] irq_exit_rcu+0x9/0x30 [ 2214.535655][T26540] sysvec_apic_timer_interrupt+0x57/0xc0 [ 2214.542946][T26540] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2214.550585][T26540] INITIAL USE at: [ 2214.554486][T26540] lock_acquire+0x120/0x360 [ 2214.560562][T26540] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2214.567329][T26540] input_inject_event+0xab/0x320 [ 2214.573837][T26540] kbd_led_trigger_activate+0xbc/0x100 [ 2214.580896][T26540] led_trigger_set+0x52a/0x950 [ 2214.587235][T26540] led_trigger_set_default+0x215/0x250 [ 2214.594266][T26540] led_classdev_register_ext+0x73d/0x930 [ 2214.601469][T26540] input_leds_connect+0x517/0x790 [ 2214.608067][T26540] input_register_device+0xceb/0x10b0 [ 2214.615013][T26540] atkbd_connect+0x70e/0x9c0 [ 2214.621256][T26540] serio_driver_probe+0x7f/0xa0 [ 2214.627684][T26540] really_probe+0x26a/0x9a0 [ 2214.633759][T26540] __driver_probe_device+0x18c/0x2f0 [ 2214.640621][T26540] driver_probe_device+0x4f/0x430 [ 2214.647221][T26540] __driver_attach+0x452/0x700 [ 2214.653560][T26540] bus_for_each_dev+0x230/0x2b0 [ 2214.659987][T26540] serio_handle_event+0x1a2/0x860 [ 2214.666577][T26540] process_scheduled_works+0xadb/0x17a0 [ 2214.673712][T26540] worker_thread+0x8a0/0xda0 [ 2214.679870][T26540] kthread+0x70e/0x8a0 [ 2214.685507][T26540] ret_from_fork+0x4b/0x80 [ 2214.691521][T26540] ret_from_fork_asm+0x1a/0x30 [ 2214.697849][T26540] } [ 2214.700343][T26540] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 2214.709370][T26540] [ 2214.709370][T26540] the dependencies between the lock to be acquired [ 2214.709381][T26540] and SOFTIRQ-irq-unsafe lock: [ 2214.722996][T26540] -> (tasklist_lock){.+.+}-{3:3} { [ 2214.728332][T26540] HARDIRQ-ON-R at: [ 2214.732495][T26540] lock_acquire+0x120/0x360 [ 2214.739007][T26540] _raw_read_lock+0x36/0x50 [ 2214.745512][T26540] __do_wait+0xde/0x740 [ 2214.751673][T26540] do_wait+0x1f8/0x520 [ 2214.757751][T26540] kernel_wait+0xab/0x170 [ 2214.764085][T26540] call_usermodehelper_exec_work+0xbe/0x230 [ 2214.771995][T26540] process_scheduled_works+0xadb/0x17a0 [ 2214.779540][T26540] worker_thread+0x8a0/0xda0 [ 2214.786131][T26540] kthread+0x70e/0x8a0 [ 2214.792209][T26540] ret_from_fork+0x4b/0x80 [ 2214.798631][T26540] ret_from_fork_asm+0x1a/0x30 [ 2214.805399][T26540] SOFTIRQ-ON-R at: [ 2214.809562][T26540] lock_acquire+0x120/0x360 [ 2214.816125][T26540] _raw_read_lock+0x36/0x50 [ 2214.822634][T26540] __do_wait+0xde/0x740 [ 2214.828802][T26540] do_wait+0x1f8/0x520 [ 2214.834880][T26540] kernel_wait+0xab/0x170 [ 2214.841215][T26540] call_usermodehelper_exec_work+0xbe/0x230 [ 2214.849140][T26540] process_scheduled_works+0xadb/0x17a0 [ 2214.856689][T26540] worker_thread+0x8a0/0xda0 [ 2214.863280][T26540] kthread+0x70e/0x8a0 [ 2214.869359][T26540] ret_from_fork+0x4b/0x80 [ 2214.875785][T26540] ret_from_fork_asm+0x1a/0x30 [ 2214.882559][T26540] INITIAL USE at: [ 2214.886640][T26540] lock_acquire+0x120/0x360 [ 2214.893065][T26540] _raw_write_lock_irq+0xa2/0xf0 [ 2214.899937][T26540] copy_process+0x21d5/0x3b80 [ 2214.906533][T26540] kernel_clone+0x21e/0x870 [ 2214.912957][T26540] user_mode_thread+0xdd/0x140 [ 2214.919640][T26540] rest_init+0x23/0x300 [ 2214.925708][T26540] start_kernel+0x470/0x4f0 [ 2214.932131][T26540] x86_64_start_reservations+0x2a/0x30 [ 2214.939507][T26540] x86_64_start_kernel+0x66/0x70 [ 2214.946363][T26540] common_startup_64+0x13e/0x147 [ 2214.953486][T26540] INITIAL READ USE at: [ 2214.957990][T26540] lock_acquire+0x120/0x360 [ 2214.964846][T26540] _raw_read_lock+0x36/0x50 [ 2214.971703][T26540] __do_wait+0xde/0x740 [ 2214.978213][T26540] do_wait+0x1f8/0x520 [ 2214.984636][T26540] kernel_wait+0xab/0x170 [ 2214.991322][T26540] call_usermodehelper_exec_work+0xbe/0x230 [ 2214.999577][T26540] process_scheduled_works+0xadb/0x17a0 [ 2215.007476][T26540] worker_thread+0x8a0/0xda0 [ 2215.014415][T26540] kthread+0x70e/0x8a0 [ 2215.020836][T26540] ret_from_fork+0x4b/0x80 [ 2215.027604][T26540] ret_from_fork_asm+0x1a/0x30 [ 2215.034724][T26540] } [ 2215.037400][T26540] ... key at: [] tasklist_lock+0x18/0x40 [ 2215.045372][T26540] ... acquired at: [ 2215.049348][T26540] lock_acquire+0x120/0x360 [ 2215.054038][T26540] _raw_read_lock+0x36/0x50 [ 2215.058738][T26540] send_sigurg+0x12b/0x420 [ 2215.063333][T26540] sk_send_sigurg+0x6c/0x2e0 [ 2215.068103][T26540] queue_oob+0x3d9/0x4e0 [ 2215.072530][T26540] unix_stream_sendmsg+0xa41/0xb60 [ 2215.077820][T26540] __sock_sendmsg+0x219/0x270 [ 2215.082679][T26540] ____sys_sendmsg+0x52d/0x830 [ 2215.087629][T26540] ___sys_sendmsg+0x21f/0x2a0 [ 2215.092491][T26540] __sys_sendmmsg+0x227/0x430 [ 2215.097351][T26540] __x64_sys_sendmmsg+0xa0/0xc0 [ 2215.102384][T26540] do_syscall_64+0xf6/0x210 [ 2215.107071][T26540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.113144][T26540] [ 2215.115473][T26540] -> (&f_owner->lock){....}-{3:3} { [ 2215.120785][T26540] INITIAL USE at: [ 2215.124767][T26540] lock_acquire+0x120/0x360 [ 2215.131019][T26540] _raw_write_lock_irq+0xa2/0xf0 [ 2215.137700][T26540] __f_setown+0x67/0x370 [ 2215.143688][T26540] do_fcntl+0x1611/0x1910 [ 2215.149752][T26540] __se_sys_fcntl+0xc8/0x150 [ 2215.156076][T26540] do_syscall_64+0xf6/0x210 [ 2215.162326][T26540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.169956][T26540] INITIAL READ USE at: [ 2215.174373][T26540] lock_acquire+0x120/0x360 [ 2215.181087][T26540] _raw_read_lock_irqsave+0xaf/0x100 [ 2215.188558][T26540] send_sigurg+0x55/0x420 [ 2215.195060][T26540] sk_send_sigurg+0x6c/0x2e0 [ 2215.201830][T26540] queue_oob+0x3d9/0x4e0 [ 2215.208253][T26540] unix_stream_sendmsg+0xa41/0xb60 [ 2215.215550][T26540] __sock_sendmsg+0x219/0x270 [ 2215.222412][T26540] ____sys_sendmsg+0x52d/0x830 [ 2215.229371][T26540] ___sys_sendmsg+0x21f/0x2a0 [ 2215.236225][T26540] __sys_sendmmsg+0x227/0x430 [ 2215.243083][T26540] __x64_sys_sendmmsg+0xa0/0xc0 [ 2215.250115][T26540] do_syscall_64+0xf6/0x210 [ 2215.256798][T26540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.264927][T26540] } [ 2215.267518][T26540] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2215.276461][T26540] ... acquired at: [ 2215.280352][T26540] lock_acquire+0x120/0x360 [ 2215.285036][T26540] _raw_read_lock_irqsave+0xaf/0x100 [ 2215.290497][T26540] send_sigio+0x38/0x370 [ 