last executing test programs: 2m5.003437581s ago: executing program 0 (id=8335): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0x9, 0x3}, &(0x7f0000000180)=0xc) 2m4.913985423s ago: executing program 0 (id=8338): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0xde, 0x1ff, 0xf}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)={r2}) 2m4.748242855s ago: executing program 0 (id=8344): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x286}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m4.616918639s ago: executing program 0 (id=8347): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m3.71587308s ago: executing program 0 (id=8352): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r1 = syz_io_uring_setup(0x7d9b, &(0x7f00000008c0)={0x0, 0x92af, 0x10100, 0x1, 0x21a}, &(0x7f0000000640)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}}) io_uring_enter(r1, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 2m3.359024846s ago: executing program 0 (id=8360): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa87, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000180)={0x8}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 2m3.070708256s ago: executing program 32 (id=8360): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa87, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000180)={0x8}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xb, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) 8.759996415s ago: executing program 1 (id=9932): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000380)=""/79, 0x4f}], 0x1) 7.857938562s ago: executing program 1 (id=9942): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 7.52771676s ago: executing program 1 (id=9948): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x1, 0x7f, 0x1f, 0x0, 0x7f}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x43) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xe042, 0x0) 7.353991812s ago: executing program 1 (id=9952): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x8, 0x0, 0x0, 0x8}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.280878511s ago: executing program 1 (id=9953): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x9}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x3f}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b0000000000000718"], 0x30}, 0x0) 7.250026645s ago: executing program 1 (id=9954): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.327830981s ago: executing program 3 (id=10018): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='kfree\x00', r1}, 0x18) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') 1.240381966s ago: executing program 3 (id=10020): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000007c0)=r2) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) 1.232223863s ago: executing program 3 (id=10021): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x2c, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, {[], {{0x8026, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3}}}}}}}, 0x0) 1.18874064s ago: executing program 4 (id=10023): syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 1.087254224s ago: executing program 3 (id=10025): syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x121302) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x400, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) 972.028898ms ago: executing program 2 (id=10026): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c1", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x46}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 971.57247ms ago: executing program 3 (id=10027): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000600)="580000001500add427323b472545b45602117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffff04000000ffffe7ee000000deff0000000200000000", 0x58}], 0x1) 859.903948ms ago: executing program 3 (id=10028): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x0) 857.396401ms ago: executing program 5 (id=10029): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 705.484369ms ago: executing program 5 (id=10030): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="b8", 0x1}, {0x0}], 0x2}}], 0x1, 0x4400c800) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 703.252224ms ago: executing program 2 (id=10031): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x2000c090}, 0xa111) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40000) 691.862136ms ago: executing program 4 (id=10032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="034886dd09032800030020000000600000000004730081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 613.178939ms ago: executing program 2 (id=10033): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\x03\x00\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xb6=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x01\x00\x00\x00\x00\x00\x00\x00\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q)U\xff\xff\xff\xff\xff\xff\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xb8\x1c8\x13\xf7\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6', 0x42, 0x24, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 510.618952ms ago: executing program 2 (id=10034): io_setup(0x3, &(0x7f0000000000)=0x0) r1 = timerfd_create(0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000009c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000100)=0x8) 510.098517ms ago: executing program 5 (id=10035): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x141003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) futex(0x0, 0xb, 0x0, 0x0, &(0x7f0000000140), 0x1) 445.070482ms ago: executing program 4 (id=10036): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="000a0000000000000502000505020000c204fffffffd040130c9"], 0x60) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x1, 0x0) 378.49664ms ago: executing program 2 (id=10037): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x8, 0x400, 0x100}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x16, 0x0, 0xfffffffd}]}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000001b80)={@local, @link_local, @void}, 0x0) 369.737384ms ago: executing program 4 (id=10038): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81044e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a090000000010ffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 348.863939ms ago: executing program 5 (id=10039): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x3, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0) 264.465927ms ago: executing program 2 (id=10040): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1}) 263.99061ms ago: executing program 4 (id=10041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x18, {[@window={0x9, 0x3}, @sack_perm={0x4, 0x2}]}}}}}}, 0x3e) 100.102169ms ago: executing program 5 (id=10042): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f0000000140)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 339.371µs ago: executing program 4 (id=10043): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x80341) ioctl$int_in(r0, 0x5452, &(0x7f0000000c40)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 0s ago: executing program 5 (id=10044): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000505000/0x1000)=nil, 0x1000}) kernel console output (not intermixed with test programs): DB block 7 [ 569.061672][T25599] loop2: AHDI p1 p2 p3 p4 [ 569.089053][T25599] loop2: partition table partially beyond EOD, truncated [ 569.111873][T25599] loop2: p1 start 1601398130 is beyond EOD, truncated [ 569.118707][T25599] loop2: p2 start 1702059890 is beyond EOD, truncated [ 569.130971][T25599] loop2: p3 size 150995200 extends beyond EOD, truncated [ 569.181533][ T5829] udevd[5829]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 569.247242][ T5829] udevd[5829]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 569.312361][ T5882] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 569.483109][ T5882] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.498105][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.509400][ T5882] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 569.523386][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 569.531528][ T5882] usb 2-1: SerialNumber: syz [ 569.669323][T25617] syzkaller1: entered promiscuous mode [ 569.678201][T25617] syzkaller1: entered allmulticast mode [ 569.763514][ T5882] usb 2-1: 0:2 : does not exist [ 569.784638][ T5882] usb 2-1: USB disconnect, device number 87 [ 569.973379][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.011922][ T5882] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 571.192277][ T5882] usb 2-1: Using ep0 maxpacket: 8 [ 571.199326][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 571.231219][ T5882] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 571.254371][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.278300][ T5882] usb 2-1: config 0 descriptor?? [ 571.299575][T25688] netlink: 'syz.5.8764': attribute type 1 has an invalid length. [ 571.307814][T25688] netlink: 'syz.5.8764': attribute type 2 has an invalid length. [ 571.374108][T25689] netlink: 'syz.5.8764': attribute type 1 has an invalid length. [ 571.398425][T25689] netlink: 'syz.5.8764': attribute type 2 has an invalid length. [ 571.492801][ T5882] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 571.697407][ T5882] usb 2-1: USB disconnect, device number 88 [ 571.746932][T25693] bridge0: port 3(vlan2) entered blocking state [ 571.768162][T25693] bridge0: port 3(vlan2) entered disabled state [ 571.779922][T25693] vlan2: entered allmulticast mode [ 571.792862][T25693] vlan2: entered promiscuous mode [ 572.773126][T25735] syzkaller1: entered promiscuous mode [ 572.778650][T25735] syzkaller1: entered allmulticast mode [ 573.133487][ T52] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 573.161957][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 573.296071][ T52] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 573.323055][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.342083][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 573.352289][ T52] usb 4-1: Product: syz [ 573.358042][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.369018][ T52] usb 4-1: Manufacturer: syz [ 573.383888][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.393911][ T52] usb 4-1: SerialNumber: syz [ 573.400908][ T52] usb 4-1: config 0 descriptor?? [ 573.409759][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 573.429753][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.454719][ T24] usb 6-1: config 0 descriptor?? [ 573.471893][ T24] hub 6-1:0.0: USB hub found [ 573.680891][ T24] hub 6-1:0.0: 1 port detected [ 573.833162][ T52] usb 4-1: Firmware: major: 0, minor: 168, hardware type: UNKNOWN (136) [ 574.033866][ T52] usb 4-1: failed to fetch extended address, random address set [ 574.043707][ T52] usb 4-1: atusb_probe: initialization failed, error = -524 [ 574.051128][ T52] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 574.061492][ T52] usb 4-1: USB disconnect, device number 105 [ 574.098388][ T24] usb 6-1: USB disconnect, device number 7 [ 574.162177][ T5882] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 574.321967][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 574.337468][ T5882] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 574.346788][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.354989][ T5882] usb 2-1: Product: syz [ 574.359195][ T5882] usb 2-1: Manufacturer: syz [ 574.364100][ T5882] usb 2-1: SerialNumber: syz [ 574.370376][ T5882] usb 2-1: config 0 descriptor?? [ 574.377070][ T5882] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 574.921850][ T882] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 575.093815][ T882] usb 6-1: Using ep0 maxpacket: 16 [ 575.101462][ T882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.130625][ T882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 575.144479][ T882] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 575.161925][ T882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.184438][ T882] usb 6-1: config 0 descriptor?? [ 575.391189][ T30] audit: type=1326 audit(1742928855.789:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25845 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa65f729359 code=0x7ffc0000 [ 575.394916][ T5882] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 575.503297][ T30] audit: type=1326 audit(1742928855.789:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25845 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 575.512474][ T5882] usb 2-1: USB disconnect, device number 89 [ 575.611270][ T30] audit: type=1326 audit(1742928855.789:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25845 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa65f729359 code=0x7ffc0000 [ 575.637623][ T882] input: HID 05ac:8241 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:8241.005D/input/input110 [ 575.719599][ T30] audit: type=1326 audit(1742928855.789:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25845 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 575.755796][ T882] appleir 0003:05AC:8241.005D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 575.757674][ T30] audit: type=1326 audit(1742928855.789:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25845 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 575.797310][ T30] audit: type=1326 audit(1742928855.789:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25845 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa65f729359 code=0x7ffc0000 [ 575.819622][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.873234][T25857] ip6tnl1: entered promiscuous mode [ 575.898633][ T30] audit: type=1326 audit(1742928855.789:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25845 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 575.921076][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.003362][ T30] audit: type=1326 audit(1742928855.789:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25845 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa65f729359 code=0x7ffc0000 [ 576.026430][ T30] audit: type=1326 audit(1742928855.789:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25845 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 576.084495][ T30] audit: type=1326 audit(1742928855.789:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25845 comm="syz.3.8827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa65f729359 code=0x7ffc0000 [ 576.106761][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.328170][T25867] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8837'. [ 576.492486][ T24] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 576.588181][T25875] vlan0: entered promiscuous mode [ 576.596839][T25875] team0: entered promiscuous mode [ 576.618432][T25875] team0: left promiscuous mode [ 576.652842][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 576.659561][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 576.676543][ T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 576.721841][ T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 576.730061][ T24] usb 2-1: Product: syz [ 576.741927][ T24] usb 2-1: Manufacturer: syz [ 576.746657][ T24] usb 2-1: SerialNumber: syz [ 576.762512][ T24] usb 2-1: config 0 descriptor?? [ 576.807747][T25865] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 576.847840][T25883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8845'. [ 576.938390][T25887] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 577.072359][ T5881] usb 2-1: USB disconnect, device number 90 [ 577.181044][ T12] tipc: Subscription rejected, illegal request [ 577.361933][T23374] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 577.417211][T25906] input: syz0 as /devices/virtual/input/input111 [ 577.541908][T23374] usb 3-1: Using ep0 maxpacket: 8 [ 577.577342][T23374] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 577.597031][ T882] usb 6-1: USB disconnect, device number 8 [ 577.626107][T23374] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 577.665562][T23374] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 577.689686][T23374] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.715291][T23374] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.729096][T23374] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 577.741009][T23374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.990023][T23374] usb 3-1: usb_control_msg returned -32 [ 578.026037][T23374] usbtmc 3-1:16.0: can't read capabilities [ 578.144000][T25927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8865'. [ 578.635368][T25946] syzkaller1: entered promiscuous mode [ 578.643004][T25946] syzkaller1: entered allmulticast mode [ 578.748092][T25948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8874'. [ 578.968154][T25953] syzkaller1: entered promiscuous mode [ 578.975029][T25953] syzkaller1: entered allmulticast mode [ 578.982595][T25955] syz.3.8886 (25955): attempted to duplicate a private mapping with mremap. This is not supported. [ 579.924554][T25982] syzkaller1: entered promiscuous mode [ 579.939483][T25982] syzkaller1: entered allmulticast mode [ 580.142034][ T9] usb 3-1: USB disconnect, device number 67 [ 580.472040][ T5883] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 580.526242][T25997] syzkaller1: entered promiscuous mode [ 580.535909][T25997] syzkaller1: entered allmulticast mode [ 580.666633][ T5883] usb 4-1: Using ep0 maxpacket: 8 [ 580.677929][ T5883] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 580.701995][ T5883] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 580.714014][ T5883] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 580.729071][ T5883] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.752724][ T5883] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 580.788825][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.845893][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 580.846116][ T30] audit: type=1326 audit(1742928861.249:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26005 comm="syz.4.