last executing test programs: 4.967969757s ago: executing program 3 (id=10277): unshare(0x22020600) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000180)=@attr_other={0x0, 0x1, 0x4, 0x0}) 4.834726935s ago: executing program 3 (id=10278): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 3.818013894s ago: executing program 1 (id=10293): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) fsync(r1) syz_usb_disconnect(r0) 2.993448317s ago: executing program 2 (id=10300): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) signalfd4(r0, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) 2.763706924s ago: executing program 2 (id=10304): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 2.663921946s ago: executing program 0 (id=10305): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 2.456128256s ago: executing program 2 (id=10307): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 2.451093487s ago: executing program 4 (id=10308): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0, 0x0, 0x200}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40002}, 0x4004040) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)) 2.34628195s ago: executing program 4 (id=10309): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.151935474s ago: executing program 1 (id=10310): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000200)={0x6000200f}) 2.015995103s ago: executing program 0 (id=10311): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r2, 0xf}, 0x8) 1.924012783s ago: executing program 1 (id=10312): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x30, r0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) 1.815191672s ago: executing program 4 (id=10313): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x202, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f00002bf000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) 1.78070694s ago: executing program 1 (id=10314): syz_open_procfs(0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x48082, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0xa001) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x5}) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 1.74749657s ago: executing program 3 (id=10315): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0xfffffffc, {0x0, 0x0, 0x12, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x43) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20) 1.676094242s ago: executing program 4 (id=10316): unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="400000001000110ce7ff00"/20, @ANYRES32=r1, @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.535894065s ago: executing program 3 (id=10317): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0xfffe, 0x8000002, @empty}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK'}, 0xe) sendfile(r0, r1, &(0x7f00000000c0), 0x7ffff000) 1.381801745s ago: executing program 3 (id=10318): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="00d34e", 0x3}], 0x1}, 0x48093) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x613) 1.057363709s ago: executing program 1 (id=10319): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 1.056484881s ago: executing program 0 (id=10320): syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0xc5e2, 0x8, 0xfffffffe, 0x6, r2}, &(0x7f0000000240)=0x10) 924.006218ms ago: executing program 0 (id=10321): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030f0000000000000000340000001e0001"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) 866.039173ms ago: executing program 0 (id=10322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec970000e03c00e18000000000000000000000000000aaff0200000000000000000000000000010617"], 0xffe) 707.214567ms ago: executing program 4 (id=10323): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="9800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000000000000780012800b000100697036746e6c00006800028006000f00"], 0x98}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 555.841866ms ago: executing program 4 (id=10324): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xbd, 0x16, 0xf, 0x40, 0x8086, 0x110, 0xbfad, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x12, 0x24}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0}) 551.495556ms ago: executing program 2 (id=10325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xcb, 0x0, 0x0, 0x7, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x4, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}, {"a706faed3cf692307e75e50699d58873e1883515da389cb8158eb176c8e349aea6af78336582d0590e25ec269b2d3680332426aafd97cbf9f2a7ba9e6b90669957d639f5cd9c2e3aa1588665236be66b018ebf74d1ea99a30dc58e38ec0fcf72759302a257550bd8f2c42bf4a9768bef2ca76144bd2900fc6a8eb07aaa917e31a6f8e10a53bbf9c73e5d07"}}}}}, 0xd9) 499.172651ms ago: executing program 0 (id=10326): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000a49000/0x1000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 416.040576ms ago: executing program 3 (id=10327): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000300)={0x20, 0x16, 0x2, "fcca"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000580)={0x0, 0x15, 0x2, "85a4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 268.245224ms ago: executing program 2 (id=10328): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003012000060ce902d9f0c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 116.811728ms ago: executing program 1 (id=10329): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r2, 0x4, 0x30}, &(0x7f00000002c0)=0xc) 0s ago: executing program 2 (id=10330): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x56, 0xfffe, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x8, 0x0, 0xfffc}}}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): : AHDI p1 p2 [ 786.410993][T25399] loop4: partition table partially beyond EOD, truncated [ 786.436353][T25399] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 786.562476][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 787.259350][T12331] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 787.420261][T12331] usb 2-1: Using ep0 maxpacket: 8 [ 787.437990][T12331] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 787.464011][T12331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.490573][T12331] usb 2-1: config 0 has no interface number 0 [ 787.514104][T12331] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 787.533809][T12331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.563095][T12331] usb 2-1: Product: syz [ 787.567388][T12331] usb 