2215.294916][T26540] kill_fasync+0x24d/0x4d0 [ 2215.299509][T26540] sock_wake_async+0x137/0x160 [ 2215.304470][T26540] sk_send_sigurg+0x1f1/0x2e0 [ 2215.309325][T26540] queue_oob+0x3d9/0x4e0 [ 2215.313761][T26540] unix_stream_sendmsg+0xa41/0xb60 [ 2215.319048][T26540] __sock_sendmsg+0x219/0x270 [ 2215.323905][T26540] ____sys_sendmsg+0x52d/0x830 [ 2215.328948][T26540] ___sys_sendmsg+0x21f/0x2a0 [ 2215.333816][T26540] __sys_sendmmsg+0x227/0x430 [ 2215.338674][T26540] __x64_sys_sendmmsg+0xa0/0xc0 [ 2215.343706][T26540] do_syscall_64+0xf6/0x210 [ 2215.348394][T26540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.354462][T26540] [ 2215.356789][T26540] -> (&new->fa_lock){....}-{3:3} { [ 2215.361937][T26540] INITIAL USE at: [ 2215.365834][T26540] lock_acquire+0x120/0x360 [ 2215.371930][T26540] _raw_write_lock_irq+0xa2/0xf0 [ 2215.378456][T26540] fasync_remove_entry+0xf1/0x1c0 [ 2215.385074][T26540] sock_fasync+0x85/0xf0 [ 2215.390900][T26540] __fput+0x8a2/0xa70 [ 2215.396457][T26540] task_work_run+0x1d1/0x260 [ 2215.402626][T26540] resume_user_mode_work+0x5e/0x80 [ 2215.409311][T26540] syscall_exit_to_user_mode+0x9a/0x120 [ 2215.416427][T26540] do_syscall_64+0x103/0x210 [ 2215.422586][T26540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.430134][T26540] INITIAL READ USE at: [ 2215.434472][T26540] lock_acquire+0x120/0x360 [ 2215.440982][T26540] _raw_read_lock_irqsave+0xaf/0x100 [ 2215.448272][T26540] kill_fasync+0x199/0x4d0 [ 2215.454690][T26540] sock_wake_async+0x137/0x160 [ 2215.461456][T26540] sk_send_sigurg+0x1f1/0x2e0 [ 2215.468139][T26540] queue_oob+0x3d9/0x4e0 [ 2215.474390][T26540] unix_stream_sendmsg+0xa41/0xb60 [ 2215.481507][T26540] __sock_sendmsg+0x219/0x270 [ 2215.488189][T26540] ____sys_sendmsg+0x52d/0x830 [ 2215.494959][T26540] ___sys_sendmsg+0x21f/0x2a0 [ 2215.501644][T26540] __sys_sendmmsg+0x227/0x430 [ 2215.508330][T26540] __x64_sys_sendmmsg+0xa0/0xc0 [ 2215.515191][T26540] do_syscall_64+0xf6/0x210 [ 2215.521702][T26540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.529596][T26540] } [ 2215.532111][T26540] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2215.540793][T26540] ... acquired at: [ 2215.544596][T26540] lock_acquire+0x120/0x360 [ 2215.549283][T26540] _raw_read_lock_irqsave+0xaf/0x100 [ 2215.554747][T26540] kill_fasync+0x199/0x4d0 [ 2215.559342][T26540] mousedev_notify_readers+0x6f1/0xc00 [ 2215.564985][T26540] mousedev_event+0x602/0x1320 [ 2215.569952][T26540] input_handle_events_default+0xd4/0x1a0 [ 2215.575849][T26540] input_pass_values+0x285/0x890 [ 2215.580987][T26540] input_event_dispose+0x330/0x6b0 [ 2215.586301][T26540] input_inject_event+0x1fe/0x320 [ 2215.591504][T26540] evdev_write+0x2fc/0x480 [ 2215.596096][T26540] vfs_write+0x27b/0xa90 [ 2215.600517][T26540] ksys_write+0x145/0x250 [ 2215.605030][T26540] do_syscall_64+0xf6/0x210 [ 2215.609718][T26540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.615788][T26540] [ 2215.618112][T26540] [ 2215.618112][T26540] stack backtrace: [ 2215.624004][T26540] CPU: 0 UID: 0 PID: 26540 Comm: syz.4.4614 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 