last executing test programs: 12m54.461107243s ago: executing program 0 (id=2824): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x2b2b, 0x400, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) 12m54.361696909s ago: executing program 0 (id=2825): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) recvmmsg(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0x3fc00000}], 0x1, 0x0, 0x0) lseek(r0, 0x2000, 0x4) 12m54.223678785s ago: executing program 0 (id=2826): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r1 = eventfd2(0x800, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) ioprio_set$pid(0x2, 0x0, 0x6000) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x30, 0x0, 0xb, r0, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r1}]) 12m54.177140903s ago: executing program 0 (id=2827): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 12m53.219321301s ago: executing program 0 (id=2843): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x2, {0x0, 0x1}, {0x49, 0x2}, @cond=[{0x22d, 0x3ff, 0x404, 0x4, 0x1, 0xd}, {0x0, 0xa0, 0x1, 0x5, 0x800, 0xff01}]}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) 12m52.899051813s ago: executing program 0 (id=2847): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) io_uring_setup(0x3eaf, &(0x7f0000000080)) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0xc1) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 12m52.474128819s ago: executing program 32 (id=2847): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) io_uring_setup(0x3eaf, &(0x7f0000000080)) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000200), 0x0, 0xc1) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000080)) close_range(r0, 0xffffffffffffffff, 0x0) 9m9.839705963s ago: executing program 3 (id=5506): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7e, 0x2143844, 0x4004, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x7, {0xfffffffffffffffc, 0x1, 0x0, {0x3, 0x69ec2dea, 0x8, 0x201, 0x6dc6, 0x7651, 0xa442, 0x7, 0xe000, 0x601d824b499141fd, 0xcd36, 0x0, 0xffffffffffffffff, 0x6, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000000)='./file0\x00', 0x479802, 0x1b0) 9m8.880306037s ago: executing program 3 (id=5518): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 9m8.805043389s ago: executing program 3 (id=5519): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000280)={0x50, 0x0, 0xd, {0x7, 0x2b, 0x9, 0x800000, 0x0, 0x6, 0xe9f, 0xffffffff, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xc94) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x1, 0x50, 0xf}}, 0x30) 9m7.904799921s ago: executing program 3 (id=5524): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 9m5.595726492s ago: executing program 3 (id=5546): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = syz_io_uring_setup(0x1110, &(0x7f0000000140)={0x0, 0x4, 0x400, 0x2}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x440000, 0x1, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 9m5.140059764s ago: executing program 3 (id=5552): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x0, 0x78d, 0x1, r2}, 0x10) 9m4.696269173s ago: executing program 33 (id=5552): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x2, 0x0, 0x78d, 0x1, r2}, 0x10) 7m5.084144371s ago: executing program 2 (id=7048): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0xaa1b, 0x10000, 0x0, 0x1a}, &(0x7f0000000340), &(0x7f0000000600)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) 7m4.907813561s ago: executing program 2 (id=7050): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$hidraw(r1, 0x0, 0x0) 7m4.373669701s ago: executing program 2 (id=7055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x13, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x19, 0xa, 0x101, 0x0, 0x0, {0x2}}, 0x14}}, 0x24008804) 7m4.251503971s ago: executing program 2 (id=7057): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 7m2.869606401s ago: executing program 2 (id=7062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f00000012c0)={[0xf, 0x10000, 0x6, 0x800, 0x9, 0x3, 0x7ff, 0x8, 0x0, 0x4, 0x8, 0xfffff8f6, 0x2000, 0x7, 0x71ad0c1, 0x1, 0x4, 0x7fffffff, 0x7, 0x9, 0x3ff, 0x6, 0x0, 0x100, 0x57, 0xffff, 0x9, 0x5, 0x7, 0x200, 0x96, 0x8, 0xff000000, 0x4, 0x8f, 0x6, 0x2, 0x81, 0x59, 0x4e38, 0xffff, 0x3, 0xffffffff, 0x2, 0x3, 0x2, 0x2, 0x9, 0xa76a, 0x5, 0x2, 0x2, 0x4f2, 0x1, 0xff, 0x7, 0x8, 0xfffff42b, 0x4, 0x1, 0x5, 0x80000001, 0x6, 0x5, 0x0, 0x5, 0xc5, 0x1, 0x6, 0xf05a, 0x8, 0x0, 0x9, 0x1, 0x7, 0x4977, 0x9, 0x10001, 0xb, 0x0, 0xf43, 0x6, 0xea, 0x7, 0x7, 0x2, 0x80000001, 0x8, 0x4, 0x7, 0x10001, 0xffffffff, 0x8, 0x72, 0x6, 0x2, 0xfffffff7, 0x0, 0x9, 0xb, 0x6, 0x7, 0x4, 0x800, 0xa, 0x9, 0x0, 0x3, 0xa, 0x0, 0x9, 0x1, 0x7, 0xd3f8, 0x512, 0x3, 0x272d, 0xc4ae, 0xffc00000, 0x4, 0x2, 0x53ae, 0x3, 0x6, 0xfffffff9, 0x6, 0xaa, 0x0, 0xeb3, 0x0, 0x3, 0x1, 0xffff8000, 0x8, 0x7ff, 0x2, 0x8, 0x0, 0x8, 0xe8e1, 0x0, 0x4, 0xfffff262, 0xffffff01, 0x7, 0x2771, 0x7, 0x2, 0xc, 0x4, 0x7, 0x2, 0x7, 0x7fffffff, 0xffffffff, 0x3, 0x8001, 0x7, 0x3d48a447, 0xfd89, 0x1, 0x80000001, 0x4, 0x200, 0x5e9, 0x0, 0x1, 0xfe, 0x80, 0x4, 0x6, 0x8, 0x7, 0x1, 0x6, 0x7, 0xfffffffc, 0x0, 0x9, 0x3, 0x2, 0x8, 0x6, 0x7, 0x7, 0x8, 0x3, 0x5, 0x269, 0xfffffff7, 0x9, 0x7, 0x5, 0xed, 0xfff, 0xfffffffb, 0x100, 0xf2d0, 0x0, 0x15f, 0xf, 0x80, 0x5, 0x3, 0x5bd1, 0x146b, 0x4, 0x2, 0x6, 0xe, 0x7, 0xda3, 0x65, 0x2f, 0x2, 0x6, 0x3, 0x3ff, 0x81, 0x9000, 0x3, 0x80000000, 0xf, 0x9c7, 0x0, 0x7, 0x80, 0x80000001, 0xa2, 0x5, 0x2, 0x200, 0x5d9, 0x7, 0x2, 0x34, 0x3, 0x5, 0x4c16, 0x6, 0x8, 0x3, 0xf, 0x2, 0x9, 0x31, 0xfffffffa, 0x6, 0x7ff, 0x4, 0x400, 0x8, 0x5, 0x5, 0x1, 0x401, 0x3, 0x4, 0x2, 0xca, 0x26e2, 0x9, 0x4, 0xa, 0x1, 0x7fffffff, 0x9, 0x401, 0x8, 0x1, 0xfff, 0x401, 0x9, 0x3, 0x3, 0x3, 0x0, 0x4, 0x1, 0x3, 0x10, 0x9, 0x5, 0x6, 0x80000001, 0x7, 0x100000, 0x7, 0x10001, 0x7fffffff, 0x0, 0x1, 0x295bb605, 0x7, 0x7f, 0x7fff, 0x40, 0x738, 0x800, 0x0, 0x9, 0x3, 0x9, 0x9, 0xc, 0x3, 0x1, 0x9, 0x0, 0x2, 0xef6, 0x4, 0x9, 0x3, 0x1, 0x9, 0x8000, 0xd, 0x1ff, 0x659c, 0xab4, 0x13c0, 0x7, 0x2cd, 0x8001, 0xfffffeff, 0x0, 0x68960278, 0xcb, 0x9, 0x1, 0x1, 0x4, 0x5, 0xffffc000, 0x9, 0x7f, 0x7a, 0xf, 0x5, 0xa, 0x2, 0x0, 0x3, 0xffff, 0x7ff, 0x4, 0x3, 0x3, 0x9, 0x6, 0x9, 0x3ff, 0x6, 0x6, 0x101, 0x6ba95b47, 0x1, 0xff, 0xfffff801, 0x4, 0x5, 0x595aab9, 0x100, 0x0, 0x13, 0xa13b, 0x20b, 0xd98, 0x3, 0x80000001, 0x4, 0x7, 0x2, 0x1, 0x9, 0x200, 0x4, 0x0, 0x0, 0x1, 0x3, 0x9b, 0x6, 0x20000000, 0x800, 0x4, 0x80000000, 0xfff, 0x9, 0xd6, 0x0, 0x3, 0x0, 0x78, 0x7, 0x9, 0x1, 0x3, 0xfffffff8, 0x800, 0x8, 0xa, 0x3c, 0x9, 0x2, 0x6cb, 0x9, 0x0, 0x8, 0xd, 0x9, 0x3, 0xfffffff8, 0x5, 0xf, 0x4, 0x2, 0x2, 0x6, 0x7, 0x3, 0x10000, 0x8c5, 0xff, 0x8000, 0xfffffd8b, 0x9, 0xf, 0x8000, 0x3, 0x8, 0x9, 0x1, 0x8, 0x4, 0x9, 0xe, 0x5, 0x4, 0x2, 0x0, 0x4, 0x6, 0x9, 0x9, 0xe0e, 0xe46, 0x2, 0x380, 0x8, 0x9, 0x9, 0x1, 0x3, 0x8, 0x400, 0x6, 0x2, 0x9, 0x8, 0x9, 0x1ff, 0xe03c, 0xfffff801, 0x3e, 0x5, 0x8, 0x1, 0x3, 0x9, 0x7fff, 0x6, 0x9fad, 0x8, 0x6, 0x9, 0x4, 0x0, 0x7fffffff, 0x9, 0x7, 0xfff, 0x7, 0x6, 0x4, 0x4, 0xc, 0x10, 0x7f, 0x3e, 0x401, 0x6, 0x1, 0x9, 0x8000, 0x70000000, 0x9, 0x2, 0x400, 0x8, 0x2, 0xf8f, 0x9, 0x2, 0x6, 0x401, 0x1, 0x428, 0x9, 0x3bc, 0x5, 0x16, 0x9, 0x0, 0x400, 0xfffffffb, 0x6, 0xff000000, 0x6fe8, 0xffffffff, 0x1, 0x4, 0x9, 0x0, 0x8, 0x9, 0x4, 0x3, 0x0, 0x831d, 0x8, 0x5, 0x2, 0x25f, 0x0, 0x4, 0x0, 0x10001, 0xb, 0x0, 0x1, 0x40, 0x698, 0x8, 0x8, 0x3, 0x5, 0x5, 0x5, 0xd2, 0xc0e, 0x10000, 0x5, 0x1, 0x6dea1ca, 0x868, 0x9, 0x0, 0x752, 0xe093, 0xb, 0x4bd3, 0x751c, 0x5, 0x0, 0x2, 0xfffffffd, 0xef, 0x1, 0x9, 0x3, 0x3, 0x200, 0x100, 0x4, 0x19c0, 0x5, 0x9, 0x100000, 0x401, 0x3, 0xaf7, 0x10000, 0x5, 0x0, 0xc, 0xfffffffd, 0x5b5, 0x5, 0x7, 0x2, 0x3ff, 0xc2, 0x5, 0x0, 0x6, 0x400000, 0x6, 0x81, 0x0, 0xf, 0x7fff, 0x8, 0x8, 0x6, 0x8, 0x62d, 0xf, 0x9, 0x9, 0x66, 0x0, 0x7, 0x5d54, 0xfffffeff, 0x6, 0x7, 0x2, 0xf, 0x400, 0x5, 0x40, 0x2, 0x6, 0x2, 0x9, 0x4, 0x7, 0x5, 0x3ff, 0xc, 0x7fff, 0x4, 0xfff, 0xce, 0xfffffff9, 0x3, 0x4, 0x0, 0x5, 0x2, 0x2, 0x7, 0x7, 0xb, 0x73b8cb93, 0x46, 0x401, 0x6, 0x8, 0x1, 0x10001, 0x1000, 0x2, 0x5, 0x2, 0x2, 0x9037, 0xfffffc01, 0x3745, 0xd5d9, 0xffffffff, 0x9, 0x3, 0x0, 0x7542, 0x8, 0x4, 0x8, 0x69489284, 0x6, 0x7, 0x5, 0x5, 0x459, 0xc2, 0x0, 0x9, 0x13fa, 0xf, 0x742, 0x7, 0xd, 0x0, 0xc, 0x8, 0x7980, 0x4a, 0xf, 0x7eb41bae, 0x7, 0xc, 0x9, 0x9, 0x2, 0x7, 0x9, 0x6, 0xfffff076, 0x7, 0x0, 0x5, 0x1, 0x4d7, 0x2, 0x1, 0xf, 0x7, 0x5a, 0x80000000, 0x7, 0x0, 0x10000, 0x6, 0x6060, 0x2, 0x1, 0x9, 0x0, 0x6, 0x3ff, 0x1, 0xa17, 0xffffffb0, 0x7, 0x4, 0x5, 0x5, 0x200, 0x3ff, 0xd0, 0x76520647, 0xa, 0x4, 0x10001, 0x7, 0x5, 0x9d, 0x1, 0x3, 0xfffffffa, 0x36, 0x400, 0x2, 0x5, 0x6, 0x6, 0x4, 0xed7, 0x5, 0xd86, 0xc9c, 0x2, 0x1000000, 0xe, 0x800, 0xfffffffa, 0x9, 0x2, 0x4, 0x5, 0x6, 0x9c0, 0x8, 0x1ff, 0x3, 0x3ff, 0x2, 0x3, 0x8, 0x2, 0x8, 0x7, 0x5, 0x390c, 0x2, 0xf5f8, 0x5, 0xfffffff7, 0x1, 0x8, 0x8, 0x3, 0x8, 0xe60, 0x7, 0x401, 0x945, 0x8, 0x1, 0xffffffff, 0x5, 0xe7, 0x18, 0x0, 0x5, 0xfc8, 0x800, 0x5, 0x6bec, 0x0, 0x2, 0x2, 0x7, 0x8, 0x380, 0x100, 0x2, 0x6, 0xd8, 0x6, 0x9, 0x6, 0x3, 0xffff, 0x6, 0x3, 0x0, 0x1000, 0xf, 0x8, 0x40, 0x5, 0x81, 0x8, 0x5, 0x319c, 0xb, 0x9, 0x7, 0xfff, 0x3, 0x3, 0xe0, 0xd486, 0x5, 0xfffffff3, 0x0, 0x7, 0x4, 0x4, 0x2, 0x4d15575c, 0x2, 0xc41, 0x1, 0x6, 0x9, 0x1, 0x81, 0x3, 0xc, 0x7, 0xffff7b87, 0x9, 0x6, 0x5, 0x80, 0x8, 0x2, 0x8000, 0x16, 0xffffffff, 0x2, 0x400, 0x20, 0x9, 0x6, 0x1, 0x6, 0xaf, 0x4, 0x76ddca39, 0x7ff, 0x4, 0x4, 0x6, 0x600000, 0x9, 0x0, 0x4, 0x9, 0x6d5, 0xd, 0xffffffff, 0x9, 0x6, 0x9, 0x7, 0xa0, 0x4, 0x4f6000, 0x8, 0x0, 0x10beef12, 0x2, 0x2, 0x2, 0x7f00, 0x4f, 0xedce, 0x88, 0x5, 0x5, 0x28db8cbb, 0x1, 0xf2d, 0x5, 0xde8, 0x1, 0xd, 0x6, 0x80, 0x7, 0x7fffffff, 0x40, 0x8, 0x15, 0x0, 0x9, 0x2, 0x57c, 0x3, 0x6, 0x0, 0x43, 0xff2a, 0x1, 0x7ff, 0x40, 0x5, 0x8, 0x9, 0x9, 0x400000, 0x3b4d, 0x1, 0x80, 0xf, 0x3, 0x60000000, 0x1, 0x6, 0x5, 0x7, 0x2, 0x7ff, 0x80000000, 0x3d5, 0x1ff, 0x7, 0x5, 0xf03, 0x8, 0x6, 0x100, 0x3, 0xffffff7f, 0xe, 0x1, 0xfffffff8, 0x3, 0x9, 0x3, 0x8, 0x6, 0x2, 0x8, 0x3, 0x0, 0x0, 0x6, 0x4, 0x10, 0xe78, 0x42, 0xa616, 0x1, 0x5, 0x910, 0xf7, 0x1ff, 0x5, 0x6, 0x2, 0x77ba, 0x8, 0x8, 0x4, 0x10, 0x7, 0xffffed86, 0x6, 0x1, 0x10000, 0x5, 0x22, 0x46, 0x4, 0x8, 0x5, 0x4, 0xc41, 0x6, 0x8, 0x9, 0x7, 0x7, 0x9, 0x9d07, 0x4, 0xd, 0x401, 0x3, 0x40, 0x2, 0x9, 0x4, 0x9, 0x5ed, 0xe0000, 0xf, 0x4]}) 7m2.569379557s ago: executing program 2 (id=7067): r0 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$binfmt_misc(r2, &(0x7f0000000480)="dc", 0x1) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x4, 0x0) 7m2.28754918s ago: executing program 34 (id=7067): r0 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$binfmt_misc(r2, &(0x7f0000000480)="dc", 0x1) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x4, 0x0) 27.333466582s ago: executing program 1 (id=11195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000440), 0x3) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800", 0x4e}, {&(0x7f0000000180)="61d039622fca5c64a169be49e15d04271baa03ca41a9f0af2b2b589b3c59e7841efa59ff5387e9a0f10d405ed691ca81b9f21f9f2230812e5946f5", 0x3b}], 0x2}, 0x0) 27.198541948s ago: executing program 1 (id=11197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) sendmmsg$inet(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0xc}}], 0xc}}], 0x1, 0x0) 27.095719091s ago: executing program 1 (id=11198): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0xd80}, 0x1, 0x0, 0x0, 0x40c0}, 0xc000) accept4$tipc(r1, 0x0, 0x0, 0x800) 27.006157273s ago: executing program 1 (id=11200): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 26.933334485s ago: executing program 1 (id=11201): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 26.756263233s ago: executing program 1 (id=11202): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) landlock_restrict_self(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 26.405874547s ago: executing program 35 (id=11202): r0 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) landlock_restrict_self(r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) 8.994711971s ago: executing program 6 (id=11401): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180203000000ffedde00"/21], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8.84045108s ago: executing program 6 (id=11405): syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4c04, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}, 0x22}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) 8.142545997s ago: executing program 6 (id=11414): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x4018480c, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000007c0)={0x44, &(0x7f0000000380)={0x0, 0x16, 0x1, 'z'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.512285673s ago: executing program 6 (id=11468): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000140)={0x4, 0x401, 0x5, 0x4, 0x0, 0x2001, 0xfffffffffffffff8, 0x1}, 0x0, &(0x7f0000000300)={0x38, 0x2, 0x9, 0x1, 0x5, 0x7, 0x8001, 0xa6f}, &(0x7f0000000340)={0x0, 0x3938700}, 0x0) 4.411041869s ago: executing program 8 (id=11469): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x5c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x38, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x34, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x30, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x29, 0x3, "31f4b13992167fe55400000000f0fa671f5b5c3a5f32b0da4c593738eaac307fba9a431449"}}}}]}, 0x5c}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) 3.987780413s ago: executing program 7 (id=11474): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004240)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.935225188s ago: executing program 6 (id=11476): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000140)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000380)={0x1, 0x5, 0x0, 0x1003, 0x3, 0x0, 0xff, 0x5, 0x0, 0x6, 0x800001, 0x2}) 3.781347998s ago: executing program 7 (id=11479): unshare(0x400) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) exit(0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fchdir(r1) 2.589330716s ago: executing program 6 (id=11485): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000480)={0x0, 0xe}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.560768225s ago: executing program 7 (id=11486): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x6a) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x4}]}) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x3000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) file_getattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x18, 0x1100) close_range(r0, 0xffffffffffffffff, 0x0) 2.442494733s ago: executing program 8 (id=11487): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x80002, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x3, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x3, 0xf2, 0x6, {0x6, 0x1, 0xf, 0x6, 0xf, 0x4}, {0x7, 0x0, 0x0, 0x3, 0x4, 0xd}, 0x8fc, 0x7, 0x904}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xffffffff, 0x1, 0x4, 0xb5, 0x2, 0x4, 0x8, 0x18cb, 0x0, 0x9, 0xfffffbff, 0x0, 0x6, 0xb11a, 0x3, 0x4, 0x2, 0xf, 0x6, 0x5e, 0x5, 0xf, 0x2, 0x9c3, 0xe2, 0x4, 0x4, 0x3, 0xe, 0x9, 0x6, 0x8, 0xa0ee, 0xcd7e, 0x7, 0x54e, 0x0, 0xb07, 0x4, 0x7254, 0x40, 0x7, 0x342, 0x7ff, 0x4, 0x0, 0x6, 0xffffffdd, 0x7, 0x3, 0x3ff, 0x7fffffff, 0x1ff, 0x800, 0xff, 0x3, 0x4, 0x81, 0x6db8, 0x4, 0x7, 0x400, 0x3, 0x4, 0x10, 0x8, 0x40, 0x81, 0x2, 0x548, 0x8, 0x7, 0x5, 0x7, 0x6, 0xfffffbff, 0x7fffffff, 0x2c, 0x0, 0x5, 0x200, 0x5, 0x200, 0x100, 0xcb, 0x1ff, 0x9a22, 0x50000, 0xfffffffd, 0x5, 0x1, 0xfffffffd, 0x73af, 0x7, 0xa, 0x4, 0x200, 0x0, 0x2, 0x4, 0xf, 0x0, 0x1, 0xfff, 0x9, 0x4, 0x10, 0x6, 0x0, 0x10, 0x3, 0x4, 0x4, 0x5, 0x4, 0x7, 0x7, 0x40, 0x80000001, 0x4f72, 0x9, 0x2, 0x9, 0x1, 0x9a98, 0x6, 0x6, 0x0, 0x8, 0x3ff, 0x8, 0x6, 0x5, 0x101, 0x3, 0x3, 0xdfffe, 0x1, 0x140, 0x2, 0x2, 0x8, 0x1, 0x2, 0x10000, 0x3, 0x10, 0x8, 0x3, 0x40, 0x1, 0x3, 0xd701, 0xb, 0x1, 0x4, 0x6, 0x0, 0x0, 0xb8, 0x7, 0x79d, 0xff, 0xffffffff, 0x7, 0xdc68, 0x7, 0xbe3, 0x2, 0x10000, 0x80c, 0x7, 0xca, 0x43, 0x40000000, 0x3, 0x8, 0x7, 0xb, 0x80000000, 0xdc, 0x10000, 0x3, 0x7, 0xffffff9d, 0x5, 0xcc, 0x5, 0x7fff, 0x0, 0x2, 0x2ed2, 0x2, 0xd497, 0x1, 0x3, 0x4, 0x1, 0x0, 0x800000, 0xecf, 0xebe8, 0x6, 0x9, 0x7, 0xfe00, 0x6, 0x26a, 0x80000000, 0x6, 0x5, 0x100, 0x3, 0xfffffff9, 0x0, 0x200, 0x0, 0x9398, 0x0, 0x5, 0xfff, 0x4c0d, 0x1, 0xff, 0x7ff, 0xbb7, 0x9, 0x8, 0xe, 0x2, 0x1, 0xfffeffff, 0x9, 0x672c, 0xfffffffd, 0x8372, 0x4, 0x4, 0xb, 0x7, 0xffffffff, 0x3ff, 0x9, 0x8, 0xe88, 0x9, 0x4, 0xffff, 0x2, 0x6, 0xffff, 0x6, 0x3, 0x41, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x80000001, 0xe, 0x7f, 0x9, 0x1ffc00, 0x9, 0x9, 0x5, 0x80000000, 0x1, 0xfffffffe, 0x1, 0x8, 0x2, 0x100, 0x3, 0x1, 0x8, 0x8, 0x1, 0x1, 0x100, 0x2, 0x2, 0x9, 0x2, 0x8, 0x8b, 0xd8, 0x1, 0x5, 0xbd5e, 0x3, 0x9, 0x7, 0x0, 0xb1, 0x80000001, 0xffff58a7, 0x2, 0x1, 0x31, 0xa18e, 0x8, 0xc93, 0x3, 0x1, 0x2a3, 0xb, 0x4, 0x5, 0x9, 0x1, 0x8, 0x8, 0x20000000, 0x8, 0xb8, 0xa, 0x7ac8, 0x70dc, 0x9, 0x0, 0x6, 0x4, 0x1, 0x6a, 0x7ff, 0xa, 0x4f040ab5, 0x4, 0x80000001, 0x8, 0x8, 0x4, 0x5, 0x93, 0x1, 0x200, 0x5, 0x5, 0x8, 0x32, 0x0, 0x1ff, 0x9, 0x5f8, 0x4, 0x9, 0x8, 0x4, 0x80000000, 0xfffffff8, 0x200, 0x7f, 0x6, 0x8, 0x7, 0x4, 0x8a, 0x5, 0x8, 0x6, 0x40, 0x7, 0x6, 0xbf, 0x8, 0x101, 0x2, 0x7, 0x2a, 0x9, 0x2, 0x1ff, 0x800, 0x3, 0x4, 0x9, 0x3, 0xa, 0x3, 0x2, 0x599c, 0x4, 0x9, 0x7, 0x100, 0x6, 0xc00000, 0x7, 0x9, 0x4, 0xffffffff, 0x6, 0x10001, 0x5c540000, 0x40, 0xffffb13b, 0x4, 0x8, 0x1, 0x80c, 0xd, 0x800, 0x5, 0x7, 0x3, 0x7e6, 0x8, 0x7, 0x1, 0xff01, 0x1, 0xa, 0xa, 0xffffffff, 0x4, 0x1, 0x8f35, 0x9, 0x3, 0x20, 0xfffffffa, 0xfffffffe, 0x2, 0x7000000, 0x4, 0x8, 0x8, 0x4, 0x9, 0x8001, 0x2, 0xffffffff, 0x1, 0x0, 0x7f, 0xb12, 0x9, 0x1, 0x8000, 0xfffffa5a, 0x1, 0xbe5, 0xc, 0x0, 0xc6, 0x3, 0x9, 0x80000000, 0x5, 0x9, 0x10, 0xfffffffd, 0x9, 0x6, 0x8, 0xfffffff8, 0xe5, 0x1, 0x4, 0x1, 0x4, 0x7, 0xf2, 0x8, 0x90, 0xc, 0xf2, 0x7582, 0x86, 0x6de, 0x8e, 0x8000, 0x8, 0x3e91, 0x1, 0x7, 0x80, 0x0, 0x8, 0x3, 0x2, 0x101, 0x9, 0x2, 0x2, 0x7, 0x0, 0x6, 0xffff5365, 0x3, 0xd042, 0x2, 0x8001, 0x8, 0xffffffff, 0x3, 0x0, 0x5, 0x6, 0x4, 0x7, 0xa, 0x2, 0xffffff7f, 0x7, 0x1, 0x1, 0x5, 0x6, 0x9, 0x77, 0x10001]}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x801}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) 2.33175478s ago: executing program 8 (id=11488): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x240040c0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 2.213465996s ago: executing program 8 (id=11489): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x10004) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)=0x1) close(r0) 1.851509612s ago: executing program 8 (id=11490): chdir(&(0x7f0000000540)='./cgroup\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) 1.835323141s ago: executing program 8 (id=11491): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) 1.64039041s ago: executing program 7 (id=11492): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97}, {&(0x7f0000000240)=""/121}, {&(0x7f0000000340)=""/107}, {&(0x7f00000001c0)=""/12}, {&(0x7f00000003c0)=""/124}, {&(0x7f0000001cc0)=""/213}, {&(0x7f0000000580)=""/181}], 0x0, &(0x7f00000009c0)=""/4096}, 0xbac00000}, {{&(0x7f00000006c0), 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214}, {&(0x7f0000000840)=""/201}]}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207}], 0x0, &(0x7f0000001b40)=""/173}, 0x7a}], 0x400000000000273, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.49181799s ago: executing program 7 (id=11494): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 1.447913731s ago: executing program 7 (id=11496): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB='9'], 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 1.20775721s ago: executing program 4 (id=11499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) 1.05675981s ago: executing program 4 (id=11500): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') r1 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x6000200e}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x93) syz_mount_image$fuse(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000580)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) 1.006818235s ago: executing program 4 (id=11501): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0xffffc000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe14, 0x0, 0x0}, &(0x7f0000000000)=0x40) 962.198543ms ago: executing program 4 (id=11502): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9, 0x62ca, 0x20, 0x2, 0x100000, 0x6, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x26, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x2b27, 0x0, 0x2, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"}) 491.650508ms ago: executing program 5 (id=11505): close(0x3) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) 444.961461ms ago: executing program 5 (id=11506): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x5, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x4, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x2, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0x9, '\x00', 0x82}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xd, 0x7, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x8}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xd, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0x2c, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0x5a}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x2, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x0, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 394.658502ms ago: executing program 5 (id=11507): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) openat$uhid(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x8, @bearer=@udp='udp:syz0\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40001) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) 307.775035ms ago: executing program 5 (id=11508): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffea0, 0x0, 0x0, 0x2, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x20, 0x0, @fd_index, 0x0, 0x0, 0x6, 0x3, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 301.964787ms ago: executing program 5 (id=11509): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2, 0xffffffeffffffffe, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000005100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x2, r0}) 155.212891ms ago: executing program 5 (id=11510): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) clock_gettime(0x0, &(0x7f0000000180)) ppoll(&(0x7f0000000080)=[{r0, 0x2}, {r0, 0x100}], 0x2, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 85.011856ms ago: executing program 4 (id=11511): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xfb}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)="ac", 0x1) recvmmsg$unix(r1, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10003, 0x0) 0s ago: executing program 4 (id=11512): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): 4 to 16383 [ 911.189786][T30654] netlink: 'syz.4.10184': attribute type 9 has an invalid length. [ 911.204142][T30654] netlink: 'syz.4.10184': attribute type 11 has an invalid length. [ 911.223958][T30654] netlink: 'syz.4.10184': attribute type 12 has an invalid length. [ 911.243460][T30654] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.10184'. [ 911.258224][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10184'. [ 911.497173][T21859] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 911.664443][T21859] usb 2-1: Using ep0 maxpacket: 16 [ 911.671901][T21859] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 911.687465][T21859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.699535][T21859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.709406][T21859] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 911.725851][T21859] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 911.739160][T21859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.755352][T21859] usb 2-1: config 0 descriptor?? [ 912.233061][T21859] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.009E/input/input177 [ 912.334852][T30687] loop3: detected capacity change from 0 to 7 [ 912.346174][T21859] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.009E/input/input178 [ 912.386060][T30687] Dev loop3: unable to read RDB block 7 [ 912.401982][T30687] loop3: unable to read partition table [ 912.415865][T30687] loop3: partition table beyond EOD, truncated [ 912.428585][T30687] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 912.565542][T21859] kye 0003:0458:5013.009E: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 912.619263][T21859] usb 2-1: USB disconnect, device number 10 [ 912.793035][T30692] fido_id[30692]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 912.910720][ T30] audit: type=1326 audit(1772124767.588:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30696 comm="syz.5.10203" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703ef6c code=0x0 [ 913.150208][T30706] netlink: 'syz.1.10206': attribute type 16 has an invalid length. [ 913.173568][T30706] netlink: 'syz.1.10206': attribute type 17 has an invalid length. [ 913.213506][T30706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 913.479727][T30710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10208'. [ 913.490659][T30710] netlink: 'syz.4.10208': attribute type 7 has an invalid length. [ 913.504540][T30710] netlink: 'syz.4.10208': attribute type 8 has an invalid length. [ 913.512460][T30710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10208'. [ 913.929236][ T30] audit: type=1326 audit(1772124768.608:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30729 comm="syz.1.10216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 913.969024][T30731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10215'. [ 913.984942][T30731] netlink: 'syz.5.10215': attribute type 18 has an invalid length. [ 914.017436][ T30] audit: type=1326 audit(1772124768.608:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30729 comm="syz.1.10216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 914.068525][ T30] audit: type=1326 audit(1772124768.648:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30729 comm="syz.1.10216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 914.106189][ T30] audit: type=1326 audit(1772124768.648:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30729 comm="syz.1.10216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 914.136658][ T30] audit: type=1326 audit(1772124768.648:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30729 comm="syz.1.10216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 914.180034][ T30] audit: type=1326 audit(1772124768.668:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30729 comm="syz.1.10216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 914.211622][ T30] audit: type=1326 audit(1772124768.668:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30729 comm="syz.1.10216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 914.238863][ T30] audit: type=1326 audit(1772124768.668:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30729 comm="syz.1.10216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 914.263876][ T30] audit: type=1326 audit(1772124768.678:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30729 comm="syz.1.10216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7fc2f6c code=0x7ffc0000 [ 914.294580][T21867] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 914.467979][T21867] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 914.484500][T21867] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 914.496577][T21867] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 54297, setting to 1023 [ 914.508379][T21867] usb 5-1: config 0 interface 0 has no altsetting 0 [ 914.519003][T21867] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 914.528432][T21867] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 914.537176][T21867] usb 5-1: Product: syz [ 914.541435][T21867] usb 5-1: Manufacturer: syz [ 914.546324][T21867] usb 5-1: SerialNumber: syz [ 914.561170][T21867] usb 5-1: config 0 descriptor?? [ 914.583892][T21867] usb 5-1: selecting invalid altsetting 0 [ 915.091964][T21867] usb 5-1: USB disconnect, device number 19 [ 915.154604][T30762] netlink: 'syz.6.10230': attribute type 1 has an invalid length. [ 915.377836][T30768] 8021q: adding VLAN 0 to HW filter on device bond3 [ 915.387038][T30768] bond2: (slave bond3): making interface the new active one [ 915.395900][T30768] bond2: (slave bond3): Enslaving as an active interface with an up link [ 916.056459][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 916.625367][T30804] input: syz1 as /devices/virtual/input/input179 [ 918.253114][T30836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10258'. [ 918.270422][T30836] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10258'. [ 918.572516][T30851] binder: 30850:30851 unknown command 0 [ 918.593452][T30851] binder: 30850:30851 ioctl c0306201 80000040 returned -22 [ 919.014418][T21859] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 919.199428][T21859] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 919.244550][T21859] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 919.262411][T21859] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 919.272082][T21859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.280320][T21859] usb 2-1: Product: syz [ 919.287971][T21859] usb 2-1: Manufacturer: syz [ 919.292581][T21859] usb 2-1: SerialNumber: syz [ 919.321900][T21859] usb 2-1: config 0 descriptor?? [ 919.329057][T30855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 919.337182][T30855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 919.578412][T30855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 919.588890][T30855] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 920.322900][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 920.322917][ T30] audit: type=1326 audit(1772124774.998:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30893 comm="syz.6.10281" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf700ef6c code=0x0 [ 920.634424][T21859] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 920.680015][T21859] dm9601 2-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 920.715967][T21859] usb 2-1: USB disconnect, device number 11 [ 920.726598][T21859] dm9601 2-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 920.823496][T21869] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 920.996773][T21869] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.007593][T21869] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 921.019991][T21869] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 921.033819][T21869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 921.075140][T21869] usb 6-1: SerialNumber: syz [ 921.341419][T30916] netlink: 'syz.4.10290': attribute type 16 has an invalid length. [ 921.345184][T21869] usb 6-1: 0:2 : does not exist [ 921.382095][T30916] netlink: 'syz.4.10290': attribute type 17 has an invalid length. [ 921.409260][T21869] usb 6-1: USB disconnect, device number 108 [ 921.430956][T30916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 921.496167][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.874152][T15770] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 921.992556][T30941] loop7: detected capacity change from 0 to 16384 [ 922.036080][T15770] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 922.053205][T15770] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 922.067950][T15770] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 922.083880][T15770] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 922.095867][T15770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 922.104548][T15770] usb 5-1: Product: syz [ 922.111262][T15770] usb 5-1: Manufacturer: syz [ 922.116626][T15770] usb 5-1: SerialNumber: syz [ 922.264759][T30942] loop7: detected capacity change from 16384 to 16383 [ 922.356374][T15770] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 922.548466][T15770] usb 5-1: USB disconnect, device number 20 [ 922.763208][T30929] usblp0: removed [ 922.806077][T21869] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 922.978251][T21869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 922.990371][T21869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.000405][T21869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 923.013499][T21869] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 923.022692][T21869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.033466][T21869] usb 2-1: config 0 descriptor?? [ 923.495926][T21869] plantronics 0003:047F:FFFF.009F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 923.548195][T30958] netlink: 'syz.5.10306': attribute type 16 has an invalid length. [ 923.574845][T30958] netlink: 'syz.5.10306': attribute type 17 has an invalid length. [ 923.650336][T30958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 923.729299][T21869] usb 2-1: USB disconnect, device number 12 [ 924.104224][T21867] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 924.264961][T21867] usb 6-1: Using ep0 maxpacket: 32 [ 924.271971][T21867] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 924.282931][T21867] usb 6-1: config 0 has no interface number 0 [ 924.294396][T21867] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 924.320077][T21867] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 924.360835][T21867] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 924.395894][T21867] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 924.417000][T21867] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 924.451095][T21867] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.469123][T21867] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 924.479554][T21867] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 924.513710][T21867] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 924.537303][T21867] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 924.566521][T21867] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 924.582864][T21867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.591169][T21867] usb 6-1: Product: syz [ 924.596272][T21867] usb 6-1: Manufacturer: syz [ 924.600941][T21867] usb 6-1: SerialNumber: syz [ 924.616488][T21867] usb 6-1: config 0 descriptor?? [ 924.632607][T30962] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 924.642328][T30962] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 924.666337][T21867] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 924.704283][T21867] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 924.731727][T21867] scsi host1: microtekX6 [ 924.930128][T21868] usb 6-1: USB disconnect, device number 109 [ 925.804626][T21868] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 926.020353][T21868] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 926.029638][T21868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.046654][T21868] usb 2-1: config 0 descriptor?? [ 926.131401][T31036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10340'. [ 926.257164][T21868] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 926.287741][T31040] binder: 31039:31040 unknown command 0 [ 926.293403][T31040] binder: 31039:31040 ioctl c0306201 80000080 returned -22 [ 926.475427][T21868] [drm:udl_init] *ERROR* Selecting channel failed [ 926.512173][T21868] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 926.534316][T21868] [drm] Initialized udl on minor 2 [ 926.551926][T21868] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 926.585299][T21868] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 926.616823][T21869] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 926.625131][T21868] usb 2-1: USB disconnect, device number 13 [ 926.635898][T21869] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 926.917829][T31060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10351'. [ 926.966853][T31060] netlink: 'syz.5.10351': attribute type 14 has an invalid length. [ 927.454380][T15770] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 927.636635][T15770] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 927.648624][T15770] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 927.660893][T15770] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 54297, setting to 1023 [ 927.672627][T15770] usb 2-1: config 0 interface 0 has no altsetting 0 [ 927.682875][T15770] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 927.692007][T15770] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 927.700872][T15770] usb 2-1: Product: syz [ 927.705119][T15770] usb 2-1: Manufacturer: syz [ 927.710155][T15770] usb 2-1: SerialNumber: syz [ 927.718058][T15770] usb 2-1: config 0 descriptor?? [ 927.761372][T15770] usb 2-1: selecting invalid altsetting 0 [ 928.114289][T21869] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 928.149393][T21867] usb 2-1: USB disconnect, device number 14 [ 928.264469][T21869] usb 5-1: Using ep0 maxpacket: 8 [ 928.272316][T21869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.282809][T21869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 928.291737][T21869] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 928.303250][T21869] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 928.315221][T21869] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 928.324309][T21869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.342000][T21869] hub 5-1:1.0: bad descriptor, ignoring hub [ 928.348129][T21869] hub 5-1:1.0: probe with driver hub failed