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6bd8d169 code=0x7ffc0000 [ 580.863384][T23374] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 580.964031][ T30] audit: type=1326 audit(1742928861.249:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26005 comm="syz.4.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6bd8d169 code=0x7ffc0000 [ 580.986613][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.078020][T23374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.096604][ T5883] usb 4-1: usb_control_msg returned -32 [ 581.122501][ T5883] usbtmc 4-1:16.0: can't read capabilities [ 581.126064][T23374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.156940][T23374] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 581.164427][ T30] audit: type=1326 audit(1742928861.289:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26005 comm="syz.4.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdd6bd8d169 code=0x7ffc0000 [ 581.170329][T23374] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 581.220577][ T30] audit: type=1326 audit(1742928861.289:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26005 comm="syz.4.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6bd8d169 code=0x7ffc0000 [ 581.261781][T23374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.291209][T23374] usb 3-1: config 0 descriptor?? [ 581.407784][ T30] audit: type=1326 audit(1742928861.289:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26005 comm="syz.4.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6bd8d169 code=0x7ffc0000 [ 581.432351][T26010] usbtmc 4-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 581.518157][ T30] audit: type=1326 audit(1742928861.289:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26005 comm="syz.4.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdd6bd8d169 code=0x7ffc0000 [ 581.542281][ T30] audit: type=1326 audit(1742928861.289:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26005 comm="syz.4.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 581.567523][ T30] audit: type=1326 audit(1742928861.289:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26005 comm="syz.4.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 581.590979][ T30] audit: type=1326 audit(1742928861.289:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26005 comm="syz.4.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 581.689522][ T30] audit: type=1326 audit(1742928861.289:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26005 comm="syz.4.8900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 581.714382][T23374] plantronics 0003:047F:FFFF.005E: No inputs registered, leaving [ 581.779733][T23374] plantronics 0003:047F:FFFF.005E: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 581.956468][T23374] usb 3-1: USB disconnect, device number 68 [ 581.982133][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 582.141848][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 582.148798][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 582.163107][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 582.176928][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 582.189623][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 582.208096][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 582.218394][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.342995][T26038] vlan2: entered allmulticast mode [ 582.348182][T26038] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 582.356490][T26038] bridge0: port 1(vlan2) entered blocking state [ 582.363710][T26038] bridge0: port 1(vlan2) entered disabled state [ 582.371002][T26038] vlan2: entered promiscuous mode [ 582.376202][T26038] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 582.435940][ T24] usb 6-1: usb_control_msg returned -32 [ 582.442173][ T24] usbtmc 6-1:16.0: can't read capabilities [ 583.223943][T26074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8929'. [ 583.249463][T23374] usb 4-1: USB disconnect, device number 106 [ 583.255584][ T5883] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 583.401873][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 583.412551][ T5883] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 583.430390][ T5883] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 583.471940][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 583.480155][ T5883] usb 3-1: Product: syz [ 583.521180][ T5883] usb 3-1: Manufacturer: syz [ 583.528286][ T5883] usb 3-1: SerialNumber: syz [ 583.538516][ T5883] usb 3-1: config 0 descriptor?? [ 583.556472][T26068] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 583.721049][T26094] ALSA: seq fatal error: cannot create timer (-19) [ 583.771415][ T5883] usb 3-1: USB disconnect, device number 69 [ 583.782597][T23374] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 583.943692][T23374] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 583.953396][T23374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.964029][T23374] usb 5-1: config 0 descriptor?? [ 583.970989][T23374] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 584.185800][T23374] gspca_cpia1: usb_control_msg 05, error -71 [ 584.194276][T23374] gspca_cpia1: usb_control_msg 01, error -71 [ 584.201670][T23374] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 584.231258][T23374] usb 5-1: USB disconnect, device number 79 [ 584.781176][ T882] usb 6-1: USB disconnect, device number 9 [ 584.891908][T23374] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 585.061952][T23374] usb 5-1: Using ep0 maxpacket: 8 [ 585.073314][T23374] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 585.096329][T23374] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 585.137059][T23374] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 585.149333][T23374] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.167268][T23374] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 585.178167][T23374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.411083][T23374] usb 5-1: GET_CAPABILITIES returned 0 [ 585.421492][T23374] usbtmc 5-1:16.0: can't read capabilities [ 585.558001][T26157] loop2: detected capacity change from 0 to 7 [ 585.565765][T26157] Dev loop2: unable to read RDB block 7 [ 585.571783][T26157] loop2: unable to read partition table [ 585.577565][T26157] loop2: partition table beyond EOD, truncated [ 585.591726][T26157] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 585.628190][ T9] usb 5-1: USB disconnect, device number 80 [ 585.718970][T26161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 585.827578][T25567] tipc: Subscription rejected, illegal request [ 586.021862][ T24] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 586.060441][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 586.060458][ T30] audit: type=1326 audit(1742928866.459:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26177 comm="syz.1.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 586.092034][ T30] audit: type=1326 audit(1742928866.459:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26177 comm="syz.1.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 586.116405][ T30] audit: type=1326 audit(1742928866.499:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26177 comm="syz.1.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 586.158512][ T30] audit: type=1326 audit(1742928866.499:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26177 comm="syz.1.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 586.187796][ T30] audit: type=1326 audit(1742928866.499:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26177 comm="syz.1.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 586.210139][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.221638][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 586.226987][ T30] audit: type=1326 audit(1742928866.499:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26177 comm="syz.1.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 586.250649][ T30] audit: type=1326 audit(1742928866.499:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26177 comm="syz.1.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 586.290493][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 586.300323][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 586.310417][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 586.320371][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 586.336847][ T30] audit: type=1326 audit(1742928866.499:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26177 comm="syz.1.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 586.359173][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.369819][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 586.387282][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 586.396604][ T30] audit: type=1326 audit(1742928866.499:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26177 comm="syz.1.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 586.429361][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.456777][ T30] audit: type=1326 audit(1742928866.499:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26177 comm="syz.1.8973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 586.509151][T26186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 586.703706][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 586.713117][ T24] usbtmc 4-1:16.0: can't read capabilities [ 587.181864][ T52] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 587.270504][T26202] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 587.353723][ T52] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.371619][ T52] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 587.387643][ T52] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 587.397100][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.409749][ T52] usb 3-1: Product: syz [ 587.414179][ T52] usb 3-1: Manufacturer: syz [ 587.419037][ T52] usb 3-1: SerialNumber: syz [ 587.471868][ T5883] usb 4-1: USB disconnect, device number 107 [ 587.637413][ T52] usb 3-1: 0:2 : does not exist [ 587.656853][ T52] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 587.684793][ T52] usb 3-1: USB disconnect, device number 70 [ 587.862575][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.416134][T26215] bridge0: port 1(team0) entered blocking state [ 588.431879][T26215] bridge0: port 1(team0) entered disabled state [ 588.442298][T26215] team0: entered allmulticast mode [ 588.458816][T26215] team0: entered promiscuous mode [ 589.115448][T26231] loop2: detected capacity change from 0 to 7 [ 589.150558][T26231] Dev loop2: unable to read RDB block 7 [ 589.165919][T26231] loop2: unable to read partition table [ 589.176097][T26231] loop2: partition table beyond EOD, truncated [ 589.191843][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 589.192394][T26231] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 589.352934][ T9] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.381878][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 589.388554][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 589.411786][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.431989][ T9] usb 3-1: config 0 descriptor?? [ 589.602873][T26241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 589.624641][T26245] loop2: detected capacity change from 0 to 524287999 [ 589.641992][T26229] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 589.660103][T26229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.696785][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 589.719712][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 589.745079][ T9] usb 3-1: USB disconnect, device number 71 [ 590.285401][T26266] netlink: 452 bytes leftover after parsing attributes in process `syz.4.9015'. [ 590.458565][T26274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 590.603979][T26282] input: syz1 as /devices/virtual/input/input112 [ 590.751771][ T52] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 590.782557][ T5883] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 590.935605][ T52] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 590.956750][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.977636][ T5883] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 590.996114][ T52] usb 5-1: config 0 descriptor?? [ 591.004550][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.023306][ T52] cp210x 5-1:0.0: cp210x converter detected [ 591.034229][ T5883] usb 3-1: Product: syz [ 591.038454][ T5883] usb 3-1: Manufacturer: syz [ 591.049820][ T5883] usb 3-1: SerialNumber: syz [ 591.059279][ T5883] usb 3-1: config 0 descriptor?? [ 591.098939][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 591.098957][ T30] audit: type=1326 audit(1742928871.489:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.1.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 591.143380][ T30] audit: type=1326 audit(1742928871.499:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.1.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 591.199408][ T30] audit: type=1326 audit(1742928871.499:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.1.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ae1729359 code=0x7ffc0000 [ 591.304542][ T30] audit: type=1326 audit(1742928871.499:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.1.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ae1729359 code=0x7ffc0000 [ 591.331968][ T30] audit: type=1326 audit(1742928871.499:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.1.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ae1729359 code=0x7ffc0000 [ 591.367035][ T30] audit: type=1326 audit(1742928871.499:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.1.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 591.395746][ T30] audit: type=1326 audit(1742928871.499:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.1.