2-1: Manufacturer: syz [ 787.617408][T12331] usb 2-1: SerialNumber: syz [ 787.724692][T12331] usb 2-1: config 0 descriptor?? [ 787.976713][T12331] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 787.996915][T12331] usb 2-1: No valid video chain found. [ 788.004454][T25435] syzkaller1: entered promiscuous mode [ 788.021368][T25435] syzkaller1: entered allmulticast mode [ 788.211126][T12331] usb 2-1: USB disconnect, device number 66 [ 788.500076][T25448] netlink: 'syz.2.8744': attribute type 1 has an invalid length. [ 788.530001][T25448] netlink: 'syz.2.8744': attribute type 6 has an invalid length. [ 788.537851][T25448] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8744'. [ 789.712085][T25472] syzkaller1: entered promiscuous mode [ 789.717671][T25472] syzkaller1: entered allmulticast mode [ 789.899827][T12331] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 789.966822][T25475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8754'. [ 790.027695][T25475] vlan3: entered promiscuous mode [ 790.034289][T25476] sctp: [Deprecated]: syz.1.8755 (pid 25476) Use of int in maxseg socket option. [ 790.034289][T25476] Use struct sctp_assoc_value instead [ 790.064979][T25475] hsr0: entered promiscuous mode [ 790.090023][T12331] usb 4-1: Using ep0 maxpacket: 8 [ 790.113571][T12331] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 790.140099][T12331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.148520][T12331] usb 4-1: Product: syz [ 790.156626][T12331] usb 4-1: Manufacturer: syz [ 790.165018][T12331] usb 4-1: SerialNumber: syz [ 790.184555][T12331] usb 4-1: config 0 descriptor?? [ 790.193411][T12331] gspca_main: se401-2.14.0 probing 047d:5003 [ 790.622283][T25487] vivid-003: disconnect [ 790.658140][T25487] vivid-003: reconnect [ 790.749433][T12331] usb 4-1: reset high-speed USB device number 92 using dummy_hcd [ 790.799054][T12331] usb 4-1: device reset changed ep0 maxpacket size! [ 790.823430][T12331] gspca_se401: read req failed req 0x06 error -19 [ 790.837005][T12331] usb 4-1: USB disconnect, device number 92 [ 790.980905][T12331] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 791.171485][T12331] usb 4-1: config 0 has no interfaces? [ 791.181849][T12331] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 791.221316][T12331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.247172][T12331] usb 4-1: Product: syz [ 791.256448][T12331] usb 4-1: Manufacturer: syz [ 791.273299][T12331] usb 4-1: SerialNumber: syz [ 791.297749][T12331] usb 4-1: config 0 descriptor?? [ 791.369700][T12358] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 791.555849][T12358] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 791.584781][T12358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.612114][T12331] usb 4-1: USB disconnect, device number 93 [ 791.614828][T12358] usb 2-1: Product: syz [ 791.648436][T12358] usb 2-1: Manufacturer: syz [ 791.664779][T12358] usb 2-1: SerialNumber: syz [ 791.691804][T12358] usb 2-1: config 0 descriptor?? [ 791.716523][T12358] ch341 2-1:0.0: ch341-uart converter detected [ 792.591942][T25529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 792.629670][T25529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 792.652789][T25529] hsr0: entered allmulticast mode [ 792.658201][T25529] hsr_slave_0: entered allmulticast mode [ 792.665225][T25529] hsr_slave_1: entered allmulticast mode [ 792.729808][T12358] usb 2-1: failed to send control message: -71 [ 792.736132][T12358] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 792.770098][T12358] usb 2-1: USB disconnect, device number 67 [ 792.778747][T12358] ch341 2-1:0.0: device disconnected [ 792.869347][T12331] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 793.023243][T12331] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 793.051326][T12331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 793.072874][T12331] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 793.100505][T12331] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 793.150324][T12331] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 793.178204][T12331] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 793.180221][T25551] loop7: detected capacity change from 0 to 6 [ 793.192168][T12331] usb 5-1: Manufacturer: syz [ 793.216790][T12331] usb 5-1: config 0 descriptor?? [ 793.217832][T25551] loop7: [POWERTEC] p1 [ 793.247339][T25551] loop7: p1 start 1680801792 is beyond EOD, truncated [ 793.478554][T25558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8790'. [ 793.515013][T25560] vti0: entered promiscuous mode [ 793.570771][T25561] dlm: non-version read from control device 2147479552 [ 793.661767][T12331] rc_core: IR keymap rc-hauppauge not found [ 793.688101][T12331] Registered IR keymap rc-empty [ 793.700645][T12331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 793.719354][T12331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 793.740613][T12331] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 793.767049][T12331] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input78 [ 793.800211][T12331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 793.847187][T12331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 793.882958][T12331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 793.931366][T12331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 793.971284][T12331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 794.003717][T12331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 794.029334][ T5919] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 794.070686][T12331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 794.102527][T12331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 794.142446][T12331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 794.179396][T12331] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 794.189285][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 794.198055][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.211855][T12331] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 794.221710][ T978] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 794.230234][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.241568][T12331] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 794.251543][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 794.269603][T12331] usb 5-1: USB disconnect, device number 88 [ 794.284065][ T5919] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 794.301705][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.316949][ T5919] usb 