with error -5 [ 928.356609][T21869] cdc_wdm 5-1:1.0: skipping garbage [ 928.361809][T21869] cdc_wdm 5-1:1.0: skipping garbage [ 928.370385][T21869] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 928.376455][T21869] cdc_wdm 5-1:1.0: Unknown control protocol [ 928.484131][T21868] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 928.654131][T21868] usb 6-1: Using ep0 maxpacket: 16 [ 928.659789][T21868] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 928.669813][T21868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.682258][T21868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.693746][T21868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.706649][T21868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.718449][T21868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.730454][T21868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.746427][T21868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.758522][T21868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.770521][T21868] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 928.780001][T21868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 928.788430][T21868] usb 6-1: SerialNumber: syz [ 928.799361][T21868] usb 6-1: config 0 descriptor?? [ 928.817694][T21868] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input180 [ 928.988289][T31081] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 929.034781][ T5176] bcm5974 6-1:0.0: could not read from device [ 929.044987][ T5176] bcm5974 6-1:0.0: could not read from device [ 929.059642][T21868] usb 6-1: USB disconnect, device number 110 [ 929.146352][T31081] usb 5-1: device firmware changed [ 929.167235][T31081] cdc_wdm 5-1:1.0: Error autopm - -16 [ 929.167431][T15770] usb 5-1: USB disconnect, device number 21 [ 929.344139][T15770] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 929.494293][T15770] usb 5-1: Using ep0 maxpacket: 8 [ 929.501224][T15770] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 929.524142][T15770] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 929.533454][T15770] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 929.570287][T15770] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 929.594142][T15770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.614884][T15770] hub 5-1:1.0: bad descriptor, ignoring hub [ 929.620830][T15770] hub 5-1:1.0: probe with driver hub failed with error -5 [ 929.644653][T15770] cdc_wdm 5-1:1.0: skipping garbage [ 929.649897][T15770] cdc_wdm 5-1:1.0: skipping garbage [ 929.664474][T15770] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 929.985902][T21868] usb 5-1: USB disconnect, device number 22 [ 930.104648][T31110] netlink: 'syz.5.10368': attribute type 12 has an invalid length. [ 930.854459][T21869] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 930.894906][T21862] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 931.014570][T21869] usb 2-1: Using ep0 maxpacket: 32 [ 931.032271][T21869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 931.041540][T31138] netlink: 'syz.5.10382': attribute type 9 has an invalid length. [ 931.048704][T21869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 931.051663][T31138] netlink: 'syz.5.10382': attribute type 11 has an invalid length. [ 931.069084][T31138] netlink: 'syz.5.10382': attribute type 12 has an invalid length. [ 931.077173][T21869] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 931.077286][T31138] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.10382'. [ 931.087043][T21869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.096496][T21862] usb 5-1: Using ep0 maxpacket: 32 [ 931.112910][T21869] usb 2-1: config 0 descriptor?? [ 931.131490][T21869] hub 2-1:0.0: USB hub found [ 931.148517][T21862] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 931.157955][T21862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.173730][T21862] usb 5-1: Product: syz [ 931.188196][T21862] usb 5-1: Manufacturer: syz [ 931.196392][T21862] usb 5-1: SerialNumber: syz [ 931.212272][T21862] usb 5-1: config 0 descriptor?? [ 931.244997][T21862] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 931.272983][T21862] dvb-usb: bulk message failed: -22 (4/0) [ 931.283006][T21862] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 931.295664][T21862] dvb-usb: bulk message failed: -22 (5/0) [ 931.301413][T21862] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 931.315430][T21862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 931.333602][T21862] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 931.348083][T21862] usb 5-1: media controller created [ 931.348460][T21869] hub 2-1:0.0: 1 port detected [ 931.366811][T21862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 931.389470][T21862] usb 5-1: selecting invalid altsetting 3 [ 931.395298][T21862] ttusb2: set interface to alts=3 failed [ 931.420773][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.427366][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.465934][T21862] DVB: Unable to find symbol tda10086_attach() [ 931.472489][T21862] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 931.484446][T21862] dvb-usb: bulk message failed: -22 (4/0) [ 931.490347][T21862] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 931.501104][T21862] dvb-usb: bulk message failed: -22 (5/0) [ 931.507886][T21862] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 931.534194][T21862] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 931.571409][T21862] usb 5-1: USB disconnect, device number 23 [ 931.674719][T21862] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 932.068194][T21869] hub 2-1:0.0: activate --> -90 [ 932.486532][T15770] usb 2-1: USB disconnect, device number 15 [ 932.714580][T21869] usb 2-1-port1: config error [ 933.704269][T21868] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 933.727666][T31192] netlink: 'syz.1.10402': attribute type 9 has an invalid length. [ 933.736279][T31192] netlink: 'syz.1.10402': attribute type 11 has an invalid length. [ 933.745937][T31192] netlink: 'syz.1.10402': attribute type 12 has an invalid length. [ 933.753865][T31192] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.10402'. [ 933.763620][T31192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10402'. [ 933.868168][T21868] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 933.887761][T21868] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 933.902266][T21868] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 933.911650][T21868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 933.920239][T21868] usb 5-1: SerialNumber: syz [ 934.076116][T31207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10410'. [ 934.124191][T15770] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 934.139048][T21868] usb 5-1: 0:2 : does not exist [ 934.158915][T31209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10411'. [ 934.190791][T21868] usb 5-1: USB disconnect, device number 24 [ 934.230019][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 934.299024][T15770] usb 6-1: Using ep0 maxpacket: 16 [ 934.308450][T15770] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 934.317949][T15770] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 934.327174][T15770] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.341398][T15770] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 934.350708][T15770] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 934.362358][T15770] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 934.380360][T15770] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 934.389846][T15770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.398155][T15770] usb 6-1: Product: syz [ 934.402482][T15770] usb 6-1: Manufacturer: syz [ 934.407611][T15770] usb 6-1: SerialNumber: syz [ 934.634275][T15770] usb 6-1: 0:2 : does not exist [ 934.685447][T15770] usb 6-1: USB disconnect, device number 111 [ 934.719734][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 936.091706][T31290] input: syz1 as /devices/virtual/input/input181 [ 936.902784][T31326] KVM: debugfs: duplicate directory 31326-4 [ 937.104175][T15770] usb 6-1: new full-speed USB device number 112 using dummy_hcd [ 937.256605][T15770] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 937.267478][T15770] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.281400][T15770] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 937.294492][T15770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.299622][T31333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10459'. [ 937.313523][T31333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10459'. [ 937.537584][T15770] usb 6-1: usb_control_msg returned -32 [ 937.543210][T15770] usbtmc 6-1:16.0: can't read capabilities [ 937.784143][T15770] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 937.936056][T15770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.948406][T15770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.964745][T15770] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 937.973806][T15770] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 937.983124][T15770] usb 5-1: Manufacturer: syz [ 937.991341][T15770] usb 5-1: config 0 descriptor?? [ 938.093205][T21862] usb 6-1: USB disconnect, device number 112 [ 938.264489][T21859] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 938.434381][T21859] usb 2-1: Using ep0 maxpacket: 16 [ 938.443098][T21859] usb 2-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 938.474175][T21859] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 938.496245][T21859] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 938.506258][T21859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.514596][T21859] usb 2-1: Product: syz [ 938.518881][T21859] usb 2-1: Manufacturer: syz [ 938.523511][T21859] usb 2-1: SerialNumber: syz [ 938.739300][T21859] usb 2-1: 0:2 : does not exist [ 938.781747][T21859] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 938.894608][T21859] usb 2-1: USB disconnect, device number 16 [ 939.036711][T15770] uclogic 0003:256C:006D.00A0: v1 frame probing failed: -71 [ 939.054862][T15770] uclogic 0003:256C:006D.00A0: failed probing parameters: -71 [ 939.074769][T15770] uclogic 0003:256C:006D.00A0: probe with driver uclogic failed with error -71 [ 939.099801][T15770] usb 5-1: USB disconnect, device number 25 [ 939.935521][T31405] netlink: 'syz.1.10488': attribute type 27 has an invalid length. [ 940.076259][ T30] audit: type=1326 audit(1772124794.748:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31407 comm="syz.7.10489" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe7f6c code=0x0 [ 940.303119][T31413] Invalid argument reading file caps for ./file0 [ 940.372568][T31405] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.488220][T31405] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.505577][T31405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.686823][T31405] bond2: left promiscuous mode [ 940.706531][T31405] bridge1: left promiscuous mode [ 940.763592][T15762] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.773080][T15762] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.791798][T15762] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.811418][T15762] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.844251][T21868] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 941.004191][T21868] usb 5-1: Using ep0 maxpacket: 32 [ 941.031795][T21868] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 941.056983][T21868] usb 5-1: config 0 has no interface number 0 [ 941.063129][T21868] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 941.096510][T21868] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 941.106618][T21868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.116984][T21868] usb 5-1: Product: syz [ 941.144140][T21868] usb 5-1: Manufacturer: syz [ 941.151947][T31437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10500'. [ 941.156130][T21868] usb 5-1: SerialNumber: syz [ 941.168848][T31437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10500'. [ 941.180849][T31437] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10500'. [ 941.202550][T21868] usb 5-1: config 0 descriptor?? [ 941.220036][T21868] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 941.230902][T21868] em28xx 5-1:0.132: Video interface 132 found: [ 941.617559][T21868] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 941.836115][T21868] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 941.852382][T21868] em28xx 5-1:0.132: board has no eeprom [ 941.954104][T21868] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 941.969300][T21868] em28xx 5-1:0.132: analog set to bulk mode. [ 941.987723][T21869] em28xx 5-1:0.132: Registering V4L2 extension [ 942.008020][T21868] usb 5-1: USB disconnect, device number 26 [ 942.054991][T21868] em28xx 5-1:0.132: Disconnecting em28xx [ 942.232855][T21869] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 942.254909][T21869] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 942.262053][T21869] em28xx 5-1:0.132: No AC97 audio processor [ 942.285940][T21869] usb 5-1: Decoder not found [ 942.290568][T21869] em28xx 5-1:0.132: failed to create media graph [ 942.309347][T21869] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 942.325516][T21869] em28xx 5-1:0.132: Remote control support is not available for this card. [ 942.338824][T21868] em28xx 5-1:0.132: Closing input extension [ 942.504491][T21868] em28xx 5-1:0.132: Freeing device [ 942.893048][T31496] loop6: detected capacity change from 0 to 3664 [ 942.903882][ T5817] Buffer I/O error on dev loop6, logical block 0, async page read [ 942.914186][ T5817] Buffer I/O error on dev loop6, logical block 0, async page read [ 942.922072][ T5817] Buffer I/O error on dev loop6, logical block 0, async page read [ 942.941722][ T5817] Buffer I/O error on dev loop6, logical block 0, async page read [ 942.995617][ T5817] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.023158][ T5817] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.039280][ T5817] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.047608][ T5817] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.056994][ T5817] ldm_validate_partition_table(): Disk read failed. [ 943.063885][ T5817] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.072781][ T5817] Buffer I/O error on dev loop6, logical block 0, async page read [ 943.083759][ T5817] Dev loop6: unable to read RDB block 0 [ 943.090334][ T5817] loop6: unable to read partition table [ 943.102995][T31496] ldm_validate_partition_table(): Disk read failed. [ 943.113489][T31496] Dev loop6: unable to read RDB block 0 [ 943.119600][T31496] loop6: unable to read partition table [ 943.125953][T31496] loop_reread_partitions: partition scan of loop6 (3„ ¾‚”˜) failed (rc=-5) [ 943.928841][ T30] audit: type=1326 audit(1772124798.608:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31535 comm="syz.4.10537" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f48f6c code=0x0 [ 944.223267][ T30] audit: type=1326 audit(1772124798.898:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31549 comm="syz.1.10543" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc2f6c code=0x0 [ 946.674779][T22681] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 946.687842][T22681] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 946.697839][T22681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 946.708996][T22681] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 946.719501][T22681] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 947.173748][T31640] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10580'. [ 947.248410][T31618] chnl_net:caif_netlink_parms(): no params data found [ 947.414355][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 947.428393][T31618] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.466594][T31618] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.473954][T31618] bridge_slave_0: entered allmulticast mode [ 947.515884][T31618] bridge_slave_0: entered promiscuous mode [ 947.538053][T31618] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.564438][T31618] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.581996][T31618] bridge_slave_1: entered allmulticast mode [ 947.590125][T31618] bridge_slave_1: entered promiscuous mode [ 947.688070][T31618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.713476][T31618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.760304][T31618] team0: Port device team_slave_0 added [ 947.799044][T31618] team0: Port device team_slave_1 added [ 947.870624][T31618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.904135][T31618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.939785][T31618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.953966][T31618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.962226][T31618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 948.078941][T31668] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10591'. [ 948.079594][T31618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.160724][T31618] hsr_slave_0: entered promiscuous mode [ 948.168370][T31618] hsr_slave_1: entered promiscuous mode [ 948.275284][T31678] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10595'. [ 948.322602][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10595'. [ 948.510060][T31618] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.535073][T31618] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.637194][T31618] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.650664][T31618] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.760911][T31618] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.771541][T31618] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.785167][ T5821] Bluetooth: hci0: command tx timeout [ 948.816362][T21869] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 948.840357][T31618] team0: Port device netdevsim0 removed [ 948.847860][T31618] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.858414][T31618] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.977286][T21869] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.988529][T21869] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 949.000968][T21869] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 949.011279][T31618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 949.013159][T21869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 949.027255][T21869] usb 6-1: SerialNumber: syz [ 949.030814][T31618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 949.048038][T31618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 949.052266][T31693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10601'. [ 949.065458][T31693] netlink: 'syz.1.10601': attribute type 12 has an invalid