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ae1729359 code=0x7ffc0000 [ 591.424239][ T30] audit: type=1326 audit(1742928871.499:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.1.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ae1729359 code=0x7ffc0000 [ 591.464995][ T52] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 591.488215][ T30] audit: type=1326 audit(1742928871.499:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.1.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae178d169 code=0x7ffc0000 [ 591.532109][ T52] usb 5-1: cp210x converter now attached to ttyUSB0 [ 591.591217][ T30] audit: type=1326 audit(1742928871.499:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26297 comm="syz.1.9028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9ae1729359 code=0x7ffc0000 [ 591.746590][ T52] usb 5-1: USB disconnect, device number 81 [ 591.757138][ T52] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 591.780890][ T52] cp210x 5-1:0.0: device disconnected [ 591.920857][ T5883] usb 3-1: Firmware version (0.0) predates our first public release. [ 591.958747][ T5883] usb 3-1: Please update to version 0.2 or newer [ 592.034477][ T5883] usb 3-1: USB disconnect, device number 72 [ 593.197840][T26370] tipc: Started in network mode [ 593.202912][T26370] tipc: Node identity ac14142f, cluster identity 4711 [ 593.209920][T26370] tipc: New replicast peer: 0.0.0.0 [ 593.218753][T26370] tipc: Enabled bearer , priority 10 [ 593.432100][T26380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9060'. [ 593.971967][ T9] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 594.121836][ T52] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 594.141898][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 594.149516][T23374] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 594.158528][ T9] usb 4-1: config 0 has no interfaces? [ 594.166977][ T9] usb 4-1: New USB device found, idVendor=1209, idProduct=8b00, bcdDevice=9b.08 [ 594.176120][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.184618][ T9] usb 4-1: Product: syz [ 594.188805][ T9] usb 4-1: Manufacturer: syz [ 594.193515][ T9] usb 4-1: SerialNumber: syz [ 594.199618][ T9] usb 4-1: config 0 descriptor?? [ 594.273031][ T52] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.284630][ T52] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 594.296241][ T52] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 594.308228][ T52] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.311893][T23374] usb 6-1: Using ep0 maxpacket: 32 [ 594.317665][ T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.328338][T23374] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 594.330893][ T52] usb 5-1: Product: syz [ 594.340645][T23374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.344638][ T5883] tipc: Node number set to 2886997039 [ 594.357931][ T52] usb 5-1: Manufacturer: syz [ 594.358734][T23374] usb 6-1: config 0 descriptor?? [ 594.362694][ T52] usb 5-1: SerialNumber: syz [ 594.372028][T23374] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 594.780811][T23374] gspca_nw80x: reg_r err -32 [ 594.785805][T23374] nw80x 6-1:0.0: probe with driver nw80x failed with error -32 [ 594.964381][T26411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.973951][T26411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.396781][ T52] cdc_ncm 5-1:1.0: bind() failure [ 595.407127][ T52] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 595.418229][ T52] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 595.428344][ T52] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 595.443009][ T52] usb 5-1: USB disconnect, device number 82 [ 596.492138][ T52] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 596.563971][T26466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9101'. [ 596.647514][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.660977][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.675975][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 596.690528][ T52] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 596.699828][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.710150][ T52] usb 5-1: config 0 descriptor?? [ 596.717265][ T882] usb 4-1: USB disconnect, device number 108 [ 596.776678][T26472] loop8: detected capacity change from 0 to 1 [ 596.787706][T26472] Dev loop8: unable to read RDB block 1 [ 596.794231][T26472] loop8: unable to read partition table [ 596.800090][T26472] loop8: partition table beyond EOD, truncated [ 596.810569][T26472] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 596.920089][ T882] usb 6-1: USB disconnect, device number 10 [ 597.149462][ T52] plantronics 0003:047F:FFFF.005F: No inputs registered, leaving [ 597.176235][ T52] plantronics 0003:047F:FFFF.005F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 597.425697][ T882] usb 5-1: USB disconnect, device number 83 [ 597.562489][ T5883] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 597.715956][ T5883] usb 3-1: Using ep0 maxpacket: 8 [ 597.725136][ T5883] usb 3-1: config 0 has no interfaces? [ 597.740189][ T5883] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.750127][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 597.761845][ T5883] usb 3-1: SerialNumber: syz [ 597.769591][ T5883] usb 3-1: config 0 descriptor?? [ 598.011430][ T882] usb 3-1: USB disconnect, device number 73 [ 598.086325][T26514] loop2: detected capacity change from 0 to 7 [ 598.102418][T26514] Dev loop2: unable to read RDB block 7 [ 598.111271][T26514] loop2: unable to read partition table [ 598.117460][T26514] loop2: partition table beyond EOD, truncated [ 598.126433][T26514] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 598.501848][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 598.652266][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 598.659429][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 598.668225][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 598.671921][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 598.680796][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 598.696365][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 598.707629][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.738771][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 598.761757][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.854189][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.867411][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.878325][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 598.888161][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 598.897532][ T9] usb 4-1: SerialNumber: syz [ 598.985654][ T24] usb 6-1: usb_control_msg returned -32 [ 598.991622][ T24] usbtmc 6-1:16.0: can't read capabilities [ 599.115387][ T9] usb 4-1: 0:2 : does not exist [ 599.125384][ T9] usb 4-1: USB disconnect, device number 109 [ 599.314449][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 599.583727][ T5883] usb 6-1: USB disconnect, device number 11 [ 600.161970][ T5883] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 600.226353][ T9] IPVS: starting estimator thread 0... [ 600.362580][T26579] IPVS: using max 34 ests per chain, 81600 per kthread [ 600.372352][ T5883] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 600.382626][ T5883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.391570][ T5883] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.451920][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 600.476191][ T5883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.501974][ T5883] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.531947][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 600.554775][ T5883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.570475][ T5883] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.584847][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 600.592789][ T5883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.602410][ T5883] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.614875][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 600.626556][ T5883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.636501][ T5883] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.647498][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 600.655691][ T5883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.665931][ T5883] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.678841][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 600.689436][ T5883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.699877][ T5883] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.711199][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 600.719151][ T5883] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 600.728538][ T5883] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 600.740362][ T5883] usb 4-1: config 0 interface 0 has no altsetting 0 [ 600.755736][ T5883] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 600.786208][ T5883] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 600.795125][ T5883] usb 4-1: Product: syz [ 600.799363][ T5883] usb 4-1: Manufacturer: syz [ 600.804350][ T5883] usb 4-1: SerialNumber: syz [ 600.810334][ T5883] usb 4-1: config 0 descriptor?? [ 600.819985][ T5883] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 601.028048][T26608] loop8: detected capacity change from 0 to 1 [ 601.035125][ T882] usb 4-1: USB disconnect, device number 110 [ 601.041379][T26608] Dev loop8: unable to read RDB block 1 [ 601.043918][ T882] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 601.049761][T26608] loop8: unable to read partition table [ 601.075285][T26608] loop8: partition table beyond EOD, truncated [ 601.106815][T26608] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 601.669455][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 601.739138][T26652] netlink: 'syz.1.9187': attribute type 11 has an invalid length. [ 601.833097][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.847775][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 601.874459][T26659] input: syz0 as /devices/virtual/input/input114 [ 601.875652][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 601.910263][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.939393][ T24] usb 6-1: config 0 descriptor?? [ 601.964340][ T24] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 602.041486][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9194'. [ 602.061813][T26667] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9194'. [ 602.077286][T26667] gtp1: entered promiscuous mode [ 602.092277][T26667] gtp1: entered allmulticast mode [ 602.255987][T26630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.280925][T26630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.427420][ T5883] usb 6-1: USB disconnect, device number 12 [ 602.747421][T26693] ALSA: mixer_oss: invalid OSS volume '' [ 603.021835][ T882] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 603.052052][ T5883] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 603.182192][ T882] usb 4-1: Using ep0 maxpacket: 8 [ 603.194025][ T882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 603.208993][ T5883] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 603.218487][ T882] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 603.218518][ T882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.220098][ T882] usb 4-1: config 0 descriptor?? [ 603.262392][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.270447][ T5883] usb 5-1: Product: syz [ 603.278986][ T5883] usb 5-1: Manufacturer: syz [ 603.284085][ T5883] usb 5-1: SerialNumber: syz [ 603.293349][ T5883] usb 5-1: config 0 descriptor?? [ 603.470769][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022736c00: rx timeout, send abort [ 603.514344][ T882] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 603.592007][ T52] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 603.727869][ T5890] usb 4-1: USB disconnect, device number 111 [ 603.727913][ C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 603.764642][ T52] usb 6-1: Using ep0 maxpacket: 8 [ 603.771167][ T52] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 603.780542][ T52] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 603.792150][ T52] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 603.802202][ T52] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 603.812586][ T52] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 603.825826][ T52] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 603.835193][ T52] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.908590][ T5883] usb 5-1: Firmware version (0.0) predates our first public release. [ 603.917764][ T5883] usb 5-1: Please update to version 0.2 or newer [ 603.973651][ T5883] usb 5-1: USB disconnect, device number 84 [ 603.980740][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022736c00: abort rx timeout. Force session deactivation [ 604.060008][ T52] usb 6-1: usb_control_msg returned -32 [ 604.066045][ T52] usbtmc 6-1:16.0: can't read capabilities [ 604.871896][ T882] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 605.023941][ T882] usb 3-1: Using ep0 maxpacket: 32 [ 605.031229][ T882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.047216][ T882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.063404][ T882] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 605.079926][ T882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.106738][ T882] usb 3-1: config 0 descriptor?? [ 605.531309][ T882] savu 0003:1E7D:2D5A.0060: hiddev1,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 605.737287][ T5890] usb 3-1: USB disconnect, device number 74 [ 605.905632][T26799] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 606.093943][T26803] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 606.371174][ T5882] usb 6-1: USB disconnect, device number 13 [ 606.464124][T26819] tun2: tun_chr_ioctl cmd 1074025675 [ 606.469469][T26819] tun2: persist disabled [ 606.487989][T26819] tun2: tun_chr_ioctl cmd 1074025672 [ 606.497583][T26819] tun2: ignored: set checksum disabled [ 606.562380][ T5890] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 606.723585][ T5890] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 606.740002][ T5890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 606.740323][T26831] sctp: [Deprecated]: syz.4.9264 (pid 26831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 606.740323][T26831] Use struct sctp_sack_info instead [ 606.750702][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.785159][ T5890] usb 4-1: Product: syz [ 606.791374][ T5890] usb 4-1: Manufacturer: syz [ 606.799607][ T5890] usb 4-1: SerialNumber: syz [ 606.821858][ T5882] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 606.981792][ T5882] usb 6-1: Using ep0 maxpacket: 16 [ 606.989600][ T5882] usb 6-1: config index 0 descriptor too short (expected 69, got 36) [ 607.001239][ T5882] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.017394][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 607.029059][ T882] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 607.041061][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 607.051223][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 607.076490][ T5882] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 607.085782][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.094183][ T5882] usb 6-1: Product: syz [ 607.098365][ T5882] usb 6-1: Manufacturer: syz [ 607.103166][ T5882] usb 6-1: SerialNumber: syz [ 607.112231][ T5882] usb 6-1: config 0 descriptor?? [ 607.122525][ T5882] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 607.215818][ T882] usb 2-1: unable to get BOS descriptor or descriptor too short [ 607.228607][ T882] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 607.236525][ T882] usb 2-1: can't read configurations, error -71 [ 607.836969][ T5890] cdc_ncm 