4-1: config 0 descriptor?? [ 794.404159][ T978] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 794.426299][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.437915][ T978] usb 2-1: config 0 descriptor?? [ 794.447370][ T978] cp210x 2-1:0.0: cp210x converter detected [ 794.751129][ T5919] HID 045e:07da: Invalid code 65791 type 1 [ 794.770864][ T5919] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0071/input/input79 [ 794.792192][ T5919] microsoft 0003:045E:07DA.0071: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 794.853712][ T978] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 794.994275][T12364] usb 4-1: USB disconnect, device number 94 [ 795.093886][ T978] usb 2-1: cp210x converter now attached to ttyUSB0 [ 795.287186][ T978] usb 2-1: USB disconnect, device number 68 [ 795.312216][ T978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 795.344012][ T978] cp210x 2-1:0.0: device disconnected [ 796.270047][T12364] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 796.456873][T12364] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 796.472459][T12364] usb 5-1: config 1 has no interface number 0 [ 796.489064][T12364] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.509341][T12364] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 796.528850][T12364] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 796.552133][T12364] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 796.569210][T12364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.597868][T12364] usb 5-1: Product: syz [ 796.605919][T12364] usb 5-1: Manufacturer: syz [ 796.629616][T12364] usb 5-1: SerialNumber: syz [ 797.388084][T25651] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8819'. [ 797.476503][T12364] cdc_ncm 5-1:1.1: bind() failure [ 797.680280][T12364] usb 5-1: USB disconnect, device number 89 [ 799.704864][T25714] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8844'. [ 800.643194][T25729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 801.575541][T25748] veth0_to_bond: entered promiscuous mode [ 801.610186][T25747] veth0_to_bond: left promiscuous mode [ 803.746809][T25793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 803.766652][ T5919] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 803.984397][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 804.019712][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 804.050319][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 804.079890][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 804.107143][ T5919] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 804.129306][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.163215][ T5919] usb 2-1: config 0 descriptor?? [ 804.591453][ T5919] plantronics 0003:047F:FFFF.0072: No inputs registered, leaving [ 804.621227][ T5919] plantronics 0003:047F:FFFF.0072: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 804.895955][ T5919] usb 2-1: USB disconnect, device number 69 [ 806.183932][T25836] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8897'. [ 806.280092][T25841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8898'. [ 806.311536][T25841] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8898'. [ 806.544924][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8904'. [ 806.588955][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8904'. [ 807.833506][T25876] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.8913'. [ 807.864015][T25873] syzkaller1: entered promiscuous mode [ 807.897035][T25873] syzkaller1: entered allmulticast mode [ 807.913152][T25878] input: syz0 as /devices/virtual/input/input81 [ 808.400934][T25892] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.739226][T25908] syzkaller1: entered promiscuous mode [ 808.744827][T25908] syzkaller1: entered allmulticast mode [ 809.559242][ T5919] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 809.727018][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 809.749363][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 809.829471][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 809.849238][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 809.874845][ T5919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 809.895257][ T5919] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 809.905682][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 809.916022][ T5919] usb 3-1: Product: syz [ 809.922082][ T5919] usb 3-1: Manufacturer: syz [ 809.927721][ T5919] usb 3-1: SerialNumber: syz [ 809.954225][ T5919] usb 3-1: config 0 descriptor?? [ 810.193110][ T5919] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 810.205078][ T5919] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 810.389619][ T5919] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 810.397278][ T5919] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 810.445707][ T5919] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 810.599339][ T5919] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 811.011041][ T5919] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 811.027757][ T5919] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 811.079842][ T5919] usb 3-1: USB disconnect, device number 87 [ 811.999630][ T5919] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 812.169385][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 812.177157][ T5919] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 812.189058][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 812.207689][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 812.222364][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 812.233657][ T5919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 812.257911][ T5919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 812.276218][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.520972][ T5919] usb 2-1: GET_CAPABILITIES returned 0 [ 812.537379][ T5919] usbtmc 2-1:16.0: can't read capabilities [ 812.787591][T25996] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 812.823851][T26025] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.8973'. [ 812.991221][T12358] usb 2-1: USB disconnect, device number 70 [ 813.066521][T26033] syzkaller1: entered promiscuous mode [ 813.076380][T26033] syzkaller1: entered allmulticast mode [ 813.391018][T26043] input: syz1 as /devices/virtual/input/input82 [ 814.175318][T26075] input: syz0 as /devices/virtual/input/input83 [ 815.119956][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.126374][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.779270][T12358] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 