length. [ 949.069411][T31618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 949.073387][T31693] netlink: 'syz.1.10601': attribute type 6 has an invalid length. [ 949.098636][T31693] vxlan0: entered promiscuous mode [ 949.131821][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.143445][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.156015][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.165171][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 949.231048][T31618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.250678][T31618] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.261245][T21869] usb 6-1: 0:2 : does not exist [ 949.272763][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.279937][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.307207][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.314418][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.319162][T21869] usb 6-1: USB disconnect, device number 113 [ 949.389642][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880791a6c00: rx timeout, send abort [ 949.401132][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880791a6c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 949.462704][T31618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.590851][T31618] veth0_vlan: entered promiscuous mode [ 949.613859][T31618] veth1_vlan: entered promiscuous mode [ 949.652930][T31618] veth0_macvtap: entered promiscuous mode [ 949.667405][T31618] veth1_macvtap: entered promiscuous mode [ 949.690062][T31618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.705162][T31618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.715480][T31708] sctp: [Deprecated]: syz.6.10604 (pid 31708) Use of int in max_burst socket option deprecated. [ 949.715480][T31708] Use struct sctp_assoc_value instead [ 949.724397][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.742001][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.752436][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.762626][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.900334][T15762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.944438][T15762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.990087][T25980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.010417][T25980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.077309][T31721] netlink: 'syz.5.10610': attribute type 27 has an invalid length. [ 950.307566][T31721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.358145][T31721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.533278][T31738] Invalid argument reading file caps for ./file0 [ 950.717932][T31745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10619'. [ 950.737156][T31721] vxlan0: left promiscuous mode [ 950.777341][ T13] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.790767][ T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.831492][ T13] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 950.850676][ T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.866340][ T5821] Bluetooth: hci0: command tx timeout [ 951.200708][ T13] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.257402][ T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.301053][ T13] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 951.329299][ T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.505818][T15770] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 951.693344][T15770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 951.737589][T15770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 951.774607][T15770] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 951.774695][T31778] loop5: detected capacity change from 0 to 7 [ 951.802011][T31778] Dev loop5: unable to read RDB block 7 [ 951.824143][T31778] loop5: unable to read partition table [ 951.830268][T31778] loop5: partition table beyond EOD, truncated [ 951.848369][T31778] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 951.848398][T15770] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 951.884331][T15770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.934922][T15770] usb 6-1: config 0 descriptor?? [ 952.019652][ T13] bridge_slave_1: left allmulticast mode [ 952.043738][ T13] bridge_slave_1: left promiscuous mode [ 952.068607][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.149153][ T13] bridge_slave_0: left allmulticast mode [ 952.164183][ T13] bridge_slave_0: left promiscuous mode [ 952.195045][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.470416][T15770] plantronics 0003:047F:FFFF.00A1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 952.665840][T31801] Invalid argument reading file caps for ./file0 [ 952.893032][ T13] bond2 (unregistering): (slave gretap1): Releasing active interface [ 952.926691][ T13] bond1 (unregistering): (slave geneve2): Releasing active interface [ 952.945109][ T5821] Bluetooth: hci0: command tx timeout [ 953.048303][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 953.073160][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.100102][ T13] bond0 (unregistering): Released all slaves [ 953.113166][ T13] bond1 (unregistering): Released all slaves [ 953.128837][ T13] bond2 (unregistering): Released all slaves [ 953.145076][ T13] bond3 (unregistering): (slave batadv1): Releasing active interface [ 953.163458][ T13] bond3 (unregistering): Released all slaves [ 953.279104][T31809] veth3: entered allmulticast mode [ 953.326611][T31814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10644'. [ 953.704522][ C1] plantronics 0003:047F:FFFF.00A1: usb_submit_urb(ctrl) failed: -1 [ 954.082681][ T13] hsr_slave_0: left promiscuous mode [ 954.121280][ T13] hsr_slave_1: left promiscuous mode [ 954.133996][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.146917][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.155760][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.168991][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.234150][T15770] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 954.249108][ T13] veth1_vlan: left promiscuous mode [ 954.282486][ T13] veth0_vlan: left promiscuous mode [ 954.407511][T15770] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 954.419832][T15770] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 954.433049][T15770] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 954.448795][T15770] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 954.460155][T15770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.469570][T15770] usb 2-1: Product: syz [ 954.473820][T15770] usb 2-1: Manufacturer: syz [ 954.479839][T21869] usb 6-1: USB disconnect, device number 114 [ 954.480434][T15770] usb 2-1: SerialNumber: syz [ 954.494325][T31832] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 954.512363][T15770] cdc_mbim 2-1:1.0: skipping garbage [ 954.524209][T15770] usb 2-1: selecting invalid altsetting 1 [ 954.604799][T21861] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 954.802570][T21861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.838852][T21861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.879851][T21861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 954.918974][T15770] cdc_mbim 2-1:1.0: bind() failure [ 954.941313][T21861] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 954.963044][T21861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.972787][T15770] usb 2-1: USB disconnect, device number 17 [ 954.983954][T21861] usb 5-1: config 0 descriptor?? [ 955.015776][ T5821] Bluetooth: hci0: command tx timeout [ 955.043451][ T13] team0 (unregistering): Port device team_slave_1 removed [ 955.140610][ T13] team0 (unregistering): Port device team_slave_0 removed [ 955.459334][T21861] plantronics 0003:047F:FFFF.00A2: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 955.479316][T31861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10664'. [ 955.734681][T21861] usb 5-1: USB disconnect, device number 27 [ 955.858436][T31870] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10668'. [ 956.887525][ T30] audit: type=1326 audit(1772124811.568:1926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31895 comm="syz.5.10681" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf703ef6c code=0x0 [ 958.064116][T21861] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 958.224294][T21861] usb 6-1: Using ep0 maxpacket: 8 [ 958.241893][T21861] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 958.256173][T21861] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 958.276859][T21861] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 958.296628][T21861] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 958.310502][T21861] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 958.334521][T21861] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 958.343672][T21861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.567858][T21861] usb 6-1: GET_CAPABILITIES returned 0 [ 958.573502][T21861] usbtmc 6-1:16.0: can't read capabilities [ 958.806887][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.816027][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.825117][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.834198][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.843803][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.852903][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.861991][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.871079][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.881733][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.890837][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.899919][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.908996][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.918757][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.927852][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.936936][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.946004][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 958.974268][T21869] usb 6-1: USB disconnect, device number 115 [ 959.231017][T31961] tipc: Started in network mode [ 959.236862][T31961] tipc: Node identity ac14142f, cluster identity 4711 [ 959.243890][T31961] tipc: New replicast peer: 0.0.0.0 [ 959.250254][T31961] tipc: Enabled bearer , priority 10 [ 959.262397][T31961] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001 [ 959.583925][T31974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10713'. [ 959.654355][T15770] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 959.809173][T15770] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 959.840153][T15770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.865749][T15770] usb 5-1: Product: syz [ 959.869953][T15770] usb 5-1: Manufacturer: syz [ 959.882000][T15770] usb 5-1: SerialNumber: syz [ 959.894625][T15770] usb 5-1: config 0 descriptor?? [ 959.911470][T15770] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 960.364137][T21869] tipc: Node number set to 2886997039 [ 960.394596][T32006] gretap1: entered promiscuous mode [ 960.739371][T32019] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10733'. [ 960.743470][T21869] usb 5-1: USB disconnect, device number 28 [ 960.752850][T32019] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10733'. [ 960.846746][T15770] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 961.007618][T15770] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 961.016476][T15770] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.027365][T15770] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 961.036489][T15770] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 961.055430][T15770] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 961.064617][T15770] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 961.072714][T15770] usb 2-1: Product: syz [ 961.078329][T15770] usb 2-1: Manufacturer: syz [ 961.092188][T15770] cdc_wdm 2-1:1.0: skipping garbage [ 961.107320][T15770] cdc_wdm 2-1:1.0: skipping garbage [ 961.124586][T15770] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 961.130561][T15770] cdc_wdm 2-1:1.0: Unknown control protocol [ 961.544356][T21869] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 961.576210][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -EPIPE [ 961.617192][T21867] usb 2-1: USB disconnect, device number 18 [ 961.724142][T21869] usb 6-1: Using ep0 maxpacket: 32 [ 961.741761][T21869] usb 6-1: config 0 has an invalid interface number: 161 but max is 0 [ 961.762070][T21869] usb 6-1: config 0 has no interface number 0 [ 961.774223][T21869] usb 6-1: config 0 interface 161 has no altsetting 0 [ 961.792272][T21869] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 961.811942][T21869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.829527][T21869] usb 6-1: Product: syz [ 961.838259][T21869] usb 6-1: Manufacturer: syz [ 961.843973][T21869] usb 6-1: SerialNumber: syz [ 961.861675][T21869] usb 6-1: config 0 descriptor?? [ 961.878646][T21869] em28xx 6-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 961.897643][T21869] em28xx 6-1:0.161: Video interface 161 found: bulk [ 962.279378][T32052] gretap1: entered promiscuous mode [ 962.296354][T21869] em28xx 6-1:0.161: unknown em28xx chip ID (0) [ 962.423436][T32058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10751'. [ 962.433090][T32058] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10751'. [ 962.792918][T32065] Invalid argument reading file caps for ./file0 [ 962.906805][T21869] em28xx 6-1:0.161: failed to trigger write to i2c address 0xa0 (error=-5) [ 962.916561][T21869] em28xx 6-1:0.161: failed to read eeprom (err=-5) [ 962.927133][T21869] em28xx 6-1:0.161: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 963.004148][T21869] em28xx 6-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 963.012092][T21869] em28xx 6-1:0.161: analog set to bulk mode. [ 963.018253][T21867] em28xx 6-1:0.161: Registering V4L2 extension [ 963.039260][T21869] usb 6-1: USB disconnect, device number 116 [ 963.050015][T21869] em28xx 6-1:0.161: Disconnecting em28xx [ 963.165975][T15770] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 963.201246][T21867] em28xx 6-1:0.161: Config register raw data: 0xffffffed [ 963.208481][T21867] em28xx 6-1:0.161: AC97 chip type couldn't be determined [ 963.230926][T21867] em28xx 6-1:0.161: No AC97 audio processor [ 963.250111][T21867] usb 6-1: Decoder not found [ 963.257851][T21867] em28xx 6-1:0.161: failed to create media graph [ 963.269550][T21867] em28xx 6-1:0.161: V4L2 device video103 deregistered [ 963.286396][T21867] em28xx 6-1:0.161: Remote control support is not available for this card. [ 963.299820][T21869] em28xx 6-1:0.161: Closing input extension [ 963.311881][T21869] em28xx 6-1:0.161: Freeing device [ 963.337605][T15770] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 963.354783][T15770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.390478][T15770] usb 5-1: config 0 descriptor?? [ 963.409124][T15770] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 963.803381][T15770] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 963.837832][T32099] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10767'. [ 963.854179][T32099] netlink: 'syz.7.10767': attribute type 6 has an invalid length. [ 963.862217][T32099] netlink: 'syz.7.10767': attribute type 5 has an invalid length. [ 963.870873][T32099] netlink: 'syz.7.10767': attribute type 4 has an invalid length. [ 964.418249][T15770] gspca_cpia1: usb_control_msg 05, error -71 [ 964.434636][T15770] cpia1 5-1:0.0: unexpected systemstate: 00 [ 964.470330][T15770] usb 5-1: USB disconnect, device number 29 [ 965.183344][T32132] ip6tnl1: entered allmulticast mode [ 966.184105][T15770] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 966.344594][T15770] usb 2-1: Using ep0 maxpacket: 32 [ 966.378761][ T5876] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 966.386819][T15770] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 966.404224][T15770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 966.416610][T15770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 966.426942][T15770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 966.438421][T15770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 966.452188][T15770] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 966.469545][T15770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.481145][T15770] usb 2-1: Product: syz [ 966.486151][T15770] usb 2-1: Manufacturer: syz [ 966.490857][T15770] usb 2-1: SerialNumber: syz [ 966.499517][T15770] usb 2-1: config 0 descriptor?? [ 966.568050][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.588193][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.600434][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 966.617674][ T5876] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 966.627979][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.669210][ T5876] usb 6-1: config 0 descriptor?? [ 966.918245][T15770] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 966.924816][T15770] input input182: Device does not respond to id packet M [ 966.933061][T15770] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 966.942063][T15770] input input182: Device does not respond to id packet P [ 966.950705][T15770] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 966.960092][T15770] input input182: Device does not respond to id packet B [ 967.121269][ T5876] plantronics 0003:047F:FFFF.00A3: reserved main item tag 0xd [ 967.152776][ T5876] plantronics 0003:047F:FFFF.00A3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 967.192026][T15770] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 967.210298][T15770] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 967.224795][T15770] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 967.231205][T15770] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 967.243931][T15770] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input182 [ 967.291287][T15770] usb 2-1: USB disconnect, device number 19 [ 967.388068][T32186] syzkaller1: entered promiscuous mode [ 967.393574][T32186] syzkaller1: entered allmulticast mode [ 967.470154][ T5876] usb 6-1: USB disconnect, device number 117 [ 967.994199][ T5876] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 968.174223][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 968.206196][ T5876] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 968.216251][ T5876] usb 5-1: config 1 has no interface number 0 [ 968.222374][ T5876] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 968.232815][ T5876] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 968.249356][ T5876] usb 5-1: config 1 interface 105 has no altsetting 0 [ 968.258782][ T5876] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 