4-1:1.0: bind() failure [ 607.851250][ T5890] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 607.880755][ T5890] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 607.897367][ T5890] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 607.939388][ T5882] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input115 [ 607.944357][ T5890] usb 4-1: USB disconnect, device number 112 [ 608.001212][ T30] kauditd_printk_skb: 140 callbacks suppressed [ 608.001228][ T30] audit: type=1326 audit(1742928888.399:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26860 comm="syz.1.9276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ae178d169 code=0x0 [ 608.141282][ T9] usb 6-1: USB disconnect, device number 14 [ 608.164741][T26865] loop9: detected capacity change from 0 to 7 [ 608.193001][T26865] Dev loop9: unable to read RDB block 7 [ 608.212006][T26865] loop9: AHDI p1 [ 608.216109][T26865] loop9: partition table partially beyond EOD, truncated [ 608.564755][ T882] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 608.631281][ T30] audit: type=1326 audit(1742928889.029:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.3.9286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 608.641617][T26884] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 608.662085][ T30] audit: type=1326 audit(1742928889.029:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.3.9286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 608.686895][ T30] audit: type=1326 audit(1742928889.069:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.3.9286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 608.709346][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.715840][ T30] audit: type=1326 audit(1742928889.069:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.3.9286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 608.755221][ T30] audit: type=1326 audit(1742928889.069:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.3.9286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 608.777679][ C0] vkms_vblank_simulate: vblank timer overrun [ 608.784365][ T882] usb 3-1: Using ep0 maxpacket: 8 [ 608.807672][ T882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 608.831760][ T882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 608.861857][ T30] audit: type=1326 audit(1742928889.089:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.3.9286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 608.888196][ T882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 608.906918][ T882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 608.940780][ T882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 608.961053][ T882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.013128][ T30] audit: type=1326 audit(1742928889.389:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.3.9286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 609.075969][ T30] audit: type=1326 audit(1742928889.389:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.3.9286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa65f78d169 code=0x7ffc0000 [ 609.160590][ T30] audit: type=1326 audit(1742928889.489:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26885 comm="syz.3.9286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa65f78bad0 code=0x7ffc0000 [ 609.217908][ T882] usb 3-1: GET_CAPABILITIES returned 0 [ 609.242665][ T882] usbtmc 3-1:16.0: can't read capabilities [ 609.309369][T26899] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 609.413874][T26903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 609.445161][ T9] usb 3-1: USB disconnect, device number 75 [ 609.606431][T26909] syzkaller1: entered promiscuous mode [ 609.614731][T26909] syzkaller1: entered allmulticast mode [ 609.687651][T26912] syzkaller1: entered promiscuous mode [ 609.706048][T26912] syzkaller1: entered allmulticast mode [ 610.052502][ T9] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 610.224114][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.239389][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.254044][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 610.269362][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 610.278568][ T9] usb 4-1: SerialNumber: syz [ 610.505616][ T9] usb 4-1: 0:2 : does not exist [ 610.547907][ T9] usb 4-1: USB disconnect, device number 113 [ 610.754414][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 611.822019][T23374] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 612.013383][T23374] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 612.051827][T23374] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 612.062952][T23374] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 612.084226][T23374] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 612.102468][T23374] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.114933][T23374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.123053][ T24] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 612.130985][T23374] usb 3-1: Product: syz [ 612.135474][T23374] usb 3-1: Manufacturer: syz [ 612.140220][T23374] usb 3-1: SerialNumber: syz [ 612.153385][T26972] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 612.273335][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.292486][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 612.310122][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 612.326924][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 612.338304][ T24] usb 4-1: SerialNumber: syz [ 612.397924][T26972] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 612.417336][T26972] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 612.569805][ T24] usb 4-1: 0:2 : does not exist [ 612.605832][ T24] usb 4-1: USB disconnect, device number 114 [ 612.835094][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.021905][ T5883] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 613.044202][T26972] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 613.062093][T26972] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 613.182304][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 613.197058][ T5883] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 613.216135][ T5883] usb 5-1: config 0 has no interface number 0 [ 613.230118][ T5883] usb 5-1: config 0 interface 12 has no altsetting 0 [ 613.278298][T23374] cdc_mbim 3-1:1.0: failed to get mac address [ 613.288392][T23374] cdc_mbim 3-1:1.0: bind() failure [ 613.332969][ T5883] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 613.341510][T23374] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 613.360481][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.362138][T23374] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 613.382275][ T5883] usb 5-1: Product: syz [ 613.386482][ T5883] usb 5-1: Manufacturer: syz [ 613.391172][ T5883] usb 5-1: SerialNumber: syz [ 613.404107][ T5883] usb 5-1: config 0 descriptor?? [ 613.410072][T23374] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 613.441356][T23374] usb 3-1: USB disconnect, device number 76 [ 613.602387][ T5882] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 613.761885][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 613.768880][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.780555][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.790657][ T5882] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 613.799867][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.827021][ T5882] usb 2-1: config 0 descriptor?? [ 613.912047][T27039] netlink: 'syz.2.9357': attribute type 10 has an invalid length. [ 613.948079][T27039] batman_adv: batadv0: Adding interface: team0 [ 613.959420][T27042] netlink: 'syz.2.9357': attribute type 10 has an invalid length. [ 613.966307][T27039] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.978456][T27042] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9357'. [ 614.019632][T27039] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 614.030938][T27042] team0: entered promiscuous mode [ 614.037048][T27042] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.045326][T27042] batman_adv: batadv0: Interface activated: team0 [ 614.060818][T27042] batman_adv: batadv0: Interface deactivated: team0 [ 614.068621][T27042] batman_adv: batadv0: Removing interface: team0 [ 614.077503][T27042] bridge0: port 1(team0) entered blocking state [ 614.109107][T27042] bridge0: port 1(team0) entered disabled state [ 614.118149][T27042] team0: entered allmulticast mode [ 614.275658][ T5882] savu 0003:1E7D:2D5A.0061: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 614.434570][T27059] syzkaller1: entered promiscuous mode [ 614.440198][T27059] syzkaller1: entered allmulticast mode [ 614.448940][ T5883] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 614.456717][ T5883] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 614.464483][ T5883] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 614.477599][ T5883] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 614.495166][ T5883] usb 5-1: USB disconnect, device number 85 [ 614.541534][ T24] usb 2-1: USB disconnect, device number 93 [ 615.639417][T27097] input: syz0 as /devices/virtual/input/input116 [ 616.521985][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 616.681905][ T5890] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 616.698644][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 616.730428][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 616.757356][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 616.782682][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 616.807033][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.827479][ T24] usb 6-1: config 0 descriptor?? [ 616.852113][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 616.873762][ T5890] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 616.903492][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.952337][ T5890] usb 5-1: config 0 descriptor?? [ 617.184748][ T5890] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 617.201800][ T5882] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 617.249722][ T24] plantronics 0003:047F:FFFF.0062: No inputs registered, leaving [ 617.267570][ T24] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 617.311823][T23374] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 617.379425][ T5882] usb 3-1: Using ep0 maxpacket: 32 [ 617.388505][ T5882] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 617.399078][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.407336][ T5882] usb 3-1: Product: syz [ 617.411764][ T5882] usb 3-1: Manufacturer: syz [ 617.416383][ T5882] usb 3-1: SerialNumber: syz [ 617.423936][ T5882] usb 3-1: config 0 descriptor?? [ 617.431612][ T5882] usb 3-1: no audio or video endpoints found [ 617.482514][T23374] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 617.491131][T23374] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.504699][T23374] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.515718][T23374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.523900][T23374] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.533807][T23374] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.544779][T23374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.552614][T23374] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.561522][T23374] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.572677][ T882] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 617.580490][T23374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.588856][T23374] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.597885][T23374] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.608823][T23374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.620195][T23374] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.629470][T23374] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.650123][T23374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.658411][ T5882] usb 3-1: USB disconnect, device number 77 [ 617.668063][T23374] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.677432][T23374] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.688539][T23374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.697228][T23374] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.706535][T23374] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.717581][T23374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.725678][T23374] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 617.734710][T23374] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 617.746352][T23374] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.754571][ T882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.766002][ T882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.777294][ T882] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 617.791311][ T882] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 617.791482][T23374] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 617.809917][ T882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.818024][T23374] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 617.827565][T23374] usb 2-1: Product: syz [ 617.833151][ T882] usb 4-1: config 0 descriptor?? [ 617.839052][T23374] usb 2-1: Manufacturer: syz [ 617.846158][T23374] usb 2-1: SerialNumber: syz [ 617.855831][T23374] usb 2-1: config 0 descriptor?? [ 617.868350][T23374] yurex 2-1:0.0: USB YUREX device now attached to Yurex #1 [ 617.991050][ T5890] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 618.002998][ T5890] asix 5-1:0.0: probe with driver asix failed with error -71 [ 618.016062][ T5890] usb 5-1: USB disconnect, device number 86 [ 618.152546][ T24] usb 2-1: USB disconnect, device number 94 [ 618.252481][ T882] plantronics 0003:047F:FFFF.0063: unknown main item tag 0xd [ 618.259965][ T882] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 618.269182][ T882] plantronics 0003:047F:FFFF.0063: unknown main item tag 0x0 [ 618.278595][ T882] plantronics 0003:047F:FFFF.0063: No inputs registered, leaving [ 618.440542][T27155] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9407'. [ 618.572078][ C1] plantronics 0003:047F:FFFF.0062: usb_submit_urb(ctrl) failed: -1 [ 618.580971][ T24] yurex 2-1:0.0: USB YUREX #1 now disconnected [ 618.592745][ T882] plantronics 0003:047F:FFFF.0063: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 618.661970][ T882] usb 4-1: USB disconnect, device number 115 [ 618.669716][T27162] macvlan3: entered promiscuous mode [ 618.688829][T27162] macvlan3: entered allmulticast mode [ 619.452156][ T882] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 619.611881][ T52] usb 6-1: reset high-speed USB device number 15 using dummy_hcd [ 619.623217][ T52] usb 6-1: device reset changed ep0 maxpacket size! [ 619.637648][ T882] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.648563][T23374] usb 6-1: USB disconnect, device number 15 [ 619.674449][ T882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.685279][ T882] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 619.705916][ T882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 619.718893][ T882] usb 2-1: SerialNumber: syz [ 619.792055][T23374] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 619.812143][ T5882] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 619.944655][ T882] usb 2-1: 0:2 : does not exist [ 619.968856][ T882] usb 2-1: USB disconnect, device number 95 [ 619.976035][T23374] usb 6-1: Using ep0 maxpacket: 32 [ 619.981342][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 620.006580][ T5882] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 620.020638][T23374] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 620.032515][ T5882] usb 4-1: config 0 interface 0 has no altsetting 0 [ 620.032966][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.041736][T23374] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 620.071988][ T5882] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 