2215.624025][T26540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2215.624037][T26540] Call Trace: [ 2215.624046][T26540] [ 2215.624055][T26540] dump_stack_lvl+0x189/0x250 [ 2215.624082][T26540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2215.624106][T26540] ? __pfx__printk+0x10/0x10 [ 2215.624127][T26540] validate_chain+0x1f05/0x2140 [ 2215.624154][T26540] __lock_acquire+0xaac/0xd20 [ 2215.624181][T26540] ? kill_fasync+0x199/0x4d0 [ 2215.624196][T26540] lock_acquire+0x120/0x360 [ 2215.624219][T26540] ? kill_fasync+0x199/0x4d0 [ 2215.624235][T26540] ? __lock_acquire+0xaac/0xd20 [ 2215.624262][T26540] _raw_read_lock_irqsave+0xaf/0x100 [ 2215.624282][T26540] ? kill_fasync+0x199/0x4d0 [ 2215.624297][T26540] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 2215.624322][T26540] kill_fasync+0x199/0x4d0 [ 2215.624336][T26540] ? kill_fasync+0x53/0x4d0 [ 2215.624352][T26540] mousedev_notify_readers+0x6f1/0xc00 [ 2215.624382][T26540] ? mousedev_notify_readers+0x2c/0xc00 [ 2215.624409][T26540] mousedev_event+0x602/0x1320 [ 2215.624435][T26540] input_handle_events_default+0xd4/0x1a0 [ 2215.624455][T26540] ? input_pass_values+0x8d/0x890 [ 2215.624480][T26540] input_pass_values+0x285/0x890 [ 2215.624508][T26540] ? input_handle_event+0x70c/0xf30 [ 2215.624530][T26540] input_event_dispose+0x330/0x6b0 [ 2215.624552][T26540] input_inject_event+0x1fe/0x320 [ 2215.624574][T26540] ? input_inject_event+0xbc/0x320 [ 2215.624596][T26540] evdev_write+0x2fc/0x480 [ 2215.624613][T26540] ? __pfx_evdev_write+0x10/0x10 [ 2215.624629][T26540] ? bpf_lsm_file_permission+0x9/0x20 [ 2215.624651][T26540] ? security_file_permission+0x75/0x290 [ 2215.624667][T26540] ? rw_verify_area+0x258/0x650 [ 2215.624686][T26540] ? __pfx_evdev_write+0x10/0x10 [ 2215.624701][T26540] vfs_write+0x27b/0xa90 [ 2215.624723][T26540] ? __pfx_vfs_write+0x10/0x10 [ 2215.624743][T26540] ? __fget_files+0x2a/0x420 [ 2215.624766][T26540] ? __fget_files+0x2a/0x420 [ 2215.624788][T26540] ? __fget_files+0x3a0/0x420 [ 2215.624809][T26540] ? __fget_files+0x2a/0x420 [ 2215.624840][T26540] ksys_write+0x145/0x250 [ 2215.624860][T26540] ? __pfx_ksys_write+0x10/0x10 [ 2215.624881][T26540] ? do_syscall_64+0xba/0x210 [ 2215.624910][T26540] do_syscall_64+0xf6/0x210 [ 2215.624934][T26540] ? clear_bhb_loop+0x60/0xb0 [ 2215.624953][T26540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2215.624970][T26540] RIP: 0033:0x7fe9c5f8e969 [ 2215.624986][T26540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2215.625001][T26540] RSP: 002b:00007fe9c6e5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2215.625020][T26540] RAX: ffffffffffffffda RBX: 00007fe9c61b5fa0 RCX: 00007fe9c5f8e969 [ 2215.625033][T26540] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 2215.625044][T26540] RBP: 00007fe9c6010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 2215.625055][T26540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2215.625066][T26540] R13: 0000000000000000 R14: 00007fe9c61b5fa0 R15: 00007fe9c62dfa28 [ 2215.625084][T26540] [ 2221.933521][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.939852][ T1300] ieee802154 phy1 wpan1: encryption failed: -22