968.268644][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 968.301542][ T5876] usb 5-1: Product: syz [ 968.308226][ T5876] usb 5-1: Manufacturer: syz [ 968.314791][ T5876] usb 5-1: SerialNumber: syz [ 968.340117][T32195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 968.364777][T32195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 968.743115][T32218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10816'. [ 968.757987][T32218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10816'. [ 968.871012][T32195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 968.878738][T32195] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 968.941218][T32223] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 969.277100][T32231] delete_channel: no stack [ 969.315353][ T5876] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 969.396731][ T30] audit: type=1326 audit(1772124824.078:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32237 comm="syz.1.10826" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc2f6c code=0x0 [ 969.538968][ T5876] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 969.555398][T21867] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 969.579325][ T5876] aqc111 5-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 3e:cf:98:ab:0f:9a [ 969.612251][ T5876] usb 5-1: USB disconnect, device number 30 [ 969.632507][ T5876] aqc111 5-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 969.676420][ T5876] aqc111 5-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 969.688031][ T5876] aqc111 5-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 969.704421][ T5876] aqc111 5-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 969.716508][T21867] usb 6-1: Using ep0 maxpacket: 8 [ 969.739015][T21867] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 969.754138][T21867] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 969.763949][T21867] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 969.786376][T21867] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 969.804869][T21867] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.834657][T21867] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 969.843692][T21867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.088450][T21867] usb 6-1: usb_control_msg returned -32 [ 970.094230][T21867] usbtmc 6-1:16.0: can't read capabilities [ 970.680546][T21871] usb 6-1: USB disconnect, device number 118 [ 970.704306][T21867] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 970.874459][T21867] usb 5-1: Using ep0 maxpacket: 16 [ 970.881672][T21867] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.898722][T21867] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 970.921664][T21867] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 970.931946][T21867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.944232][T21867] usb 5-1: Product: syz [ 970.962589][T21867] usb 5-1: Manufacturer: syz [ 970.967357][T21867] usb 5-1: SerialNumber: syz [ 971.194301][T21867] usb 5-1: 0:2 : does not exist [ 971.211383][T21867] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 971.327077][T32274] syzkaller1: entered promiscuous mode [ 971.332953][T32274] syzkaller1: entered allmulticast mode [ 971.344153][T21867] usb 5-1: USB disconnect, device number 31 [ 971.417056][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.488063][T32279] kvm: vcpu 1027: requested lapic timer restore with starting count register 0x390=3759311525 (7518623050 ns) > initial count (6372733808 ns). Using initial count to start timer. [ 971.600189][T32283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10845'. [ 971.627004][T32283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10845'. [ 971.638935][T32283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10845'. [ 971.874466][T21867] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 972.036372][T21867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.047431][T21867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.058845][T21867] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 972.068023][T21867] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 972.076083][T21867] usb 6-1: Manufacturer: syz [ 972.082836][T21867] usb 6-1: config 0 descriptor?? [ 972.963186][T21867] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00A4/input/input184 [ 973.039457][T21867] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00A4/input/input185 [ 973.057771][T21867] input: syz Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00A4/input/input186 [ 973.077362][T21867] input: syz Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.00A4/input/input187 [ 973.101200][T21867] uclogic 0003:256C:006D.00A4: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 973.330780][T21867] usb 6-1: USB disconnect, device number 119 [ 973.396800][T32308] fido_id[32308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 973.695620][T32316] netlink: 'syz.1.10859': attribute type 8 has an invalid length. [ 973.704699][T32316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10859'. [ 973.720451][T32316] bond0: entered promiscuous mode [ 973.726871][T32316] bond_slave_0: entered promiscuous mode [ 973.732730][T32316] bond_slave_1: entered promiscuous mode [ 973.741307][T32316] gretap0: entered promiscuous mode [ 973.749317][T32316] veth1_to_hsr: entered promiscuous mode [ 973.756542][T32316] hsr1: entered promiscuous mode [ 973.906534][T32319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10860'. [ 974.166840][T32329] binder: 32328:32329 ioctl c0306201 800003c0 returned -14 [ 974.570965][ T30] audit: type=1326 audit(1772124829.248:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32337 comm="syz.4.10868" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf709ef6c code=0x0 [ 974.829410][T32351] binder: 32350:32351 ioctl 4018620d 0 returned -22 [ 974.931008][T32356] binder: 32350:32356 ioctl c0306201 0 returned -14 [ 975.214175][T32368] loop8: detected capacity change from 0 to 8 [ 975.221086][T32368] Dev loop8: unable to read RDB block 8 [ 975.227192][T32368] loop8: unable to read partition table [ 975.232990][T32368] loop8: partition table beyond EOD, truncated [ 975.240009][T32368] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 975.764389][ T5876] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 975.914102][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 975.938716][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.966975][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.994120][ T5876] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 976.003194][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.030607][ T5876] usb 6-1: config 0 descriptor?? [ 976.470919][T32412] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.10900'. [ 976.490956][ T5876] hid_parser_main: 76 callbacks suppressed [ 976.490979][ T5876] ft260 0003:0403:6030.00A5: unknown main item tag 0x0 [ 976.687095][ T5876] ft260 0003:0403:6030.00A5: chip code: 6424 8183 [ 976.821223][T32421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10901'. [ 976.834960][T32421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10901'. [ 976.886253][T32421] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10901'. [ 976.887684][ T5876] ft260 0003:0403:6030.00A5: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 977.300195][ T5876] ft260 0003:0403:6030.00A5: failed to retrieve status: -71 [ 977.308922][ T5876] ft260 0003:0403:6030.00A5: failed to reset I2C controller: -71 [ 977.344393][ T5876] usb 6-1: USB disconnect, device number 120 [ 978.638651][T15770] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 978.798045][T15770] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.808667][T15770] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 978.819505][T15770] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 978.831078][T15770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 978.855496][T15770] usb 5-1: SerialNumber: syz [ 979.107076][T15770] usb 5-1: 0:2 : does not exist [ 979.158934][T15770] usb 5-1: USB disconnect, device number 32 [ 979.233203][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.316617][T32504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10941'. [ 979.966159][T32522] netlink: 'syz.4.10949': attribute type 4 has an invalid length. [ 980.002226][T32522] netlink: 'syz.4.10949': attribute type 4 has an invalid length. [ 980.162937][T32528] input: syz1 as /devices/virtual/input/input189 [ 981.412639][T32564] input: syz1 as /devices/virtual/input/input190 [ 981.458056][T32564] input: failed to attach handler leds to device input190, error: -6 [ 981.925361][T32580] syzkaller1: entered promiscuous mode [ 981.930873][T32580] syzkaller1: entered allmulticast mode [ 982.094457][T21871] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 982.294201][T21871] usb 2-1: Using ep0 maxpacket: 8 [ 982.305315][T21871] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 982.313456][T21871] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 982.357695][T21871] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 982.378193][T21871] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 982.399753][T21871] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 982.430100][T21871] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 982.468673][T21871] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 982.497535][T15770] hid-generic 0000:0000:0000.00A6: unknown main item tag 0x0 [ 982.526922][T15770] hid-generic 0000:0000:0000.00A6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 982.553893][T21871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.793795][T21871] usb 2-1: usb_control_msg returned -32 [ 982.833597][T21871] usbtmc 2-1:16.0: can't read capabilities [ 983.177116][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 983.191760][T32614] usbtmc 2-1:16.0: Unable to send data, error -71 [ 983.200370][T32614] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 983.211308][T21859] usb 2-1: USB disconnect, device number 20 [ 983.924310][T21859] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 984.134272][T21859] usb 5-1: Using ep0 maxpacket: 8 [ 984.157951][T21859] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 984.184147][T21859] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 984.203548][T21859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.229030][T21859] usb 5-1: config 0 descriptor?? [ 984.492146][T21859] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 984.496945][T32645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11000'. [ 984.531160][T32645] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11000'. [ 984.604737][ T5876] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 984.865131][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 984.872587][ T5876] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 984.880991][ T5876] usb 6-1: config 0 has no interface number 0 [ 984.887481][ T5876] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 984.900733][ T5876] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 984.910131][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.919419][ T5876] usb 6-1: Product: syz [ 984.923825][ T5876] usb 6-1: Manufacturer: syz [ 984.928562][ T5876] usb 6-1: SerialNumber: syz [ 984.940689][ T5876] usb 6-1: config 0 descriptor?? [ 985.026219][T21859] usb 5-1: USB disconnect, device number 33 [ 985.570089][ T5876] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 985.620324][ T5876] usb 6-1: USB disconnect, device number 121 [ 986.654950][T32714] pim6reg1: entered promiscuous mode [ 986.660311][T32714] pim6reg1: entered allmulticast mode [ 986.754171][T21867] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 986.865964][T32723] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11033'. [ 986.879596][T32723] vxlan0: entered promiscuous mode [ 986.888487][T25980] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.897895][T25980] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.906807][T25980] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.915644][T25980] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 986.917257][T21867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.935540][T21867] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.945376][T21867] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 986.955309][T21867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.966110][T21867] usb 6-1: config 0 descriptor?? [ 987.380467][T21867] keytouch 0003:0926:3333.00A7: fixing up Keytouch IEC report descriptor [ 987.391877][T21867] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.00A7/input/input192 [ 987.480851][T21867] keytouch 0003:0926:3333.00A7: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 987.633450][T32707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.647949][T32707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.667796][ T5876] usb 6-1: USB disconnect, device number 122 [ 987.835392][ T30] audit: type=1326 audit(1772124842.498:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32734 comm="syz.1.11038" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc2f6c code=0x0 [ 988.041555][T32742] netlink: 'syz.4.11041': attribute type 13 has an invalid length. [ 988.565981][T32763] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.11051'. [ 988.744259][T21867] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 988.914109][T21867] usb 5-1: Using ep0 maxpacket: 8 [ 988.921154][T21867] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 988.932353][T21867] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 988.944883][T21867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 988.954928][T21867] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 988.965255][T21867] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 988.981676][T21867] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 988.992189][T21867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.048281][ T309] netlink: 392 bytes leftover after parsing attributes in process `syz.7.11057'. [ 989.235268][T21867] usb 5-1: usb_control_msg returned -32 [ 989.251158][T21867] usbtmc 5-1:16.0: can't read capabilities [ 989.836333][T21859] usb 5-1: USB disconnect, device number 34 [ 989.893148][ T330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11067'. [ 989.948589][ T332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11067'. [ 989.995817][ T330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11067'. [ 990.229433][ T336] ALSA: seq fatal error: cannot create timer (-16) [ 991.065499][ T357] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 991.564420][T21867] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 991.734749][T21867] usb 6-1: Using ep0 maxpacket: 8 [ 991.743279][T21867] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 991.753731][T21867] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 991.766699][T21867] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 991.776532][T21867] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 991.787053][T21867] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.800162][T21867] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 991.809492][T21867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.029238][T21867] usb 6-1: usb_control_msg returned -32 [ 992.036178][T21867] usbtmc 6-1:16.0: can't read capabilities [ 992.144476][ T406] veth0_vlan: entered allmulticast mode [ 992.152553][ T406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11101'. [ 992.162557][ T408] netlink: 'syz.1.11102': attribute type 1 has an invalid length. [ 992.290428][ T408] 8021q: adding VLAN 0 to HW filter on device bond3 [ 992.324880][ T410] bond3: (slave geneve2): making interface the new active one [ 992.338753][ T410] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 992.347730][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.362115][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.372900][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.382517][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.749428][ T420] usbtmc 6-1:16.0: usb_clear_halt returned -32 [ 992.867982][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.868103][T21867] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 992.876334][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.950543][T21871] usb 6-1: USB disconnect, device number 123 [ 993.044549][T21867] usb 5-1: Using ep0 maxpacket: 8 [ 993.053142][T21867] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 993.062378][T21867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.070495][T21867] usb 5-1: Product: syz [ 993.075159][T21867] usb 5-1: Manufacturer: syz [ 993.079891][T21867] usb 5-1: SerialNumber: syz [ 993.087518][T21867] usb 5-1: config 0 descriptor?? [ 993.308890][T21867] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 993.315809][T21867] gspca_sunplus: reg_w_riv err -71 [ 993.321117][T21867] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 993.331710][T21867] usb 5-1: USB disconnect, device number 35 [ 994.324387][T15770] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 994.484275][T15770] usb 5-1: Using ep0 maxpacket: 16 [ 994.491042][T15770] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.502224][T15770] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 994.511504][T15770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.528035][T15770] usb 5-1: config 0 descriptor?? [ 994.969980][T15770] mcp2221 0003:04D8:00DD.00A8: unknown main item tag 0x0 [ 994.982816][T15770] mcp2221 0003:04D8:00DD.00A8: unknown main item tag 0x0 [ 994.990807][T15770] mcp2221 0003:04D8:00DD.00A8: unknown main item tag 0x0 [ 995.000070][T15770] mcp2221 0003:04D8:00DD.00A8: unknown main item tag 0x0 [ 995.011121][T15770] mcp2221 0003:04D8:00DD.00A8: unknown main item tag 0x0 [ 995.023917][T15770] mcp2221 0003:04D8:00DD.00A8: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 995.188394][ T5876] usb 5-1: USB disconnect, device number 36 [ 995.947031][ T480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11130'. [ 996.002610][ T480] gtp0: entered promiscuous mode [ 996.008104][ T480] gtp0: entered allmulticast mode [ 996.039912][ T485] netlink: 'syz.1.11132': attribute type 1 has an invalid length. [ 996.089269][ T489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11133'. [ 996.096857][ T485] 8021q: adding VLAN 0 to HW filter on device bond4 [ 996.252759][ T492] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 996.265140][ T492] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 996.634259][T21867] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 996.704592][T21871] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 996.804215][T21867] usb 6-1: Using ep0 maxpacket: 32 [ 996.817587][T21867] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 