620.086744][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.106017][T23374] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 620.120817][ T5882] usb 4-1: config 0 descriptor?? [ 620.126263][T23374] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 620.143666][T23374] usb 6-1: config 0 interface 0 has no altsetting 0 [ 620.154531][T23374] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 620.174127][T23374] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 620.202683][T23374] usb 6-1: Product: syz [ 620.210710][T23374] usb 6-1: Manufacturer: syz [ 620.221771][T23374] usb 6-1: SerialNumber: syz [ 620.238250][T23374] usb 6-1: config 0 descriptor?? [ 620.248715][T23374] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 620.272884][T23374] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 620.573014][ T5882] hid (null): unknown global tag 0xd [ 620.599144][ T5882] cougar 0003:060B:500A.0064: unexpected long global item [ 620.632274][ T5882] cougar 0003:060B:500A.0064: parse failed [ 620.638213][ T5882] cougar 0003:060B:500A.0064: probe with driver cougar failed with error -22 [ 620.646002][T27178] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 620.655352][ T5890] usb 6-1: USB disconnect, device number 16 [ 620.661305][ C1] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 620.677027][T27197] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 620.707138][ T5890] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 620.768128][ T5882] usb 4-1: USB disconnect, device number 116 [ 621.132060][T23374] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 621.154540][T27220] nvme_fabrics: missing parameter 'transport=%s' [ 621.164379][T27220] nvme_fabrics: missing parameter 'nqn=%s' [ 621.188069][T27226] nvme_fabrics: missing parameter 'transport=%s' [ 621.195510][T27226] nvme_fabrics: missing parameter 'nqn=%s' [ 621.258067][T27231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 621.314158][T23374] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 621.333351][T23374] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 621.344280][T23374] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 621.363206][T23374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.376692][T27210] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 621.403741][T23374] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 621.650055][ T52] usb 2-1: USB disconnect, device number 96 [ 621.755144][T27251] netlink: 'syz.3.9447': attribute type 39 has an invalid length. [ 622.351123][T27279] input: syz1 as /devices/virtual/input/input118 [ 623.124942][ T24] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 623.293302][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 623.308478][ T24] usb 2-1: config 1 has no interface number 0 [ 623.318757][ T24] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.336579][ T24] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 623.346935][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 123 [ 623.375211][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.390338][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.398907][ T24] usb 2-1: Product: syz [ 623.403700][ T24] usb 2-1: Manufacturer: syz [ 623.408385][ T24] usb 2-1: SerialNumber: syz [ 623.552507][ T5882] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 623.621567][T27314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 623.704972][T27342] syzkaller1: entered promiscuous mode [ 623.710571][T27342] syzkaller1: entered allmulticast mode [ 623.718083][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 623.729966][ T5882] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 623.742065][ T5882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 623.762728][ T5882] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 623.774392][T23374] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 623.782533][ T5882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.790750][ T5882] usb 6-1: Product: syz [ 623.797484][ T5882] usb 6-1: Manufacturer: syz [ 623.802223][ T5882] usb 6-1: SerialNumber: syz [ 623.808751][ T5882] usb 6-1: config 0 descriptor?? [ 623.815487][T27330] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 623.823006][T27330] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 623.846293][ T5882] usb 6-1: ucan: probing device on interface #0 [ 623.941885][T23374] usb 3-1: Using ep0 maxpacket: 32 [ 623.950844][T23374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 623.966867][T23374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 623.977050][T23374] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 623.986921][T23374] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.007564][T23374] usb 3-1: config 0 descriptor?? [ 624.019150][T23374] hub 3-1:0.0: USB hub found [ 624.233376][T23374] hub 3-1:0.0: 1 port detected [ 624.234524][T27314] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 624.273080][ T24] cdc_ncm 2-1:1.1: bind() failure [ 624.335589][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.349296][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.436563][T23374] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 624.444518][T23374] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 624.452709][ T5882] ucan 6-1:0.0: probe with driver ucan failed with error -22 [ 624.463615][T23374] usbhid 3-1:0.0: can't add hid device: -71 [ 624.474804][ T24] usb 2-1: USB disconnect, device number 97 [ 624.475740][T23374] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 624.523016][T23374] usb 3-1: USB disconnect, device number 78 [ 625.031819][ T24] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 625.097062][T27364] vlan3: entered promiscuous mode [ 625.102957][T27364] macvlan1: entered promiscuous mode [ 625.108505][T27364] vlan3: entered allmulticast mode [ 625.114684][T27364] macvlan1: entered allmulticast mode [ 625.120081][T27364] veth1_vlan: entered allmulticast mode [ 625.131346][T27364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9497'. [ 625.141545][T27364] veth1_vlan: left allmulticast mode [ 625.147192][T27364] veth1_vlan: left promiscuous mode [ 625.162176][T27364] macvlan1: left allmulticast mode [ 625.170250][T27364] macvlan1: left promiscuous mode [ 625.203103][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.216861][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.228749][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 625.237920][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.247728][ T24] usb 4-1: config 0 descriptor?? [ 625.281841][ T52] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 625.442497][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 625.460010][ T52] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 625.479802][ T52] usb 3-1: config 0 has no interface number 0 [ 625.505945][ T52] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 625.527016][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.547274][ T52] usb 3-1: Product: syz [ 625.559175][ T52] usb 3-1: Manufacturer: syz [ 625.566496][ T52] usb 3-1: SerialNumber: syz [ 625.585633][ T52] usb 3-1: config 0 descriptor?? [ 625.597119][ T52] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 625.666776][ T24] lenovo 0003:17EF:6047.0065: unknown main item tag 0x0 [ 625.678308][ T24] lenovo 0003:17EF:6047.0065: unknown main item tag 0x0 [ 625.687024][ T24] lenovo 0003:17EF:6047.0065: unknown main item tag 0x0 [ 625.696098][ T24] lenovo 0003:17EF:6047.0065: unknown main item tag 0x0 [ 625.704015][ T24] lenovo 0003:17EF:6047.0065: unknown main item tag 0x0 [ 625.713934][ T24] lenovo 0003:17EF:6047.0065: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 625.805067][ T52] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 625.820750][ T52] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 625.904145][T23374] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 626.061920][T23374] usb 5-1: Using ep0 maxpacket: 32 [ 626.075971][T23374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.095398][T23374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.106050][T23374] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 626.115265][T23374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.130171][T23374] usb 5-1: config 0 descriptor?? [ 626.244014][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 626.252116][ T52] usb 3-1: USB disconnect, device number 79 [ 626.267809][ T24] lenovo 0003:17EF:6047.0065: Fn-lock setting failed: -71 [ 626.281391][ T52] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 626.302980][ T24] lenovo 0003:17EF:6047.0065: Sensitivity setting failed: -71 [ 626.325119][ T52] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 626.326665][ T9] usb 6-1: USB disconnect, device number 17 [ 626.339889][ T24] usb 4-1: USB disconnect, device number 117 [ 626.395885][ T52] quatech2 3-1:0.51: device disconnected [ 626.628730][T23374] savu 0003:1E7D:2D5A.0066: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 626.894102][ T24] usb 5-1: USB disconnect, device number 87 [ 627.069001][T27410] netlink: 'syz.2.9518': attribute type 39 has an invalid length. [ 627.850093][T27438] syzkaller1: entered promiscuous mode [ 627.857150][T27438] syzkaller1: entered allmulticast mode [ 629.150952][T27518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9568'. [ 629.491749][ T52] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 629.663444][ T52] usb 2-1: config 0 interface 0 has no altsetting 0 [ 629.670769][ T52] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 629.690403][T27551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 629.708236][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.720138][T27551] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 629.771013][ T52] usb 2-1: config 0 descriptor?? [ 629.911762][T23374] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 630.073778][T23374] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 630.084189][T23374] usb 3-1: config 0 interface 0 has no altsetting 0 [ 630.103629][T23374] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 630.121890][T23374] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 630.130246][T23374] usb 3-1: Product: syz [ 630.135420][T23374] usb 3-1: Manufacturer: syz [ 630.140251][T23374] usb 3-1: SerialNumber: syz [ 630.151981][T23374] usb 3-1: config 0 descriptor?? [ 630.171389][T23374] usb 3-1: selecting invalid altsetting 0 [ 630.294026][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 630.427096][T23374] usb 3-1: USB disconnect, device number 80 [ 630.459716][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.481183][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.558717][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 630.572768][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.588201][ T9] usb 5-1: config 0 descriptor?? [ 630.838005][ T52] video4linux radio48: keene_cmd_set failed (-71) [ 630.857143][ T52] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 630.868103][ T52] usb 2-1: USB disconnect, device number 98 [ 631.018341][ T9] cm6533_jd 0003:0D8C:0022.0067: unknown main item tag 0x0 [ 631.035732][ T9] cm6533_jd 0003:0D8C:0022.0067: unknown main item tag 0x0 [ 631.048907][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0067/input/input119 [ 631.074793][ T9] cm6533_jd 0003:0D8C:0022.0067: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 631.226553][ T9] usb 5-1: USB disconnect, device number 88 [ 631.521941][ T52] usb 3-1: new full-speed USB device number 81 using dummy_hcd [ 631.683857][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 631.696194][ T52] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 631.705396][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.716282][ T52] usb 3-1: config 0 descriptor?? [ 631.723399][T27589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 631.741860][ T5883] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 631.903834][ T5883] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.923890][ T5883] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 631.935135][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.968872][ T5883] usb 6-1: Product: syz [ 631.973675][ T5883] usb 6-1: Manufacturer: syz [ 631.978324][ T5883] usb 6-1: SerialNumber: syz [ 632.151628][ T52] elan 0003:04F3:0755.0068: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 632.370493][T23374] usb 3-1: USB disconnect, device number 81 [ 633.019196][ T5883] cdc_ncm 6-1:1.0: SET_NTB_FORMAT failed [ 633.056015][ T5883] cdc_ncm 6-1:1.0: bind() failure [ 633.078218][ T5883] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 633.091983][ T5883] cdc_ncm 6-1:1.1: bind() failure [ 633.103455][ T5883] usb 6-1: USB disconnect, device number 18 [ 633.584475][T27652] sctp: [Deprecated]: syz.1.9626 (pid 27652) Use of int in max_burst socket option deprecated. [ 633.584475][T27652] Use struct sctp_assoc_value instead [ 633.617353][T27654] vlan0: entered allmulticast mode [ 634.422141][ T9] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 634.464154][T27694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9644'. [ 634.603185][ T9] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 634.624953][ T9] usb 3-1: config 0 has no interface number 0 [ 634.658705][ T9] usb 3-1: config 0 interface 29 has no altsetting 0 [ 634.702163][ T9] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 634.715424][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.723706][ T9] usb 3-1: Product: syz [ 634.729231][ T9] usb 3-1: Manufacturer: syz [ 634.734287][ T9] usb 3-1: SerialNumber: syz [ 634.770345][ T9] usb 3-1: config 0 descriptor?? [ 635.128336][ T9] peak_usb 3-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 635.155953][ T9] peak_usb 3-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 635.172003][ T5882] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 635.223345][ T9] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 635.246945][ T9] usb 3-1: USB disconnect, device number 82 [ 635.282116][T23374] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 635.322649][ T5882] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 635.333919][ T5882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.343592][ T5882] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 635.355283][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 635.363304][ T5882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.381771][ T5882] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 635.393061][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 635.400769][ T5882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.409957][ T5882] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 635.421367][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 635.429054][ T5882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.438806][T23374] usb 2-1: Using ep0 maxpacket: 8 [ 635.456627][T23374] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 635.467598][ T5882] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 635.479664][T23374] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 635.490234][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 635.501743][T23374] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 635.521973][T23374] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.535893][ T5882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.545012][T23374] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 635.554882][ T5882] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 635.566441][T23374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.574576][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 635.582384][ T5882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.591325][ T5882] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 635.603961][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 635.613586][ T5882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.622649][ T5882] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 635.650280][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 635.658117][ T5882] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 635.682090][ T5882] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 635.701796][ T5882] usb 5-1: config 0 interface 0 has no altsetting 0 [ 635.728283][ T5882] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 635.743365][ T5882] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 635.772242][ T5882] usb 5-1: Product: syz [ 635.776488][ T5882] usb 5-1: Manufacturer: syz [ 635.781133][ T5882] usb 5-1: SerialNumber: syz [ 635.803631][ T5882] usb 5-1: config 0 descriptor?? [ 635.813085][ T5882] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 635.832734][T23374] usb 2-1: GET_CAPABILITIES returned 0 [ 635.838315][T23374] usbtmc 2-1:16.0: can't read capabilities [ 636.147261][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 636.156195][T23374] usb 5-1: USB disconnect, device number 89 [ 636.165736][T23374] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 636.176185][ T52] usb 2-1: USB disconnect, device number 99 [ 636.211872][ T5883] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 636.383660][ T5883] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 636.398650][ T5883] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 636.423712][ T5883] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 636.444800][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.453615][ T5883] usb 6-1: Product: syz [ 636.457806][ T5883] usb 6-1: Manufacturer: syz [ 636.465908][ T5883] usb 6-1: SerialNumber: syz [ 636.498092][T27745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9666'. [ 636.694600][ T5883] usb 6-1: 0:2 : does not exist [ 636.709536][ T5883] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 636.750423][T27751] vivid-000: disconnect [ 636.752039][ T5883] usb 6-1: USB disconnect, device number 19 [ 636.823059][T23374] vivid-000: reconnect [ 636.870663][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 636.870682][ T30] audit: type=1326 audit(1742928917.269:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27757 comm="syz.2.9672" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00bf18d169 code=0x0 [ 636.963485][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 637.149767][T27773] loop2: detected capacity change from 0 to 7 [ 637.158773][T27773] Dev loop2: unable to read RDB block 7 [ 637.165762][T27773] loop2: AHDI p2 p3 [ 637.169824][T27773] loop2: partition table partially beyond EOD, truncated [ 637.177809][T27773] loop2: p3 start 335544320 is beyond EOD, truncated [ 638.092787][ T52] usb 3-1: new low-speed USB device number 83 using dummy_hcd [ 638.132514][ T5890] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 638.263702][ T52] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 638.274933][ T52] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 638.289955][ T52] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 638.328765][ T52] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 638.349979][ T5890] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 638.358404][ T5890] usb 2-1: can't read configurations, error -71 [ 638.368108][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 638.393867][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 638.412130][ T52] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 638.438550][ T52] usb 3-1: string descriptor 0 read error: -22 [ 638.445298][ T52] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 638.454643][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.486648][ T52] usb 3-1: config 0 descriptor?? [ 638.497288][T27844] kernel read not supported for file /eth0 (pid: 27844 comm: syz.3.9711) [ 638.506654][ T52] hub 3-1:0.0: bad descriptor, ignoring hub [ 638.513870][ T52] hub 3-1:0.0: probe with driver hub failed with error -5 [ 638.527725][ T52] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input120 [ 638.532513][ T30] audit: type=1800 audit(1742928918.919:1176): pid=27844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9711" name="eth0" dev="mqueue" ino=77210 res=0 errno=0 [ 638.705337][ T52] usb 3-1: USB disconnect, device number 83 [ 638.749990][T27852] loop8: detected capacity change from 0 to 1 [ 638.764580][T27852] Dev loop8: unable to read RDB block 1 [ 638.779162][T27852] loop8: unable to read partition table [ 638.808439][T27852] loop8: partition table beyond EOD, truncated [ 638.831834][T27852] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 639.312424][T23374] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 639.325406][T27887] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 639.390017][T27891] unknown channel width for channel at 909000KHz? [ 639.411867][ T5890] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 639.473738][T23374] usb 6-1: Using ep0 maxpacket: 32 [ 639.516167][T23374] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 639.527638][T23374] usb 6-1: config 0 has no interface number 0 [ 639.539535][T23374] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 639.549706][T27902] input: syz0 as /devices/virtual/input/input121 [ 639.549856][T23374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.568149][T23374] usb 6-1: Product: syz [ 639.578619][T23374] usb 6-1: Manufacturer: syz [ 639.589816][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 639.596736][T23374] usb 6-1: SerialNumber: syz [ 639.631934][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.644450][T23374] usb 6-1: config 0 descriptor?? [ 639.663546][T23374] smsc95xx v2.0.0 [ 639.670119][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 639.697792][ T5890] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 639.710337][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.746204][ T5890] usb 2-1: config 0 descriptor?? [ 640.170931][ T5890] plantronics 0003:047F:FFFF.0069: unknown main item tag 0xd [ 640.181365][ T5890] plantronics 0003:047F:FFFF.0069: No inputs registered, leaving [ 640.194164][ T5890] plantronics 0003:047F:FFFF.0069: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 640.446080][ T24] usb 2-1: USB disconnect, device number 101 [ 640.580127][T27930] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9749'. [ 640.671454][T23374] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 640.682795][T23374] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 640.696033][T23374] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 640.719549][T23374] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 640.745027][T23374] usb 6-1: USB disconnect, device number 20 [ 640.822051][ T5882] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 640.997566][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 641.032604][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 641.058677][ T5882] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 641.070945][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.082589][ T5882] usb 4-1: config 0 descriptor?? [ 641.424944][T25565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.501489][ T5882] cp2112 0003:10C4:EA90.006A: unknown main item tag 0x0 [ 641.510899][ T5882] cp2112 0003:10C4:EA90.006A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 641.571878][ T5890] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 641.597747][T25565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.711868][ T5882] cp2112 0003:10C4:EA90.006A: Part Number: 0x82 Device Version: 0xFE [ 641.745451][T25565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.777534][ T5890] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 641.803540][ T5890] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 641.821830][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.829875][ T5890] usb 6-1: Product: syz [ 641.850392][ T5890] usb 6-1: Manufacturer: syz [ 641.874776][ T5890] usb 6-1: SerialNumber: syz [ 642.008960][T25565] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.047770][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 642.058395][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 642.075426][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 642.089159][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 642.099914][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 642.107613][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 642.117189][ T5890] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 642.125228][ T5882] cp2112 0003:10C4:EA90.006A: error setting SMBus config [ 642.139283][ T5882] cp2112 0003:10C4:EA90.006A: probe with driver cp2112 failed with error -71 [ 642.189602][ T5882] usb 4-1: USB disconnect, device number 118 [ 642.405122][T25565] team0: left allmulticast mode [ 642.410431][T25565] bridge0: port 1(team0) entered disabled state [ 642.727849][ T30] audit: type=1326 audit(1742928923.129:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27942 comm="syz.4.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd6bd8d169 code=0x7ffc0000 [ 642.801362][ T30] audit: type=1326 audit(1742928923.129:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27942 comm="syz.4.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 642.848036][ T30] audit: type=1326 audit(1742928923.129:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27942 comm="syz.4.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 642.873215][T25565] gretap0 (unregistering): left promiscuous mode [ 642.886313][ T24] usb 6-1: USB disconnect, device number 21 [ 642.925747][ T24] usblp0: removed [ 643.001073][ T30] audit: type=1326 audit(1742928923.129:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27942 comm="syz.4.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 643.059469][ T30] audit: type=1326 audit(1742928923.129:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27942 comm="syz.4.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 643.121815][ T30] audit: type=1326 audit(1742928923.129:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27942 comm="syz.4.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 643.179503][ T30] audit: type=1326 audit(1742928923.129:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27942 comm="syz.4.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 643.276577][ T30] audit: type=1326 audit(1742928923.129:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27942 comm="syz.4.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 643.332811][ T30] audit: type=1326 audit(1742928923.129:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27942 comm="syz.4.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 643.391928][ T30] audit: type=1326 audit(1742928923.129:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27942 comm="syz.4.9756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdd6bd29359 code=0x7ffc0000 [ 644.031606][T25565] bond1 (unregistering): Released all slaves [ 644.098561][T27999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9782'. [ 644.107697][T27999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9782'. [ 644.164312][T25565] tipc: Disabling bearer [ 644.182954][ T5832] Bluetooth: hci4: command tx timeout [ 644.201953][T25565] tipc: Left network mode [ 644.378428][T27964] chnl_net:caif_netlink_parms(): no params data found [ 644.785037][T25565] batadv_slave_1: left promiscuous mode [ 644.849724][T25565] hsr_slave_0: left promiscuous mode [ 644.857293][T25565] hsr_slave_1: left promiscuous mode [ 644.907542][T25565] hsr0: left promiscuous mode [ 644.916077][T25565] veth1_macvtap: left promiscuous mode [ 644.923904][T25565] veth0_macvtap: left promiscuous mode [ 644.935774][T25565] veth1_vlan: left promiscuous mode [ 644.947679][T25565] veth0_vlan: left promiscuous mode [ 645.551037][T28050] sctp: [Deprecated]: syz.5.9793 (pid 28050) Use of struct sctp_assoc_value in delayed_ack socket option. [ 645.551037][T28050] Use struct sctp_sack_info instead [ 646.263543][ T5832] Bluetooth: hci4: command tx timeout [ 646.448515][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 646.557970][ T882] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 646.606104][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 646.620860][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 646.632967][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 646.642990][ T24] usb 6-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 646.651248][ T24] usb 6-1: Product: syz [ 646.655871][ T24] usb 6-1: Manufacturer: syz [ 646.660544][ T24] usb 6-1: SerialNumber: syz [ 646.667850][ T24] usb 6-1: config 0 descriptor?? [ 646.676713][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 646.706120][T27964] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.714258][T27964] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.721631][T27964] bridge_slave_0: entered allmulticast mode [ 646.730232][T27964] bridge_slave_0: entered promiscuous mode [ 646.737242][ T882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.747511][T27964] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.760892][T27964] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.768510][T27964] bridge_slave_1: entered allmulticast mode [ 646.771284][ T882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.785790][ T882] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 646.787995][T27964] bridge_slave_1: entered promiscuous mode [ 646.805045][ T882] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 646.844472][ T882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.880055][ T882] usb 4-1: config 0 descriptor?? [ 646.944937][T27964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.977203][T27964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.084132][T27964] team0: Port device team_slave_0 added [ 647.131919][T27964] team0: Port device team_slave_1 added [ 647.221093][T27964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.238671][T27964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.276790][T27964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.298518][T27964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.318869][ T882] plantronics 0003:047F:FFFF.006B: unknown main item tag 0xd [ 647.328224][T27964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.329079][ T882] plantronics 0003:047F:FFFF.006B: No inputs registered, leaving [ 647.369293][T27964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.398690][T25565] IPVS: stop unused estimator thread 0... [ 647.417353][ T882] plantronics 0003:047F:FFFF.006B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 647.515309][T27964] hsr_slave_0: entered promiscuous mode [ 647.521978][ T24] gspca_zc3xx: reg_w_i err -71 [ 647.537225][T27964] hsr_slave_1: entered promiscuous mode [ 647.547451][T27964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.551817][ T5882] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 647.555284][T27964] Cannot create hsr debugfs directory [ 647.659012][ T5890] usb 4-1: USB disconnect, device number 119 [ 647.669391][T28107] input: syz1 as /devices/virtual/input/input123 [ 647.781918][ T5882] usb 5-1: Using ep0 maxpacket: 32 [ 647.803787][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.836476][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.849896][ T5882] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 647.869108][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.891009][ T5882] usb 5-1: config 0 descriptor?? [ 648.112380][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 648.118725][ T24] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 648.140988][ T24] usb 6-1: USB disconnect, device number 22 [ 648.332073][ T5882] savu 0003:1E7D:2D5A.006C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 648.352708][ T5832] Bluetooth: hci4: command tx timeout [ 648.393002][T27964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 648.439749][T27964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 648.463388][T27964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 648.483032][T27964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 648.613599][ T882] usb 5-1: USB disconnect, device number 90 [ 648.624302][ T5882] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 648.654485][T27964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.675669][T27964] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.700752][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.707944][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.742312][T25565] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.749501][T25565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.791917][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 648.804112][ T5882] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 648.814249][ T5882] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 648.836183][ T5882] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 648.849943][ T5882] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 648.869604][ T5882] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 648.887096][ T5882] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 648.888492][T27964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.895893][ T5882] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 648.923743][ T5882] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 648.958711][ T5882] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 648.986601][ T5882] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 649.006807][T27964] veth0_vlan: entered promiscuous mode [ 649.025067][ T5882] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 649.037983][ T5882] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 649.039454][T27964] veth1_vlan: entered promiscuous mode [ 649.072028][ T5882] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 649.091184][ T5882] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 649.127035][T27964] veth0_macvtap: entered promiscuous mode [ 649.131729][ T5882] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 649.150330][T27964] veth1_macvtap: entered promiscuous mode [ 649.187478][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.188626][ T5882] usb 4-1: string descriptor 0 read error: -22 [ 649.202759][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.235244][T27964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.241797][ T5882] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 649.246479][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.253272][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.266450][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.297114][ T5882] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 649.304752][T27964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.326774][T27964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.346973][T27964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.356618][T27964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.372240][ T52] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 649.387748][T27964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.535565][T25569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.543685][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 649.574760][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.600420][T25569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.609116][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.623191][ T52] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 649.629339][ T882] usb 4-1: USB disconnect, device number 120 [ 649.634748][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.657925][ T52] usb 2-1: config 0 descriptor?? [ 649.688435][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.714540][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.044057][T28190] loop8: detected capacity change from 0 to 2 [ 650.063776][T28190] Dev loop8: unable to read RDB block 2 [ 650.069416][T28190] loop8: unable to read partition table [ 650.086488][ T52] savu 0003:1E7D:2D5A.006D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 650.091945][T28190] loop8: partition table beyond EOD, truncated [ 650.142423][T28190] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 650.373590][ T882] usb 2-1: USB disconnect, device number 102 [ 650.412100][ T5832] Bluetooth: hci4: command tx timeout [ 650.490918][T28204] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 650.771847][ T24] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 650.951205][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.966624][ T24] usb 5-1: config 0 has no interfaces? [ 650.976971][ T24] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 650.997210][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.010731][ T24] usb 5-1: config 0 descriptor?? [ 651.585877][ T882] usb 5-1: USB disconnect, device number 91 [ 652.111914][T28300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9862'. [ 652.361349][T28315] netlink: 'syz.5.9868': attribute type 12 has an invalid length. [ 652.371106][T28315] netlink: 'syz.5.9868': attribute type 29 has an invalid length. [ 652.380184][T28315] netlink: 148 bytes leftover after parsing attributes in process `syz.5.9868'. [ 654.572057][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 654.580985][T28319] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 655.453086][T28319] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 655.462306][T28319] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 655.468280][T28319] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 655.476640][T28319] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 655.485007][T28319] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 655.491144][T28319] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 655.499563][T28319] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 656.588731][T28394] loop2: detected capacity change from 0 to 7 [ 656.612373][ C1] blk_print_req_error: 344 callbacks suppressed [ 656.612394][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.627867][ C1] buffer_io_error: 342 callbacks suppressed [ 656.627884][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 656.654209][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 656.714432][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.723687][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 656.735979][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.745229][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 656.758883][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.768128][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 656.776279][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.785506][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 656.801811][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.811028][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 656.819498][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.824616][ T882] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 656.828753][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 656.854274][T28394] ldm_validate_partition_table(): Disk read failed. [ 656.879760][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.889018][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 656.901739][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.910963][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 656.920405][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 656.929738][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 656.956177][T28394] Dev loop2: unable to read RDB block 0 [ 656.985443][T28394] loop2: unable to read partition table [ 657.031942][T28394] loop2: partition table beyond EOD, truncated [ 657.039852][T28394] loop_reread_partitions: partition scan of loop2 (dŸ) failed (rc=-5) [ 657.058609][ T882] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 657.077269][ T882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 657.105946][ T882] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 657.117160][ T5207] ldm_validate_partition_table(): Disk read failed. [ 657.117650][ T5207] Dev loop2: unable to read RDB block 0 [ 657.149442][ T5207] loop2: unable to read partition table [ 657.156119][ T882] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 657.171929][ T5207] loop2: partition table beyond EOD, truncated [ 657.203939][ T882] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 657.221849][ T882] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.242029][ T882] usb 6-1: config 0 descriptor?? [ 657.247663][T28392] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 657.442403][T28419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 657.531797][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 657.531986][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 657.728043][ T882] plantronics 0003:047F:FFFF.006E: unknown main item tag 0xd [ 657.729962][T28432] netlink: 'syz.2.9917': attribute type 7 has an invalid length. [ 657.758532][ T882] plantronics 0003:047F:FFFF.006E: No inputs registered, leaving [ 657.772385][T28432] netlink: 208100 bytes leftover after parsing attributes in process `syz.2.9917'. [ 657.777700][ T882] plantronics 0003:047F:FFFF.006E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 657.983335][T23374] usb 6-1: USB disconnect, device number 23 [ 658.213506][T28453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9926'. [ 658.856425][T28473] netlink: 72 bytes leftover after parsing attributes in process `syz.2.9934'. [ 659.612252][ T55] Bluetooth: hci2: command 0x0c1a tx timeout [ 659.612478][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 659.974396][ T30] kauditd_printk_skb: 1311 callbacks suppressed [ 659.974415][ T30] audit: type=1326 audit(1742928940.379:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28513 comm="syz.5.9951" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80abf8d169 code=0x0 [ 660.288976][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9956'. [ 660.299343][T28528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9956'. [ 660.591858][ T882] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 660.756540][ T882] usb 3-1: Using ep0 maxpacket: 8 [ 660.764004][ T882] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 660.797134][ T882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 660.832008][ T882] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 660.850906][ T882] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 660.904336][ T882] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 660.926601][ T882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.162166][ T882] usb 3-1: GET_CAPABILITIES returned 0 [ 661.177969][ T882] usbtmc 3-1:16.0: can't read capabilities [ 661.387264][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.396725][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.405846][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.414968][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.424075][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.433176][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.466033][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.475204][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.484346][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.493457][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.504597][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.513711][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.522798][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.531865][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.540970][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.550098][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 661.627956][ T24] usb 3-1: USB disconnect, device number 84 [ 661.691850][ T5832] Bluetooth: hci2: command 0x0c1a tx timeout [ 661.708563][ T5832] Bluetooth: hci4: command 0x0c1a tx timeout [ 662.981862][ T24] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 663.145277][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 663.160640][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.189047][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.222245][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 663.242691][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00 [ 663.262129][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.283845][ T24] usb 3-1: config 0 descriptor?? [ 663.301799][ T52] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 663.483404][ T52] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 663.486214][T28611] loop2: detected capacity change from 0 to 7 [ 663.511784][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.529933][T28611] Dev loop2: unable to read RDB block 7 [ 663.542061][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.558346][ T52] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 663.571280][T28611] loop2: unable to read partition table [ 663.577498][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.608888][ T52] usb 5-1: config 0 descriptor?? [ 663.618146][T28611] loop2: partition table beyond EOD, truncated [ 663.633070][T28611] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 664.043778][ T52] dragonrise 0003:0079:0006.006F: item fetching failed at offset 0/2 [ 664.071077][ T52] dragonrise 0003:0079:0006.006F: parse failed [ 664.116122][ T52] dragonrise 0003:0079:0006.006F: probe with driver dragonrise failed with error -22 [ 664.151855][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 664.175055][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 664.203480][ T24] usb 3-1: USB disconnect, device number 85 [ 664.271514][ T52] usb 5-1: USB disconnect, device number 92 [ 664.939823][T28636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 665.059241][T28642] macvlan0: entered promiscuous mode [ 665.073419][T28642] batadv0: entered promiscuous mode [ 665.079534][T28642] hsr2: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 665.142736][T28649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10008'. [ 665.263645][T28653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 665.614389][T28649] team0 (unregistering): Port device team_slave_0 removed [ 665.643550][T28649] team0 (unregistering): Port device team_slave_1 removed [ 665.904799][T28667] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 666.134820][T28681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.049602][T28723] vlan3: entered promiscuous mode [ 667.087656][T28723] vlan3: entered allmulticast mode [ 667.098231][T28725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 667.102058][T28723] veth0_virt_wifi: entered allmulticast mode [ 667.123232][T28723] veth0_virt_wifi: entered promiscuous mode [ 667.144019][T28723] team0: Port device vlan3 added [ 667.320371][T28733] [ 667.322746][T28733] ===================================================== [ 667.329685][T28733] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 667.337135][T28733] 6.14.0-syzkaller-01103-g2df0c02dab82 #0 Not tainted [ 667.343885][T28733] ----------------------------------------------------- [ 667.350799][T28733] syz.4.10043/28733 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 667.358594][T28733] ffff888032969750 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4f0 [ 667.367294][T28733] [ 667.367294][T28733] and this task is already holding: [ 667.374644][T28733] ffff88802a312230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xc8/0x360 [ 667.384304][T28733] which would create a new lock dependency: [ 667.390178][T28733] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 667.398101][T28733] [ 667.398101][T28733] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 667.407537][T28733] (&dev->event_lock#2){..-.