996.834327][T21867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.847302][T21867] usb 6-1: config 0 descriptor?? [ 996.908243][T21871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.922600][T21871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.934607][T21871] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 996.945309][T21871] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 996.953369][T21871] usb 2-1: Manufacturer: syz [ 996.961479][T21871] usb 2-1: config 0 descriptor?? [ 996.975311][ T519] veth2: entered promiscuous mode [ 996.981496][ T519] veth2: entered allmulticast mode [ 997.059020][T21867] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 997.069124][T21867] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 997.084464][T21867] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 997.092225][T21867] usb 6-1: media controller created [ 997.106855][T21867] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 997.294282][ T5876] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 997.444095][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 997.450879][ T5876] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 997.459771][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 997.469960][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 997.481436][ T5876] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 997.490542][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.498634][ T5876] usb 5-1: Product: syz [ 997.502803][ T5876] usb 5-1: Manufacturer: syz [ 997.507434][ T5876] usb 5-1: SerialNumber: syz [ 997.781836][T21871] uclogic 0003:256C:006D.00A9: interface is invalid, ignoring [ 997.860815][ T527] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11148'. [ 997.872320][ T527] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11148'. [ 997.909898][ T30] audit: type=1800 audit(1772124852.588:1930): pid=532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.11150" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 997.931228][ T5876] usb 5-1: 0:2 : does not exist [ 998.013125][T21869] usb 2-1: USB disconnect, device number 21 [ 998.094094][T21867] stb0899_attach: Driver disabled by Kconfig [ 998.100145][T21867] az6027: no front-end attached [ 998.100145][T21867] [ 998.108818][T21867] az6027: usb out operation failed. (-71) [ 998.121638][T21867] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 998.141668][T21867] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input193 [ 998.175296][T21867] dvb-usb: schedule remote query interval to 400 msecs. [ 998.185129][T21867] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 998.221413][T21867] usb 6-1: USB disconnect, device number 124 [ 998.283958][T21867] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 998.687054][T15770] hid-generic 0000:0000:0000.00AA: unknown main item tag 0x0 [ 998.714693][T15770] hid-generic 0000:0000:0000.00AA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 998.717915][ T558] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11161'. [ 998.757834][ T5876] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 998.815721][ T561] netlink: 'syz.1.11162': attribute type 3 has an invalid length. [ 998.823752][ T561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11162'. [ 998.864790][ T5876] usb 5-1: USB disconnect, device number 37 [ 998.932475][ T5817] udevd[5817]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 998.934229][T21867] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 999.116447][T21867] usb 6-1: config 0 has no interfaces? [ 999.124006][T21867] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 999.141198][T21867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 999.149646][T21867] usb 6-1: SerialNumber: syz [ 999.156705][ T570] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 999.158496][T21867] usb 6-1: config 0 descriptor?? [ 999.282864][ T30] audit: type=1326 audit(1772124853.958:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=574 comm="syz.1.11168" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc2f6c code=0x0 [ 1000.287979][ T585] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1000.295262][ T585] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1000.308113][ T585] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1000.564281][T21867] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1000.735897][T21867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1000.747528][T21867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1000.757389][T21867] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1000.770231][T21867] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1000.779457][T21867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.790424][T21867] usb 5-1: config 0 descriptor?? [ 1000.864220][ T5876] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1001.014196][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 1001.027261][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.039640][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.051513][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1001.065690][ T5876] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1001.074866][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.085372][ T5876] usb 2-1: config 0 descriptor?? [ 1001.222057][T21867] hid-multitouch 0003:0457:07DA.00AB: unknown main item tag 0x0 [ 1001.232802][T21867] hid-multitouch 0003:0457:07DA.00AB: unknown main item tag 0x0 [ 1001.242198][T21867] hid-multitouch 0003:0457:07DA.00AB: unknown main item tag 0x0 [ 1001.249992][T21867] hid-multitouch 0003:0457:07DA.00AB: unknown main item tag 0x0 [ 1001.259242][T21867] hid-multitouch 0003:0457:07DA.00AB: unknown main item tag 0x0 [ 1001.498223][ T5876] microsoft 0003:045E:07DA.00AC: unknown main item tag 0x0 [ 1001.507870][ T5876] microsoft 0003:045E:07DA.00AC: ignoring exceeding usage max [ 1001.523231][ T5876] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.00AC/input/input194 [ 1001.584162][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout [ 1001.683266][T21867] hid-multitouch 0003:0457:07DA.00AB: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 1001.708364][T21867] usb 5-1: USB disconnect, device number 38 [ 1001.709724][ T5876] microsoft 0003:045E:07DA.00AC: input,hidraw2: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1001.749419][T15768] usb 6-1: USB disconnect, device number 125 [ 1001.800143][ T5876] usb 2-1: USB disconnect, device number 22 [ 1001.882804][ T620] fido_id[620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1001.892274][ T621] fido_id[621]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1002.245400][T21867] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1002.338517][ T641] netlink: 27 bytes leftover after parsing attributes in process `syz.7.11194'. [ 1002.425890][T21867] usb 6-1: Using ep0 maxpacket: 8 [ 1002.433893][T21867] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1002.445833][T21867] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1002.457097][T21867] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1002.467318][T21867] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1002.480978][T21867] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1002.493557][T21867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.731392][T21867] usb 6-1: GET_CAPABILITIES returned 0 [ 1002.757798][T21867] usbtmc 6-1:16.0: can't read capabilities [ 1002.959002][T21867] usb 6-1: USB disconnect, device number 126 [ 1003.664423][ T5821] Bluetooth: hci0: command 0x0c1a tx timeout [ 1003.732333][T22681] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1003.742857][T22681] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1003.751264][T22681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1003.759216][T22681] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1003.767873][T22681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1004.270090][ T677] chnl_net:caif_netlink_parms(): no params data found [ 1004.293357][ T690] netlink: 'syz.6.11216': attribute type 8 has an invalid length. [ 1004.304708][ T690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11216'. [ 1004.325552][ T690] bond0: entered promiscuous mode [ 1004.332129][ T690] bond_slave_0: entered promiscuous mode [ 1004.339425][ T690] bond_slave_1: entered promiscuous mode [ 1004.348169][ T690] bond0: left promiscuous mode [ 1004.352990][ T690] bond_slave_0: left promiscuous mode [ 1004.359755][ T690] bond_slave_1: left promiscuous mode [ 1004.465968][ T677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.473179][ T677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.480670][ T677] bridge_slave_0: entered allmulticast mode [ 1004.488980][ T677] bridge_slave_0: entered promiscuous mode [ 1004.497999][ T677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.506090][ T677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.513514][ T677] bridge_slave_1: entered allmulticast mode [ 1004.521824][ T677] bridge_slave_1: entered promiscuous mode [ 1004.562619][ T677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.576024][ T677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.618193][ T677] team0: Port device team_slave_0 added [ 1004.630966][ T677] team0: Port device team_slave_1 added [ 1004.662392][ T677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.670082][ T677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.717465][ T677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.746589][ T677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.755009][ T677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1004.789511][ T677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1004.849443][ T677] hsr_slave_0: entered promiscuous mode [ 1004.856211][ T677] hsr_slave_1: entered promiscuous mode [ 1004.866559][ T677] debugfs: 'hsr0' already exists in 'hsr' [ 1004.872336][ T677] Cannot create hsr debugfs directory [ 1005.263345][ T677] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1005.317032][ T677] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1005.340034][ T677] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1005.351600][ T677] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1005.478815][ T677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1005.497479][ T677] 8021q: adding VLAN 0 to HW filter on device team0 [ 1005.510820][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.517995][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1005.544532][T15762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.551710][T15762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1005.565897][T15768] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1005.708213][ T677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.737749][T22681] Bluetooth: hci0: command 0x0c1a tx timeout [ 1005.747939][T15768] usb 5-1: Using ep0 maxpacket: 32 [ 1005.748114][ T677] veth0_vlan: entered promiscuous mode [ 1005.769873][ T677] veth1_vlan: entered promiscuous mode [ 1005.777584][T15768] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.798446][T15768] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1005.816129][T22681] Bluetooth: hci1: command tx timeout [ 1005.825859][ T677] veth0_macvtap: entered promiscuous mode [ 1005.836543][T15768] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1005.838032][ T677] veth1_macvtap: entered promiscuous mode [ 1005.848560][T15768] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1005.871607][T15768] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1005.881538][T15768] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.889637][T15768] usb 5-1: Product: syz [ 1005.893914][T15768] usb 5-1: Manufacturer: syz [ 1005.899006][T15768] usb 5-1: SerialNumber: syz [ 1005.914272][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1005.922315][ T677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1005.926503][T15768] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input195 [ 1005.937520][ T677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1005.960715][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.969793][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.980519][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.989466][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.101025][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.111461][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.134290][T21861] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1006.144922][T15768] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1006.153748][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.162599][T15768] (id 0x00) [ 1006.164115][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.234098][T15768] rc_core: IR keymap rc-imon-pad not found [ 1006.242205][T15768] Registered IR keymap rc-empty [ 1006.255315][T15768] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1006.271274][T15768] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1006.281439][ T725] syzkaller1: entered promiscuous mode [ 1006.286975][ T725] syzkaller1: entered allmulticast mode [ 1006.322796][T21861] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1006.332164][T21861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.341737][T21861] usb 6-1: Product: syz [ 1006.346182][T21861] usb 6-1: Manufacturer: syz [ 1006.350788][T21861] usb 6-1: SerialNumber: syz [ 1006.357533][T15768] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 1006.373546][T21861] usb 6-1: config 0 descriptor?? [ 1006.379033][T15768] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input196 [ 1006.393469][T21861] ch341 6-1:0.0: ch341-uart converter detected [ 1006.402686][T15768] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:39> initialized [ 1006.649713][ T726] imon:vfd_write: invalid payload size [ 1006.996376][T21861] usb 6-1: failed to send control message: -71 [ 1007.007597][T21861] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1007.029000][T21861] usb 6-1: USB disconnect, device number 127 [ 1007.047800][T21861] ch341 6-1:0.0: device disconnected [ 1007.657984][ T733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11229'. [ 1007.671188][ T733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11229'. [ 1007.682825][ T733] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11229'. [ 1007.692101][ T733] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11229'. [ 1007.864282][T21868] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1007.896818][T22681] Bluetooth: hci1: command tx timeout [ 1008.014088][T21868] usb 6-1: Using ep0 maxpacket: 16 [ 1008.014129][T21861] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1008.025673][T21868] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.037169][T21868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1008.048169][T21868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1008.058616][T21868] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1008.068490][T21868] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1008.083245][T21868] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1008.092742][T21868] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1008.100996][T21868] usb 6-1: Manufacturer: syz [ 1008.108481][T21868] usb 6-1: config 0 descriptor?? [ 1008.185201][T21861] usb 9-1: Using ep0 maxpacket: 8 [ 1008.192117][T21861] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1008.202108][T21861] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1008.212905][T21861] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1008.234162][T21861] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1008.247304][T21861] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1008.256544][T21861] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.339584][T21871] usb 5-1: USB disconnect, device number 39 [ 1008.394272][T21868] rc_core: IR keymap rc-hauppauge not found [ 1008.417405][T21868] Registered IR keymap rc-empty [ 1008.435611][T21868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1008.464947][T21868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1008.480318][T21861] usb 9-1: GET_CAPABILITIES returned 0 [ 1008.485858][T21861] usbtmc 9-1:16.0: can't read capabilities [ 1008.497415][T21868] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1 [ 1008.542724][T21868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input197 [ 1008.584304][T21868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1008.644310][T21868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1008.664429][T21868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1008.693394][T21868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1008.717751][T21871] usb 9-1: USB disconnect, device number 2 [ 1008.730962][T21868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1008.764813][T21868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1008.795051][ T746] ip6gre2: entered promiscuous mode [ 1008.801709][ T746] ip6gre2: entered allmulticast mode [ 1008.806362][T21868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1008.834257][T21868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1008.895290][T21868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1008.914683][T21868] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1008.954916][T21868] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1008.984794][T21868] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1009.436807][T21869] usb 6-1: USB disconnect, device number 2 [ 1009.505872][ T775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11247'. [ 1009.974478][T22681] Bluetooth: hci1: command tx timeout [ 1011.424123][T21871] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1011.534126][T15768] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1011.584123][T21871] usb 5-1: Using ep0 maxpacket: 8 [ 1011.592764][T21871] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1011.602809][T21871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.610970][T21871] usb 5-1: Product: syz [ 1011.615389][T21871] usb 5-1: Manufacturer: syz [ 1011.619970][T21871] usb 5-1: SerialNumber: syz [ 1011.626724][T21871] usb 5-1: config 0 descriptor?? [ 1011.685554][T15768] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1011.696546][T15768] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1011.706436][T15768] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1011.719450][T15768] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1011.728737][T15768] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.737261][T15768] usb 9-1: Product: syz [ 1011.741427][T15768] usb 9-1: Manufacturer: syz [ 1011.746135][T15768] usb 9-1: SerialNumber: syz [ 1011.752939][T15768] usb 9-1: config 0 descriptor?? [ 1011.968480][T15768] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1012.046866][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 