}-{3:3} [ 667.407568][T28733] [ 667.407568][T28733] ... which became SOFTIRQ-irq-safe at: [ 667.420441][T28733] lock_acquire+0x116/0x2f0 [ 667.425030][T28733] _raw_spin_lock_irqsave+0xd8/0x130 [ 667.430393][T28733] input_event+0x8c/0xe0 [ 667.434711][T28733] hidinput_report_event+0x93/0x100 [ 667.440022][T28733] hid_report_raw_event+0x1582/0x17c0 [ 667.445474][T28733] hid_input_report+0x419/0x500 [ 667.450409][T28733] hid_irq_in+0x4a0/0x6d0 [ 667.454815][T28733] __usb_hcd_giveback_urb+0x42e/0x6e0 [ 667.460265][T28733] dummy_timer+0x84b/0x4670 [ 667.464843][T28733] __hrtimer_run_queues+0x5a6/0xd40 [ 667.470117][T28733] hrtimer_run_softirq+0x19a/0x2c0 [ 667.475302][T28733] handle_softirqs+0x2d6/0x9b0 [ 667.480200][T28733] __irq_exit_rcu+0xfb/0x220 [ 667.485128][T28733] irq_exit_rcu+0x9/0x30 [ 667.489450][T28733] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 667.495159][T28733] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 667.501217][T28733] queue_delayed_work_on+0x273/0x390 [ 667.506587][T28733] process_scheduled_works+0xac3/0x18e0 [ 667.512220][T28733] worker_thread+0x870/0xd30 [ 667.516887][T28733] kthread+0x7a9/0x920 [ 667.521033][T28733] ret_from_fork+0x4b/0x80 [ 667.525521][T28733] ret_from_fork_asm+0x1a/0x30 [ 667.530361][T28733] [ 667.530361][T28733] to a SOFTIRQ-irq-unsafe lock: [ 667.537369][T28733] (tasklist_lock){.+.+}-{3:3} [ 667.537394][T28733] [ 667.537394][T28733] ... which became SOFTIRQ-irq-unsafe at: [ 667.550017][T28733] ... [ 667.550029][T28733] lock_acquire+0x116/0x2f0 [ 667.557190][T28733] _raw_read_lock+0x36/0x50 [ 667.561777][T28733] __do_wait+0x132/0x850 [ 667.566540][T28733] do_wait+0x1e9/0x550 [ 667.570692][T28733] kernel_wait+0xeb/0x240 [ 667.575111][T28733] call_usermodehelper_exec_work+0xbd/0x230 [ 667.581111][T28733] process_scheduled_works+0xac3/0x18e0 [ 667.586772][T28733] worker_thread+0x870/0xd30 [ 667.591452][T28733] kthread+0x7a9/0x920 [ 667.595599][T28733] ret_from_fork+0x4b/0x80 [ 667.600091][T28733] ret_from_fork_asm+0x1a/0x30 [ 667.604934][T28733] [ 667.604934][T28733] other info that might help us debug this: [ 667.604934][T28733] [ 667.615216][T28733] Chain exists of: [ 667.615216][T28733] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 667.615216][T28733] [ 667.628349][T28733] Possible interrupt unsafe locking scenario: [ 667.628349][T28733] [ 667.636664][T28733] CPU0 CPU1 [ 667.642277][T28733] ---- ---- [ 667.647629][T28733] lock(tasklist_lock); [ 667.651864][T28733] local_irq_disable(); [ 667.658603][T28733] lock(&dev->event_lock#2); [ 667.665817][T28733] lock(&new->fa_lock); [ 667.672572][T28733] [ 667.676013][T28733] lock(&dev->event_lock#2); [ 667.680872][T28733] [ 667.680872][T28733] *** DEADLOCK *** [ 667.680872][T28733] [ 667.689003][T28733] 6 locks held by syz.4.10043/28733: [ 667.694272][T28733] #0: ffff88814a57a118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x25d/0x7d0 [ 667.703406][T28733] #1: ffff88802a312230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xc8/0x360 [ 667.713501][T28733] #2: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xd9/0x360 [ 667.723160][T28733] #3: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8e/0x890 [ 667.732733][T28733] #4: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2a/0xc90 [ 667.742819][T28733] #5: ffffffff8eb3a760 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x54/0x4f0 [ 667.751859][T28733] [ 667.751859][T28733] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 667.762247][T28733] -> (&dev->event_lock#2){..-.}-{3:3} { [ 667.767802][T28733] IN-SOFTIRQ-W at: [ 667.771768][T28733] lock_acquire+0x116/0x2f0 [ 667.777913][T28733] _raw_spin_lock_irqsave+0xd8/0x130 [ 667.784836][T28733] input_event+0x8c/0xe0 [ 667.790719][T28733] hidinput_report_event+0x93/0x100 [ 667.797559][T28733] hid_report_raw_event+0x1582/0x17c0 [ 667.804571][T28733] hid_input_report+0x419/0x500 [ 667.811060][T28733] hid_irq_in+0x4a0/0x6d0 [ 667.817030][T28733] __usb_hcd_giveback_urb+0x42e/0x6e0 [ 667.824053][T28733] dummy_timer+0x84b/0x4670 [ 667.830195][T28733] __hrtimer_run_queues+0x5a6/0xd40 [ 667.837038][T28733] hrtimer_run_softirq+0x19a/0x2c0 [ 667.843874][T28733] handle_softirqs+0x2d6/0x9b0 [ 667.850276][T28733] __irq_exit_rcu+0xfb/0x220 [ 667.856505][T28733] irq_exit_rcu+0x9/0x30 [ 667.862417][T28733] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 667.869711][T28733] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 667.877343][T28733] queue_delayed_work_on+0x273/0x390 [ 667.884274][T28733] process_scheduled_works+0xac3/0x18e0 [ 667.891466][T28733] worker_thread+0x870/0xd30 [ 667.897694][T28733] kthread+0x7a9/0x920 [ 667.903402][T28733] ret_from_fork+0x4b/0x80 [ 667.909456][T28733] ret_from_fork_asm+0x1a/0x30 [ 667.915863][T28733] INITIAL USE at: [ 667.919749][T28733] lock_acquire+0x116/0x2f0 [ 667.925808][T28733] _raw_spin_lock_irqsave+0xd8/0x130 [ 667.932647][T28733] input_inject_event+0xc8/0x360 [ 667.939155][T28733] kbd_led_trigger_activate+0xb8/0x100 [ 667.946185][T28733] led_trigger_set+0x53e/0x9e0 [ 667.952540][T28733] led_trigger_set_default+0x229/0x260 [ 667.959555][T28733] led_classdev_register_ext+0x778/0x980 [ 667.966746][T28733] input_leds_connect+0x491/0x640 [ 667.973330][T28733] input_register_device+0xce2/0x10c0 [ 667.980270][T28733] atkbd_connect+0x759/0xa30 [ 667.986409][T28733] serio_driver_probe+0x7f/0xa0 [ 667.992816][T28733] really_probe+0x2b9/0xad0 [ 667.998895][T28733] __driver_probe_device+0x1a2/0x390 [ 668.005746][T28733] driver_probe_device+0x50/0x430 [ 668.012321][T28733] __driver_attach+0x45f/0x710 [ 668.019165][T28733] bus_for_each_dev+0x23e/0x2b0 [ 668.025575][T28733] serio_handle_event+0x1c7/0x920 [ 668.032153][T28733] process_scheduled_works+0xac3/0x18e0 [ 668.039258][T28733] worker_thread+0x870/0xd30 [ 668.045405][T28733] kthread+0x7a9/0x920 [ 668.051074][T28733] ret_from_fork+0x4b/0x80 [ 668.057039][T28733] ret_from_fork_asm+0x1a/0x30 [ 668.063375][T28733] } [ 668.065881][T28733] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 668.074909][T28733] [ 668.074909][T28733] the dependencies between the lock to be acquired [ 668.074919][T28733] and SOFTIRQ-irq-unsafe lock: [ 668.088406][T28733] -> (tasklist_lock){.+.+}-{3:3} { [ 668.093698][T28733] HARDIRQ-ON-R at: [ 668.097837][T28733] lock_acquire+0x116/0x2f0 [ 668.104330][T28733] _raw_read_lock+0x36/0x50 [ 668.110815][T28733] __do_wait+0x132/0x850 [ 668.117045][T28733] do_wait+0x1e9/0x550 [ 668.123107][T28733] kernel_wait+0xeb/0x240 [ 668.129425][T28733] call_usermodehelper_exec_work+0xbd/0x230 [ 668.137402][T28733] process_scheduled_works+0xac3/0x18e0 [ 668.144935][T28733] worker_thread+0x870/0xd30 [ 668.151511][T28733] kthread+0x7a9/0x920 [ 668.157565][T28733] ret_from_fork+0x4b/0x80 [ 668.163967][T28733] ret_from_fork_asm+0x1a/0x30 [ 668.170720][T28733] SOFTIRQ-ON-R at: [ 668.174882][T28733] lock_acquire+0x116/0x2f0 [ 668.181374][T28733] _raw_read_lock+0x36/0x50 [ 668.187860][T28733] __do_wait+0x132/0x850 [ 668.194092][T28733] do_wait+0x1e9/0x550 [ 668.200151][T28733] kernel_wait+0xeb/0x240 [ 668.206464][T28733] call_usermodehelper_exec_work+0xbd/0x230 [ 668.214348][T28733] process_scheduled_works+0xac3/0x18e0 [ 668.221888][T28733] worker_thread+0x870/0xd30 [ 668.228567][T28733] kthread+0x7a9/0x920 [ 668.234624][T28733] ret_from_fork+0x4b/0x80 [ 668.241022][T28733] ret_from_fork_asm+0x1a/0x30 [ 668.247774][T28733] INITIAL USE at: [ 668.251832][T28733] lock_acquire+0x116/0x2f0 [ 668.258236][T28733] _raw_write_lock_irq+0xd3/0x120 [ 668.265248][T28733] copy_process+0x221b/0x3d10 [ 668.271829][T28733] kernel_clone+0x242/0x930 [ 668.278226][T28733] user_mode_thread+0x148/0x1c0 [ 668.284972][T28733] rest_init+0x23/0x300 [ 668.291023][T28733] start_kernel+0x484/0x510 [ 668.297426][T28733] x86_64_start_reservations+0x2a/0x30 [ 668.304777][T28733] x86_64_start_kernel+0x66/0x70 [ 668.311605][T28733] common_startup_64+0x13e/0x147 [ 668.318442][T28733] INITIAL READ USE at: [ 668.322936][T28733] lock_acquire+0x116/0x2f0 [ 668.329772][T28733] _raw_read_lock+0x36/0x50 [ 668.336605][T28733] __do_wait+0x132/0x850 [ 668.343181][T28733] do_wait+0x1e9/0x550 [ 668.349577][T28733] kernel_wait+0xeb/0x240 [ 668.356237][T28733] call_usermodehelper_exec_work+0xbd/0x230 [ 668.364466][T28733] process_scheduled_works+0xac3/0x18e0 [ 668.372349][T28733] worker_thread+0x870/0xd30 [ 668.379271][T28733] kthread+0x7a9/0x920 [ 668.385693][T28733] ret_from_fork+0x4b/0x80 [ 668.392441][T28733] ret_from_fork_asm+0x1a/0x30 [ 668.399538][T28733] } [ 668.402195][T28733] ... key at: [] tasklist_lock+0x18/0x40 [ 668.410077][T28733] ... acquired at: [ 668.414084][T28733] lock_acquire+0x116/0x2f0 [ 668.418754][T28733] _raw_read_lock+0x36/0x50 [ 668.423418][T28733] send_sigio+0x108/0x390 [ 668.427907][T28733] kill_fasync+0x253/0x4f0 [ 668.432479][T28733] lease_break_callback+0x26/0x30 [ 668.437665][T28733] __break_lease+0x753/0x1890 [ 668.442500][T28733] do_dentry_open+0xd43/0x1960 [ 668.447430][T28733] vfs_open+0x3b/0x370 [ 668.451679][T28733] path_openat+0x2caf/0x35d0 [ 668.456426][T28733] do_filp_open+0x284/0x4e0 [ 668.461085][T28733] do_sys_openat2+0x12b/0x1d0 [ 668.465928][T28733] __x64_sys_open+0x226/0x280 [ 668.470765][T28733] do_syscall_64+0xf3/0x230 [ 668.475432][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.481483][T28733] [ 668.483790][T28733] -> (&f_owner->lock){....}-{3:3} { [ 668.489080][T28733] INITIAL USE at: [ 668.493048][T28733] lock_acquire+0x116/0x2f0 [ 668.499277][T28733] _raw_write_lock_irq+0xd3/0x120 [ 668.506025][T28733] __f_setown+0x68/0x380 [ 668.512002][T28733] fcntl_dirnotify+0x3f0/0x6b0 [ 668.518504][T28733] do_fcntl+0x88d/0x1b20 [ 668.524471][T28733] __se_sys_fcntl+0xd2/0x1e0 [ 668.530783][T28733] do_syscall_64+0xf3/0x230 [ 668.537038][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.544653][T28733] INITIAL READ USE at: [ 668.549055][T28733] lock_acquire+0x116/0x2f0 [ 668.555724][T28733] _raw_read_lock_irqsave+0xe0/0x130 [ 668.563168][T28733] send_sigio+0x37/0x390 [ 668.569567][T28733] dnotify_handle_event+0x153/0x460 [ 668.576937][T28733] fsnotify+0x1f05/0x2310 [ 668.583431][T28733] fsnotify_create+0x11f/0x180 [ 668.590356][T28733] vfs_mknod+0x39f/0x3b0 [ 668.596762][T28733] unix_bind+0x5af/0xe40 [ 668.603171][T28733] __sys_bind+0x1de/0x290 [ 668.609839][T28733] __x64_sys_bind+0x7a/0x90 [ 668.616509][T28733] do_syscall_64+0xf3/0x230 [ 668.623178][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.631236][T28733] } [ 668.633809][T28733] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 668.642758][T28733] ... acquired at: [ 668.646634][T28733] lock_acquire+0x116/0x2f0 [ 668.651304][T28733] _raw_read_lock_irqsave+0xe0/0x130 [ 668.656747][T28733] send_sigio+0x37/0x390 [ 668.661146][T28733] kill_fasync+0x253/0x4f0 [ 668.665718][T28733] lease_break_callback+0x26/0x30 [ 668.670908][T28733] __break_lease+0x753/0x1890 [ 668.675744][T28733] do_dentry_open+0xd43/0x1960 [ 668.680665][T28733] vfs_open+0x3b/0x370 [ 668.684894][T28733] path_openat+0x2caf/0x35d0 [ 668.689645][T28733] do_filp_open+0x284/0x4e0 [ 668.694306][T28733] do_sys_openat2+0x12b/0x1d0 [ 668.699182][T28733] __x64_sys_openat+0x249/0x2a0 [ 668.704195][T28733] do_syscall_64+0xf3/0x230 [ 668.708876][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.714928][T28733] [ 668.717236][T28733] -> (&new->fa_lock){....}-{3:3} { [ 668.722357][T28733] INITIAL USE at: [ 668.726234][T28733] lock_acquire+0x116/0x2f0 [ 668.732291][T28733] _raw_write_lock_irq+0xd3/0x120 [ 668.738865][T28733] fasync_remove_entry+0xec/0x1b0 [ 668.745439][T28733] sock_fasync+0x87/0x100 [ 668.751316][T28733] __fput+0x81e/0x9f0 [ 668.756849][T28733] task_work_run+0x251/0x310 [ 668.762990][T28733] syscall_exit_to_user_mode+0x13f/0x340 [ 668.770172][T28733] do_syscall_64+0x100/0x230 [ 668.776314][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.783753][T28733] INITIAL READ USE at: [ 668.788073][T28733] lock_acquire+0x116/0x2f0 [ 668.794561][T28733] _raw_read_lock_irqsave+0xe0/0x130 [ 668.801831][T28733] kill_fasync+0x199/0x4f0 [ 668.808226][T28733] pipe_release+0x1a3/0x320 [ 668.814712][T28733] __fput+0x3e9/0x9f0 [ 668.820678][T28733] task_work_run+0x251/0x310 [ 668.827253][T28733] syscall_exit_to_user_mode+0x13f/0x340 [ 668.834870][T28733] do_syscall_64+0x100/0x230 [ 668.841446][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.849319][T28733] } [ 668.851799][T28733] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 668.860464][T28733] ... acquired at: [ 668.864252][T28733] lock_acquire+0x116/0x2f0 [ 668.868919][T28733] _raw_read_lock_irqsave+0xe0/0x130 [ 668.874363][T28733] kill_fasync+0x199/0x4f0 [ 668.878941][T28733] mousedev_notify_readers+0x725/0xc90 [ 668.884569][T28733] mousedev_event+0x5e8/0x13a0 [ 668.889499][T28733] input_handle_events_default+0x107/0x1c0 [ 668.895472][T28733] input_pass_values+0x268/0x890 [ 668.900576][T28733] input_event_dispose+0x31b/0x610 [ 668.905852][T28733] input_handle_event+0xa9c/0xc10 [ 668.911052][T28733] input_inject_event+0x221/0x360 [ 668.916259][T28733] evdev_write+0x653/0x7d0 [ 668.920838][T28733] vfs_write+0x2bc/0xd10 [ 668.925242][T28733] ksys_write+0x19d/0x2d0 [ 668.929728][T28733] do_syscall_64+0xf3/0x230 [ 668.934398][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.940449][T28733] [ 668.942756][T28733] [ 668.942756][T28733] stack backtrace: [ 668.948638][T28733] CPU: 1 UID: 0 PID: 28733 Comm: syz.4.10043 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 668.948656][T28733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 668.948666][T28733] Call Trace: [ 668.948672][T28733] [ 668.948678][T28733] dump_stack_lvl+0x241/0x360 [ 668.948697][T28733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 668.948713][T28733] ? __pfx__printk+0x10/0x10 [ 668.948731][T28733] validate_chain+0x22bb/0x24e0 [ 668.948751][T28733] __lock_acquire+0xad5/0xd80 [ 668.948770][T28733] lock_acquire+0x116/0x2f0 [ 668.948786][T28733] ? kill_fasync+0x199/0x4f0 [ 668.948803][T28733] _raw_read_lock_irqsave+0xe0/0x130 [ 668.948819][T28733] ? kill_fasync+0x199/0x4f0 [ 668.948830][T28733] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 668.948848][T28733] kill_fasync+0x199/0x4f0 [ 668.948860][T28733] ? kill_fasync+0x54/0x4f0 [ 668.948872][T28733] mousedev_notify_readers+0x725/0xc90 [ 668.948893][T28733] ? mousedev_notify_readers+0x2a/0xc90 [ 668.948913][T28733] mousedev_event+0x5e8/0x13a0 [ 668.948931][T28733] ? __pfx_mousedev_event+0x10/0x10 [ 668.948948][T28733] input_handle_events_default+0x107/0x1c0 [ 668.948965][T28733] input_pass_values+0x268/0x890 [ 668.948982][T28733] ? input_pass_values+0x8e/0x890 [ 668.949000][T28733] ? do_raw_spin_lock+0x151/0x370 [ 668.949016][T28733] input_event_dispose+0x31b/0x610 [ 668.949033][T28733] input_handle_event+0xa9c/0xc10 [ 668.949059][T28733] ? __pfx_input_handle_event+0x10/0x10 [ 668.949077][T28733] input_inject_event+0x221/0x360 [ 668.949092][T28733] ? input_inject_event+0xd9/0x360 [ 668.949109][T28733] evdev_write+0x653/0x7d0 [ 668.949124][T28733] ? __pfx_evdev_write+0x10/0x10 [ 668.949136][T28733] ? bpf_lsm_file_permission+0x9/0x10 [ 668.949153][T28733] ? rw_verify_area+0x246/0x630 [ 668.949165][T28733] ? __pfx_evdev_write+0x10/0x10 [ 668.949177][T28733] vfs_write+0x2bc/0xd10 [ 668.949193][T28733] ? __pfx_vfs_write+0x10/0x10 [ 668.949206][T28733] ? __fget_files+0x2a/0x420 [ 668.949222][T28733] ? __fget_files+0x2a/0x420 [ 668.949239][T28733] ? __fget_files+0x39d/0x420 [ 668.949255][T28733] ? __fget_files+0x2a/0x420 [ 668.949274][T28733] ksys_write+0x19d/0x2d0 [ 668.949287][T28733] ? __pfx_ksys_write+0x10/0x10 [ 668.949302][T28733] ? do_syscall_64+0xb6/0x230 [ 668.949320][T28733] do_syscall_64+0xf3/0x230 [ 668.949336][T28733] ? clear_bhb_loop+0x45/0xa0 [ 668.949350][T28733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.949363][T28733] RIP: 0033:0x7fdd6bd8d169 [ 668.949377][T28733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.949389][T28733] RSP: 002b:00007fdd6cbd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 668.949405][T28733] RAX: ffffffffffffffda RBX: 00007fdd6bfa5fa0 RCX: 00007fdd6bd8d169 [ 668.949415][T28733] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 668.949424][T28733] RBP: 00007fdd6be0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 668.949433][T28733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.949442][T28733] R13: 0000000000000000 R14: 00007fdd6bfa5fa0 R15: 00007fdd6c0cfa28 [ 668.949455][T28733]