1012.054249][T22681] Bluetooth: hci1: command tx timeout [ 1012.058328][T21871] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1012.101693][T21871] gspca_sunplus: reg_w_riv err -71 [ 1012.117645][T21871] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1012.153331][T21871] usb 5-1: USB disconnect, device number 40 [ 1012.272524][T15768] usb 9-1: USB disconnect, device number 3 [ 1012.422958][ T869] vivid-000: disconnect [ 1012.484492][ T5876] vivid-000: reconnect [ 1013.194123][ T902] input: syz0 as /devices/virtual/input/input198 [ 1013.241612][ T904] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1013.334263][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1013.383780][ T912] netlink: 208240 bytes leftover after parsing attributes in process `syz.7.11302'. [ 1014.683930][ T981] input: syz0 as /devices/virtual/input/input199 [ 1015.095519][T21862] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1015.255125][T22681] Bluetooth: hci0: command 0x0c1a tx timeout [ 1015.265650][T15768] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1015.277780][T15768] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1015.286809][T21862] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1015.316453][T21862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.377890][T21862] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.428483][T21862] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1015.474204][T21862] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1015.493930][T21862] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1015.504088][T21862] usb 6-1: Manufacturer: syz [ 1015.525248][T21862] usb 6-1: config 0 descriptor?? [ 1015.805532][ T1019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11341'. [ 1015.914166][T15770] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1015.948884][T21862] appleir 0003:05AC:8243.00AD: unknown main item tag 0x0 [ 1015.961303][T21862] appleir 0003:05AC:8243.00AD: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1016.069022][T15770] usb 9-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1016.078455][T15770] usb 9-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1016.096449][T15770] usb 9-1: Product: syz [ 1016.113559][T15770] usb 9-1: Manufacturer: syz [ 1016.134046][T15770] usb 9-1: SerialNumber: syz [ 1016.159237][T15770] usb 9-1: config 0 descriptor?? [ 1016.172904][T15770] ch341 9-1:0.0: ch341-uart converter detected [ 1016.459015][T21871] usb 6-1: USB disconnect, device number 3 [ 1017.045739][T21862] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1017.203227][T15770] ch341-uart ttyUSB0: break control not supported, using simulated break [ 1017.220715][T15770] usb 9-1: ch341-uart converter now attached to ttyUSB0 [ 1017.232450][T21862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.250318][T15770] usb 9-1: USB disconnect, device number 4 [ 1017.257026][T21862] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1017.270372][T21862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.278827][T15770] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 1017.288822][T15770] ch341 9-1:0.0: device disconnected [ 1017.307427][T21862] usb 5-1: config 0 descriptor?? [ 1017.348841][T21862] pwc: Askey VC010 type 2 USB webcam detected. [ 1017.494133][T15768] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1017.494377][T22681] Bluetooth: hci1: command 0x0c1a tx timeout [ 1017.500488][T15768] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1017.767405][T21862] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1017.797600][T21862] pwc: recv_control_msg error -32 req 02 val 2700 [ 1017.860079][T21862] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1018.084577][T21862] pwc: recv_control_msg error -71 req 04 val 1300 [ 1018.103122][T21862] pwc: recv_control_msg error -71 req 04 val 1400 [ 1018.119010][T21862] pwc: recv_control_msg error -71 req 02 val 2000 [ 1018.132652][T21862] pwc: recv_control_msg error -71 req 02 val 2100 [ 1018.156112][T21862] pwc: recv_control_msg error -71 req 04 val 1500 [ 1018.183544][T21862] pwc: recv_control_msg error -71 req 02 val 2500 [ 1018.201238][T21862] pwc: recv_control_msg error -71 req 02 val 2400 [ 1018.211224][T21862] pwc: recv_control_msg error -71 req 02 val 2600 [ 1018.221042][T21862] pwc: recv_control_msg error -71 req 02 val 2900 [ 1018.233340][T21862] pwc: recv_control_msg error -71 req 02 val 2800 [ 1018.245062][T21862] pwc: recv_control_msg error -71 req 04 val 1100 [ 1018.273309][T21862] pwc: recv_control_msg error -71 req 04 val 1200 [ 1018.286916][T21862] pwc: Registered as video103. [ 1018.308359][T21862] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input200 [ 1018.341058][T21862] usb 5-1: USB disconnect, device number 41 [ 1018.774460][ T5876] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1018.954154][ T5876] usb 9-1: Using ep0 maxpacket: 16 [ 1018.971671][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.983209][ T5876] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1019.004334][ T5876] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1019.038879][ T5876] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1019.063561][ T5876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.086094][ T5876] usb 9-1: config 0 descriptor?? [ 1019.513209][ T5876] HID 045e:07da: Invalid code 65791 type 1 [ 1019.540860][ T5876] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.00AE/input/input201 [ 1019.586407][ T5876] microsoft 0003:045E:07DA.00AE: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1019.802418][ T5876] usb 9-1: USB disconnect, device number 5 [ 1020.141154][ T1160] syz_tun: entered allmulticast mode [ 1020.169087][ T1159] syz_tun: left allmulticast mode [ 1020.474112][ T5876] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1020.529328][ T1175] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1020.654325][ T5876] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1020.662962][ T5876] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1020.699956][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1020.716949][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1020.729910][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1020.764903][ T5876] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1020.773982][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1020.797387][ T5876] usb 5-1: Product: syz [ 1020.801575][ T5876] usb 5-1: Manufacturer: syz [ 1020.839895][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 1020.846603][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 1020.860695][ T5876] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1020.870961][ T5876] cdc_wdm 5-1:1.0: Unknown control protocol [ 1021.002097][ T1198] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11409'. [ 1021.112119][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1021.112502][T21869] usb 5-1: USB disconnect, device number 42 [ 1021.118763][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1021.118783][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1021.157880][ T1164] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 1021.444167][ T1211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11412'. [ 1021.492241][ T1211] netlink: 'syz.8.11412': attribute type 1 has an invalid length. [ 1021.513683][ T1211] netlink: 'syz.8.11412': attribute type 2 has an invalid length. [ 1021.802837][ T30] audit: type=1326 audit(1772124876.478:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1225 comm="syz.4.11419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1021.828177][ T30] audit: type=1326 audit(1772124876.478:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1225 comm="syz.4.11419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1021.851737][ T30] audit: type=1326 audit(1772124876.488:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1225 comm="syz.4.11419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1021.875832][ T30] audit: type=1326 audit(1772124876.488:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1225 comm="syz.4.11419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1021.928544][ T30] audit: type=1326 audit(1772124876.488:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1225 comm="syz.4.11419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1021.968463][ T30] audit: type=1326 audit(1772124876.488:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1225 comm="syz.4.11419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1021.993703][T21871] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1022.018475][ T30] audit: type=1326 audit(1772124876.488:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1225 comm="syz.4.11419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1022.052119][ T30] audit: type=1326 audit(1772124876.488:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1225 comm="syz.4.11419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1022.079686][ T30] audit: type=1326 audit(1772124876.488:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1225 comm="syz.4.11419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1022.105091][ T30] audit: type=1326 audit(1772124876.488:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1225 comm="syz.4.11419" exe="/root/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf709ef6c code=0x7ffc0000 [ 1022.187516][T21871] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1022.195739][ T1240] geneve1: Caught tx_queue_len zero misconfig [ 1022.202367][T21871] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1022.244151][T21871] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1022.268492][T21871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1022.290070][T21871] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1022.307755][T21871] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1022.317639][T21871] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1022.327379][T21871] usb 6-1: Product: syz [ 1022.334318][T21871] usb 6-1: Manufacturer: syz [ 1022.379463][T21871] cdc_wdm 6-1:1.0: skipping garbage [ 1022.394237][T21871] cdc_wdm 6-1:1.0: skipping garbage [ 1022.407097][T21871] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1022.415936][ T1250] netlink: 44 bytes leftover after parsing attributes in process `syz.8.11429'. [ 1022.416273][ T1248] netlink: 48 bytes leftover after parsing attributes in process `syz.7.11428'. [ 1022.425964][ T1250] netlink: 43 bytes leftover after parsing attributes in process `syz.8.11429'. [ 1022.445637][T21871] cdc_wdm 6-1:1.0: Unknown control protocol [ 1022.452530][ T1250] netlink: 'syz.8.11429': attribute type 5 has an invalid length. [ 1022.486791][ T1250] netlink: 43 bytes leftover after parsing attributes in process `syz.8.11429'. [ 1022.634829][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1022.641484][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1022.647767][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1022.654368][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1022.660826][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1022.667447][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1022.673758][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1022.680357][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1022.687064][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1022.693676][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1022.701308][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1022.707926][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1022.714663][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1022.721275][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1022.729896][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1022.736505][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1022.742896][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 1022.749501][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 1022.806393][T21869] usb 6-1: USB disconnect, device number 4 [ 1022.806429][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1023.451164][ T1282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11443'. [ 1023.462617][ T1282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11443'. [ 1023.609688][ T1287] kernel read not supported for file /$@ (pid: 1287 comm: syz.4.11445) [ 1024.588251][ T1318] batadv_slave_1: Caught tx_queue_len zero misconfig [ 1025.200869][ T1336] vivid-002: disconnect [ 1025.206683][ T1335] vivid-002: reconnect [ 1025.564106][T21869] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1025.715799][T21869] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.727501][T21869] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.777723][T21869] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1025.833126][T21869] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1025.852179][T21869] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.869902][T21869] usb 9-1: config 0 descriptor?? [ 1026.312663][T21869] plantronics 0003:047F:FFFF.00AF: reserved main item tag 0xd [ 1026.354693][T21869] plantronics 0003:047F:FFFF.00AF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1026.524098][T15768] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1026.575337][T21869] usb 9-1: USB disconnect, device number 6 [ 1026.614261][ T5876] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1026.676047][T15768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.687476][T15768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.704618][T15768] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1026.719028][T15768] usb 5-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1026.728555][T15768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.741740][T15768] usb 5-1: config 0 descriptor?? [ 1026.774442][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 1026.782054][ T5876] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1026.791264][ T5876] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1026.801633][ T5876] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1026.812425][ T5876] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1026.822925][ T5876] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1026.836535][ T5876] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1026.846030][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.069094][ T5876] usb 6-1: GET_CAPABILITIES returned 0 [ 1027.074796][ T5876] usbtmc 6-1:16.0: can't read capabilities [ 1027.171672][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1027.171697][ T30] audit: type=1326 audit(1772124881.848:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1380 comm="syz.7.11486" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe7f6c code=0x0 [ 1027.213039][T15768] hid-udraw 0003:20D6:CB17.00B0: unknown main item tag 0x3 [ 1027.226731][T15768] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.00B0/input/input203 [ 1027.317185][T15768] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.00B0/input/input204 [ 1027.372333][T15768] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.00B0/input/input205 [ 1027.405658][ T1372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1027.450161][ T1372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1027.450377][T15768] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:20D6:CB17.00B0/input/input206 [ 1027.549047][ T5876] usb 6-1: USB disconnect, device number 5 [ 1027.587778][T15768] hid-udraw 0003:20D6:CB17.00B0: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.4-1/input0 [ 1027.630426][T15768] usb 5-1: USB disconnect, device number 43 [ 1027.670518][ T1391] fido_id[1391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1028.171879][T15768] IPVS: starting estimator thread 0... [ 1028.312170][ T1404] IPVS: using max 56 ests per chain, 134400 per kthread [ 1028.486890][ T1414] syzkaller1: entered promiscuous mode [ 1028.492569][ T1414] syzkaller1: entered allmulticast mode [ 1029.629249][ T1443] [ 1029.631609][ T1443] ===================================================== [ 1029.638517][ T1443] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1029.645966][ T1443] syzkaller #0 Tainted: G L [ 1029.651936][ T1443] ----------------------------------------------------- [ 1029.658861][ T1443] syz.4.11512/1443 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1029.666561][ T1443] ffff888078d92750 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1029.675238][ T1443] [ 1029.675238][ T1443] and this task is already holding: [ 1029.682581][ T1443] ffff888035f41028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1029.692396][ T1443] which would create a new lock dependency: [ 1029.698308][ T1443] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1029.706378][ T1443] [ 1029.706378][ T1443] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1029.715804][ T1443] (&client->buffer_lock){..-.}-{3:3} [ 1029.715824][ T1443] [ 1029.715824][ T1443] ... which became SOFTIRQ-irq-safe at: [ 1029.728881][ T1443] lock_acquire+0xf0/0x2e0 [ 1029.733460][ T1443] _raw_spin_lock+0x2e/0x40 [ 1029.738036][ T1443] evdev_pass_values+0xb9/0xbd0 [ 1029.742962][ T1443] evdev_events+0x1e6/0x340 [ 1029.747532][ T1443] input_pass_values+0x288/0x890 [ 1029.752626][ T1443] input_event_dispose+0x3e5/0x6b0 [ 1029.757811][ T1443] input_event+0x89/0xe0 [ 1029.762148][ T1443] hidinput_hid_event+0x1487/0x1e60 [ 1029.767426][ T1443] hid_process_event+0x4be/0x620 [ 1029.772440][ T1443] hid_input_array_field+0x41c/0x5f0 [ 1029.777813][ T1443] hid_report_raw_event+0xdd7/0x1720 [ 1029.783172][ T1443] hid_input_report+0x44b/0x580 [ 1029.788109][ T1443] hid_irq_in+0x47e/0x6d0 [ 1029.792522][ T1443] __usb_hcd_giveback_urb+0x376/0x540 [ 1029.797961][ T1443] dummy_timer+0xbbd/0x45d0 [ 1029.802531][ T1443] __hrtimer_run_queues+0x53a/0xcc0 [ 1029.807802][ T1443] hrtimer_run_softirq+0x182/0x5a0 [ 1029.812985][ T1443] handle_softirqs+0x22a/0x870 [ 1029.817818][ T1443] __irq_exit_rcu+0x5f/0x150 [ 1029.822476][ T1443] irq_exit_rcu+0x9/0x30 [ 1029.826798][ T1443] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1029.832520][ T1443] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1029.838569][ T1443] lock_acquire+0x20b/0x2e0 [ 1029.843145][ T1443] unwind_next_frame+0xc2/0x23c0 [ 1029.848155][ T1443] arch_stack_walk+0x11b/0x150 [ 1029.852988][ T1443] stack_trace_save+0xa9/0x100 [ 1029.857830][ T1443] kasan_save_track+0x3e/0x80 [ 1029.862571][ T1443] __kasan_kmalloc+0x93/0xb0 [ 1029.867239][ T1443] __kmalloc_cache_noprof+0x31c/0x660 [ 1029.872691][ T1443] kobject_uevent_env+0x28c/0x9e0 [ 1029.877794][ T1443] really_probe+0x789/0xaf0 [ 1029.882362][ T1443] __driver_probe_device+0x18c/0x320 [ 1029.887716][ T1443] driver_probe_device+0x4f/0x240 [ 1029.892807][ T1443] __device_attach_driver+0x2d4/0x4c0 [ 1029.898246][ T1443] bus_for_each_drv+0x258/0x2f0 [ 1029.903163][ T1443] __device_attach+0x2c5/0x450 [ 1029.907996][ T1443] device_initial_probe+0xa1/0xd0 [ 1029.913171][ T1443] bus_probe_device+0x12a/0x220 [ 1029.918093][ T1443] device_add+0x7b6/0xb70 [ 1029.922493][ T1443] hid_add_device+0x272/0x3e0 [ 1029.927250][ T1443] usbhid_probe+0xe3a/0x12f0 [ 1029.931921][ T1443] usb_probe_interface+0x668/0xc90 [ 1029.937101][ T1443] really_probe+0x267/0xaf0 [ 1029.941675][ T1443] __driver_probe_device+0x18c/0x320 [ 1029.947023][ T1443] driver_probe_device+0x4f/0x240 [ 1029.952117][ T1443] __device_attach_driver+0x2d4/0x4c0 [ 1029.957552][ T1443] bus_for_each_drv+0x258/0x2f0 [ 1029.962468][ T1443] __device_attach+0x2c5/0x450 [ 1029.967296][ T1443] device_initial_probe+0xa1/0xd0 [ 1029.972384][ T1443] bus_probe_device+0x12a/0x220 [ 1029.977301][ T1443] device_add+0x7b6/0xb70 [ 1029.981698][ T1443] usb_set_configuration+0x1a87/0x2110 [ 1029.987246][ T1443] usb_generic_driver_probe+0x8d/0x150 [ 1029.992776][ T1443] usb_probe_device+0x1c4/0x3b0 [ 1029.997695][ T1443] really_probe+0x267/0xaf0 [ 1030.002280][ T1443] __driver_probe_device+0x18c/0x320 [ 1030.007630][ T1443] driver_probe_device+0x4f/0x240 [ 1030.012720][ T1443] __device_attach_driver+0x2d4/0x4c0 [ 1030.018157][ T1443] bus_for_each_drv+0x258/0x2f0 [ 1030.023098][ T1443] __device_attach+0x2c5/0x450 [ 1030.027935][ T1443] device_initial_probe+0xa1/0xd0 [ 1030.033027][ T1443] bus_probe_device+0x12a/0x220 [ 1030.037947][ T1443] device_add+0x7b6/0xb70 [ 1030.042346][ T1443] usb_new_device+0xa08/0x16f0 [ 1030.047207][ T1443] hub_event+0x2a1c/0x4f30 [ 1030.051698][ T1443] process_scheduled_works+0xb02/0x1830 [ 1030.057317][ T1443] worker_thread+0xa50/0xfc0 [ 1030.061984][ T1443] kthread+0x388/0x470 [ 1030.066129][ T1443] ret_from_fork+0x51e/0xb90 [ 1030.070802][ T1443] ret_from_fork_asm+0x1a/0x30 [ 1030.075636][ T1443] [ 1030.075636][ T1443] to a SOFTIRQ-irq-unsafe lock: [ 1030.082718][ T1443] (tasklist_lock){.+.+}-{3:3} [ 1030.082737][ T1443] [ 1030.082737][ T1443] ... which became SOFTIRQ-irq-unsafe at: [ 1030.095325][ T1443] ... [ 1030.095332][ T1443] lock_acquire+0xf0/0x2e0 [ 1030.102375][ T1443] _raw_read_lock+0x36/0x50 [ 1030.106947][ T1443] __do_wait+0xde/0x740 [ 1030.111179][ T1443] do_wait+0x1e7/0x540 [ 1030.115316][ T1443] kernel_wait+0xd6/0x1c0 [ 1030.119712][ T1443] call_usermodehelper_exec_work+0xbe/0x230 [ 1030.125677][ T1443] process_scheduled_works+0xb02/0x1830 [ 1030.131307][ T1443] worker_thread+0xa50/0xfc0 [ 1030.136014][ T1443] kthread+0x388/0x470 [ 1030.140174][ T1443] ret_from_fork+0x51e/0xb90 [ 1030.144836][ T1443] ret_from_fork_asm+0x1a/0x30 [ 1030.149672][ T1443] [ 1030.149672][ T1443] other info that might help us debug this: [ 1030.149672][ T1443] [ 1030.159878][ T1443] Chain exists of: [ 1030.159878][ T1443] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1030.159878][ T1443] [ 1030.172973][ T1443] Possible interrupt unsafe locking scenario: [ 1030.172973][ T1443] [ 1030.181270][ T1443] CPU0 CPU1 [ 1030.186612][ T1443] ---- ---- [ 1030.191954][ T1443] lock(tasklist_lock); [ 1030.196180][ T1443] local_irq_disable(); [ 1030.202928][ T1443] lock(&client->buffer_lock); [ 1030.210276][ T1443] lock(&new->fa_lock); [ 1030.217021][ T1443] [ 1030.220466][ T1443] lock(&client->buffer_lock); [ 1030.225470][ T1443] [ 1030.225470][ T1443] *** DEADLOCK *** [ 1030.225470][ T1443] [ 1030.233589][ T1443] 7 locks held by syz.4.11512/1443: [ 1030.238775][ T1443] #0: ffff88802b6fa118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 1030.247894][ T1443] #1: ffff88801e31c230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1030.257976][ T1443] #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1030.267615][ T1443] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1030.277168][ T1443] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1030.286287][ T1443] #5: ffff888035f41028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1030.296443][ T1443] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1030.305471][ T1443] [ 1030.305471][ T1443] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1030.315849][ T1443] -> (&client->buffer_lock){..-.}-{3:3} { [ 1030.321568][ T1443] IN-SOFTIRQ-W at: [ 1030.325523][ T1443] lock_acquire+0xf0/0x2e0 [ 1030.331579][ T1443] _raw_spin_lock+0x2e/0x40 [ 1030.337712][ T1443] evdev_pass_values+0xb9/0xbd0 [ 1030.344210][ T1443] evdev_events+0x1e6/0x340 [ 1030.350346][ T1443] input_pass_values+0x288/0x890 [ 1030.356913][ T1443] input_event_dispose+0x3e5/0x6b0 [ 1030.363666][ T1443] input_event+0x89/0xe0 [ 1030.369544][ T1443] hidinput_hid_event+0x1487/0x1e60 [ 1030.376377][ T1443] hid_process_event+0x4be/0x620 [ 1030.382967][ T1443] hid_input_array_field+0x41c/0x5f0 [ 1030.389933][ T1443] hid_report_raw_event+0xdd7/0x1720 [ 1030.396854][ T1443] hid_input_report+0x44b/0x580 [ 1030.403341][ T1443] hid_irq_in+0x47e/0x6d0 [ 1030.409310][ T1443] __usb_hcd_giveback_urb+0x376/0x540 [ 1030.416315][ T1443] dummy_timer+0xbbd/0x45d0 [ 1030.422457][ T1443] __hrtimer_run_queues+0x53a/0xcc0 [ 1030.429291][ T1443] hrtimer_run_softirq+0x182/0x5a0 [ 1030.436042][ T1443] handle_softirqs+0x22a/0x870 [ 1030.442459][ T1443] __irq_exit_rcu+0x5f/0x150 [ 1030.448681][ T1443] irq_exit_rcu+0x9/0x30 [ 1030.454553][ T1443] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1030.461826][ T1443] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1030.469461][ T1443] lock_acquire+0x20b/0x2e0 [ 1030.475618][ T1443] unwind_next_frame+0xc2/0x23c0 [ 1030.482188][ T1443] arch_stack_walk+0x11b/0x150 [ 1030.488585][ T1443] stack_trace_save+0xa9/0x100 [ 1030.494995][ T1443] kasan_save_track+0x3e/0x80 [ 1030.501302][ T1443] __kasan_kmalloc+0x93/0xb0 [ 1030.507539][ T1443] __kmalloc_cache_noprof+0x31c/0x660 [ 1030.514544][ T1443] kobject_uevent_env+0x28c/0x9e0 [ 1030.521217][ T1443] really_probe+0x789/0xaf0 [ 1030.527352][ T1443] __driver_probe_device+0x18c/0x320 [ 1030.534273][ T1443] driver_probe_device+0x4f/0x240 [ 1030.540943][ T1443] __device_attach_driver+0x2d4/0x4c0 [ 1030.547944][ T1443] bus_for_each_drv+0x258/0x2f0 [ 1030.554427][ T1443] __device_attach+0x2c5/0x450 [ 1030.560816][ T1443] device_initial_probe+0xa1/0xd0 [ 1030.567468][ T1443] bus_probe_device+0x12a/0x220 [ 1030.573951][ T1443] device_add+0x7b6/0xb70 [ 1030.579912][ T1443] hid_add_device+0x272/0x3e0 [ 1030.586230][ T1443] usbhid_probe+0xe3a/0x12f0 [ 1030.592478][ T1443] usb_probe_interface+0x668/0xc90 [ 1030.599221][ T1443] really_probe+0x267/0xaf0 [ 1030.605352][ T1443] __driver_probe_device+0x18c/0x320 [ 1030.612368][ T1443] driver_probe_device+0x4f/0x240 [ 1030.619021][ T1443] __device_attach_driver+0x2d4/0x4c0 [ 1030.626026][ T1443] bus_for_each_drv+0x258/0x2f0 [ 1030.632506][ T1443] __device_attach+0x2c5/0x450 [ 1030.638895][ T1443] device_initial_probe+0xa1/0xd0 [ 1030.645547][ T1443] bus_probe_device+0x12a/0x220 [ 1030.652028][ T1443] device_add+0x7b6/0xb70 [ 1030.657991][ T1443] usb_set_configuration+0x1a87/0x2110 [ 1030.665088][ T1443] usb_generic_driver_probe+0x8d/0x150 [ 1030.672282][ T1443] usb_probe_device+0x1c4/0x3b0 [ 1030.678760][ T1443] really_probe+0x267/0xaf0 [ 1030.684893][ T1443] __driver_probe_device+0x18c/0x320 [ 1030.691815][ T1443] driver_probe_device+0x4f/0x240 [ 1030.698470][ T1443] __device_attach_driver+0x2d4/0x4c0 [ 1030.705469][ T1443] bus_for_each_drv+0x258/0x2f0 [ 1030.711948][ T1443] __device_attach+0x2c5/0x450 [ 1030.718336][ T1443] device_initial_probe+0xa1/0xd0 [ 1030.724988][ T1443] bus_probe_device+0x12a/0x220 [ 1030.731476][ T1443] device_add+0x7b6/0xb70 [ 1030.737628][ T1443] usb_new_device+0xa08/0x16f0 [ 1030.744028][ T1443] hub_event+0x2a1c/0x4f30 [ 1030.750079][ T1443] process_scheduled_works+0xb02/0x1830 [ 1030.757257][ T1443] worker_thread+0xa50/0xfc0 [ 1030.763475][ T1443] kthread+0x388/0x470 [ 1030.769170][ T1443] ret_from_fork+0x51e/0xb90 [ 1030.775388][ T1443] ret_from_fork_asm+0x1a/0x30 [ 1030.781781][ T1443] INITIAL USE at: [ 1030.785655][ T1443] lock_acquire+0xf0/0x2e0 [ 1030.791619][ T1443] _raw_spin_lock_irqsave+0x40/0x60 [ 1030.798364][ T1443] evdev_ioctl_handler+0x1a49/0x1fe0 [ 1030.805219][ T1443] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1030.812308][ T1443] __do_fast_syscall_32+0x20d/0x640 [ 1030.819058][ T1443] do_fast_syscall_32+0x33/0x70 [ 1030.825972][ T1443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1030.833846][ T1443] } [ 1030.836325][ T1443] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1030.844472][ T1443] [ 1030.844472][ T1443] the dependencies between the lock to be acquired [ 1030.844479][ T1443] and SOFTIRQ-irq-unsafe lock: [ 1030.857954][ T1443] -> (tasklist_lock){.+.+}-{3:3} { [ 1030.863321][ T1443] HARDIRQ-ON-R at: [ 1030.867454][ T1443] lock_acquire+0xf0/0x2e0 [ 1030.873849][ T1443] _raw_read_lock+0x36/0x50 [ 1030.880330][ T1443] __do_wait+0xde/0x740 [ 1030.886476][ T1443] do_wait+0x1e7/0x540 [ 1030.892526][ T1443] kernel_wait+0xd6/0x1c0 [ 1030.898832][ T1443] call_usermodehelper_exec_work+0xbe/0x230 [ 1030.906704][ T1443] process_scheduled_works+0xb02/0x1830 [ 1030.914229][ T1443] worker_thread+0xa50/0xfc0 [ 1030.920801][ T1443] kthread+0x388/0x470 [ 1030.926848][ T1443] ret_from_fork+0x51e/0xb90 [ 1030.933426][ T1443] ret_from_fork_asm+0x1a/0x30 [ 1030.940183][ T1443] SOFTIRQ-ON-R at: [ 1030.944321][ T1443] lock_acquire+0xf0/0x2e0 [ 1030.950721][ T1443] _raw_read_lock+0x36/0x50 [ 1030.957219][ T1443] __do_wait+0xde/0x740 [ 1030.963361][ T1443] do_wait+0x1e7/0x540 [ 1030.969419][ T1443] kernel_wait+0xd6/0x1c0 [ 1030.975736][ T1443] call_usermodehelper_exec_work+0xbe/0x230 [ 1030.983714][ T1443] process_scheduled_works+0xb02/0x1830 [ 1030.991266][ T1443] worker_thread+0xa50/0xfc0 [ 1030.997859][ T1443] kthread+0x388/0x470 [ 1031.003915][ T1443] ret_from_fork+0x51e/0xb90 [ 1031.010494][ T1443] ret_from_fork_asm+0x1a/0x30 [ 1031.017248][ T1443] INITIAL USE at: [ 1031.021400][ T1443] lock_acquire+0xf0/0x2e0 [ 1031.027714][ T1443] _raw_write_lock_irq+0x3d/0x50 [ 1031.034557][ T1443] copy_process+0x247a/0x3cf0 [ 1031.041139][ T1443] kernel_clone+0x248/0x8e0 [ 1031.047553][ T1443] user_mode_thread+0x110/0x180 [ 1031.054323][ T1443] rest_init+0x23/0x300 [ 1031.060386][ T1443] start_kernel+0x385/0x3d0 [ 1031.066797][ T1443] x86_64_start_reservations+0x24/0x30 [ 1031.074162][ T1443] x86_64_start_kernel+0x143/0x1c0 [ 1031.081189][ T1443] common_startup_64+0x13e/0x147 [ 1031.088296][ T1443] INITIAL READ USE at: [ 1031.092789][ T1443] lock_acquire+0xf0/0x2e0 [ 1031.099557][ T1443] _raw_read_lock+0x36/0x50 [ 1031.106485][ T1443] __do_wait+0xde/0x740 [ 1031.113056][ T1443] do_wait+0x1e7/0x540 [ 1031.119454][ T1443] kernel_wait+0xd6/0x1c0 [ 1031.126114][ T1443] call_usermodehelper_exec_work+0xbe/0x230 [ 1031.134337][ T1443] process_scheduled_works+0xb02/0x1830 [ 1031.142222][ T1443] worker_thread+0xa50/0xfc0 [ 1031.149146][ T1443] kthread+0x388/0x470 [ 1031.155547][ T1443] ret_from_fork+0x51e/0xb90 [ 1031.162477][ T1443] ret_from_fork_asm+0x1a/0x30 [ 1031.169605][ T1443] } [ 1031.172259][ T1443] ... key at: [] tasklist_lock+0x18/0x40 [ 1031.180234][ T1443] ... acquired at: [ 1031.184192][ T1443] _raw_read_lock+0x36/0x50 [ 1031.188859][ T1443] send_sigio+0x101/0x370 [ 1031.193347][ T1443] dnotify_handle_event+0x169/0x440 [ 1031.198701][ T1443] fsnotify+0x1831/0x1ae0 [ 1031.203192][ T1443] path_openat+0x15c2/0x3860 [ 1031.207948][ T1443] do_file_open+0x23e/0x4a0 [ 1031.212604][ T1443] do_sys_openat2+0x113/0x200 [ 1031.217637][ T1443] __ia32_compat_sys_openat+0x131/0x160 [ 1031.223348][ T1443] __do_fast_syscall_32+0x20d/0x640 [ 1031.228701][ T1443] do_fast_syscall_32+0x33/0x70 [ 1031.233709][ T1443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1031.240197][ T1443] [ 1031.242505][ T1443] -> (&f_owner->lock){....}-{3:3} { [ 1031.247789][ T1443] INITIAL USE at: [ 1031.251749][ T1443] lock_acquire+0xf0/0x2e0 [ 1031.257896][ T1443] _raw_write_lock_irq+0x3d/0x50 [ 1031.264563][ T1443] __f_setown+0x67/0x370 [ 1031.270525][ T1443] fcntl_dirnotify+0x3f9/0x6a0 [ 1031.277008][ T1443] do_fcntl+0x77e/0x1a20 [ 1031.283006][ T1443] do_compat_fcntl64+0x51e/0x7e0 [ 1031.289669][ T1443] __do_fast_syscall_32+0x20d/0x640 [ 1031.296592][ T1443] do_fast_syscall_32+0x33/0x70 [ 1031.303161][ T1443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1031.311212][ T1443] INITIAL READ USE at: [ 1031.315612][ T1443] lock_acquire+0xf0/0x2e0 [ 1031.322224][ T1443] _raw_read_lock_irqsave+0x48/0x60 [ 1031.329584][ T1443] send_sigio+0x38/0x370 [ 1031.335980][ T1443] dnotify_handle_event+0x169/0x440 [ 1031.343345][ T1443] fsnotify+0x1831/0x1ae0 [ 1031.349833][ T1443] fsnotify_xattr+0x1a3/0x200 [ 1031.356671][ T1443] vfs_fileattr_set+0xa34/0xc90 [ 1031.363680][ T1443] ioctl_fssetxattr+0x213/0x280 [ 1031.370716][ T1443] do_vfs_ioctl+0x900/0x1530 [ 1031.377459][ T1443] __ia32_compat_sys_ioctl+0x572/0x950 [ 1031.385072][ T1443] __do_fast_syscall_32+0x20d/0x640 [ 1031.392427][ T1443] do_fast_syscall_32+0x33/0x70 [ 1031.399430][ T1443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1031.407913][ T1443] } [ 1031.410478][ T1443] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1031.419402][ T1443] ... acquired at: [ 1031.423272][ T1443] _raw_read_lock_irqsave+0x48/0x60 [ 1031.428633][ T1443] send_sigio+0x38/0x370 [ 1031.433032][ T1443] kill_fasync+0x24d/0x4d0 [ 1031.437603][ T1443] lease_break_callback+0x26/0x30 [ 1031.442783][ T1443] __break_lease+0x81c/0x1e80 [ 1031.447622][ T1443] do_dentry_open+0x1010/0x14e0 [ 1031.452633][ T1443] vfs_open+0x3b/0x340 [ 1031.456865][ T1443] path_openat+0x2e08/0x3860 [ 1031.461609][ T1443] do_file_open+0x23e/0x4a0 [ 1031.466267][ T1443] do_sys_openat2+0x113/0x200 [ 1031.471109][ T1443] __ia32_compat_sys_openat+0x131/0x160 [ 1031.476817][ T1443] __do_fast_syscall_32+0x20d/0x640 [ 1031.482169][ T1443] do_fast_syscall_32+0x33/0x70 [ 1031.487178][ T1443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1031.493665][ T1443] [ 1031.495968][ T1443] -> (&new->fa_lock){....}-{3:3} { [ 1031.501080][ T1443] INITIAL USE at: [ 1031.504953][ T1443] lock_acquire+0xf0/0x2e0 [ 1031.510917][ T1443] _raw_write_lock_irq+0x3d/0x50 [ 1031.517413][ T1443] fasync_remove_entry+0xf1/0x1c0 [ 1031.523980][ T1443] lease_modify+0x4f7/0x6c0 [ 1031.530040][ T1443] locks_remove_file+0x5f0/0xf70 [ 1031.536530][ T1443] __fput+0x3ae/0xa70 [ 1031.542078][ T1443] task_work_run+0x1d9/0x270 [ 1031.548215][ T1443] exit_to_user_mode_loop+0xed/0x480 [ 1031.555053][ T1443] __do_fast_syscall_32+0x415/0x640 [ 1031.561799][ T1443] do_fast_syscall_32+0x33/0x70 [ 1031.568195][ T1443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1031.576076][ T1443] INITIAL READ USE at: [ 1031.580480][ T1443] lock_acquire+0xf0/0x2e0 [ 1031.586891][ T1443] _raw_read_lock_irqsave+0x48/0x60 [ 1031.594082][ T1443] kill_fasync+0x199/0x4d0 [ 1031.600479][ T1443] __se_sys_vmsplice+0x100d/0x1490 [ 1031.607584][ T1443] __do_fast_syscall_32+0x20d/0x640 [ 1031.614762][ T1443] do_fast_syscall_32+0x33/0x70 [ 1031.621592][ T1443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1031.629902][ T1443] } [ 1031.632476][ T1443] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1031.641150][ T1443] ... acquired at: [ 1031.644933][ T1443] _raw_read_lock_irqsave+0x48/0x60 [ 1031.650291][ T1443] kill_fasync+0x199/0x4d0 [ 1031.654875][ T1443] evdev_pass_values+0x627/0xbd0 [ 1031.659975][ T1443] evdev_events+0x1e6/0x340 [ 1031.664637][ T1443] input_pass_values+0x288/0x890 [ 1031.669733][ T1443] input_event_dispose+0x330/0x6b0 [ 1031.675012][ T1443] input_inject_event+0x1dd/0x340 [ 1031.680199][ T1443] evdev_write+0x325/0x4c0 [ 1031.684788][ T1443] vfs_write+0x29a/0xb90 [ 1031.689190][ T1443] ksys_write+0x150/0x270 [ 1031.693671][ T1443] __do_fast_syscall_32+0x20d/0x640 [ 1031.699025][ T1443] do_fast_syscall_32+0x33/0x70 [ 1031.704032][ T1443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1031.710520][ T1443] [ 1031.712824][ T1443] [ 1031.712824][ T1443] stack backtrace: [ 1031.718716][ T1443] CPU: 0 UID: 0 PID: 1443 Comm: syz.4.11512 Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.718738][ T1443] Tainted: [L]=SOFTLOCKUP [ 1031.718744][ T1443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1031.718760][ T1443] Call Trace: [ 1031.718767][ T1443] [ 1031.718774][ T1443] dump_stack_lvl+0xe8/0x150 [ 1031.718795][ T1443] __lock_acquire+0x2a94/0x2cf0 [ 1031.718822][ T1443] lock_acquire+0xf0/0x2e0 [ 1031.718841][ T1443] ? kill_fasync+0x199/0x4d0 [ 1031.718859][ T1443] _raw_read_lock_irqsave+0x48/0x60 [ 1031.718880][ T1443] ? kill_fasync+0x199/0x4d0 [ 1031.718894][ T1443] kill_fasync+0x199/0x4d0 [ 1031.718909][ T1443] ? kill_fasync+0x53/0x4d0 [ 1031.718924][ T1443] evdev_pass_values+0x627/0xbd0 [ 1031.718944][ T1443] ? evdev_pass_values+0x5c1/0xbd0 [ 1031.718964][ T1443] evdev_events+0x1e6/0x340 [ 1031.718981][ T1443] ? evdev_events+0x79/0x340 [ 1031.718999][ T1443] ? input_pass_values+0x8d/0x890 [ 1031.719016][ T1443] input_pass_values+0x288/0x890 [ 1031.719035][ T1443] ? input_handle_event+0x70c/0xf30 [ 1031.719059][ T1443] input_event_dispose+0x330/0x6b0 [ 1031.719083][ T1443] input_inject_event+0x1dd/0x340 [ 1031.719106][ T1443] ? input_inject_event+0xb6/0x340 [ 1031.719130][ T1443] evdev_write+0x325/0x4c0 [ 1031.719150][ T1443] ? __pfx_evdev_write+0x10/0x10 [ 1031.719169][ T1443] ? bpf_lsm_file_permission+0x9/0x20 [ 1031.719187][ T1443] ? security_file_permission+0x75/0x260 [ 1031.719212][ T1443] ? rw_verify_area+0x255/0x4d0 [ 1031.719226][ T1443] ? __pfx_evdev_write+0x10/0x10 [ 1031.719244][ T1443] vfs_write+0x29a/0xb90 [ 1031.719261][ T1443] ? __pfx_vfs_write+0x10/0x10 [ 1031.719275][ T1443] ? __fget_files+0x2a/0x420 [ 1031.719379][ T1443] ? __fget_files+0x2a/0x420 [ 1031.719413][ T1443] ? __fget_files+0x3a0/0x420 [ 1031.719434][ T1443] ? __fget_files+0x2a/0x420 [ 1031.719457][ T1443] ksys_write+0x150/0x270 [ 1031.719475][ T1443] ? __pfx_ksys_write+0x10/0x10 [ 1031.719492][ T1443] __do_fast_syscall_32+0x20d/0x640 [ 1031.719510][ T1443] ? do_fast_syscall_32+0x33/0x70 [ 1031.719524][ T1443] ? asm_int80_emulation+0x1a/0x20 [ 1031.719539][ T1443] ? do_int80_emulation+0x274/0x4d0 [ 1031.719552][ T1443] ? trace_irq_disable+0x3b/0x150 [ 1031.719576][ T1443] do_fast_syscall_32+0x33/0x70 [ 1031.719591][ T1443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1031.719618][ T1443] RIP: 0023:0xf709ef6c [ 1031.719639][ T1443] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 1031.719654][ T1443] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1031.719672][ T1443] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1031.719684][ T1443] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 1031.719693][ T1443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1031.719703][ T1443] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1031.719713][ T1443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1031.719727][ T1443]