815.939395][T12358] usb 3-1: Using ep0 maxpacket: 16 [ 815.950266][T12358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.975063][T12358] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 816.001269][T12358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.037721][T12358] usb 3-1: config 0 descriptor?? [ 816.498031][T12358] mcp2221 0003:04D8:00DD.0073: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 816.900331][T12358] usb 3-1: USB disconnect, device number 88 [ 817.199395][ T5919] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 817.359343][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 817.378116][ T5919] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 817.399370][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.409610][ T5919] usb 5-1: Product: syz [ 817.413972][ T5919] usb 5-1: Manufacturer: syz [ 817.418718][ T5919] usb 5-1: SerialNumber: syz [ 817.443797][ T5919] usb 5-1: config 0 descriptor?? [ 817.676665][ T5919] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 818.493588][ T5919] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 818.497846][T26208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9051'. [ 818.525405][T26208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9051'. [ 818.539364][ T5919] usb 5-1: USB disconnect, device number 90 [ 818.541970][T26208] netlink: 'syz.1.9051': attribute type 19 has an invalid length. [ 819.042232][T26232] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 819.123852][T26234] loop2: detected capacity change from 0 to 7 [ 819.159743][ T5919] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 819.186115][T26234] Dev loop2: unable to read RDB block 7 [ 819.199407][T26234] loop2: AHDI p2 p3 [ 819.209923][T26234] loop2: partition table partially beyond EOD, truncated [ 819.227710][T26234] loop2: p2 size 150995456 extends beyond EOD, truncated [ 819.352097][ T5919] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 819.384547][ T5919] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.414138][ T8450] udevd[8450]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 819.418980][ T5919] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.460832][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 819.471594][ T5919] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.493640][ T5919] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.534391][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 819.568598][ T5919] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.605715][ T5919] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.648094][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 819.678625][ T5919] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.775613][ T5919] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.816198][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 819.832997][ T5919] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.869333][ T5919] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.887757][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 819.917542][ T5919] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.935257][ T5919] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 819.966613][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 819.982188][ T5919] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 819.995224][ T5919] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 820.007233][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 820.016414][ T5919] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 820.026171][ T5919] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 820.045196][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 820.064575][ T5919] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 820.074428][ T5919] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 820.093010][ T5919] usb 2-1: Product: syz [ 820.097404][ T5919] usb 2-1: Manufacturer: syz [ 820.107437][ T5919] usb 2-1: SerialNumber: syz [ 820.122782][ T5919] usb 2-1: config 0 descriptor?? [ 820.144236][ T5919] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 820.901230][T12358] usb 2-1: USB disconnect, device number 71 [ 820.901392][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 820.935069][T12358] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 821.875593][T26299] input: syz1 as /devices/virtual/input/input86 [ 822.641811][ T30] audit: type=1326 audit(1749967749.537:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26317 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f620b52ab19 code=0x7ffc0000 [ 822.719471][ T30] audit: type=1326 audit(1749967749.567:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26317 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f620b52ab19 code=0x7ffc0000 [ 822.823473][ T30] audit: type=1326 audit(1749967749.567:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26317 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f620b52ab19 code=0x7ffc0000 [ 822.953095][ T30] audit: type=1326 audit(1749967749.567:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26317 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620b58e929 code=0x7ffc0000 [ 823.082026][ T30] audit: type=1326 audit(1749967749.567:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26317 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f620b52ab19 code=0x7ffc0000 [ 823.156410][ T30] audit: type=1326 audit(1749967749.567:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26317 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620b58e929 code=0x7ffc0000 [ 823.178893][ C1] vkms_vblank_simulate: vblank timer overrun [ 823.209939][ T30] audit: type=1326 audit(1749967749.567:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26317 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f620b52ab19 code=0x7ffc0000 [ 823.238963][ T30] audit: type=1326 audit(1749967749.567:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26317 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620b58e929 code=0x7ffc0000 [ 823.261610][ C1] vkms_vblank_simulate: vblank timer overrun [ 823.331717][ T30] audit: type=1326 audit(1749967749.567:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26317 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620b58e929 code=0x7ffc0000 [ 823.420553][ T30] audit: type=1326 audit(1749967749.567:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26317 comm="syz.4.9101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f620b52ab19 code=0x7ffc0000 [ 823.443115][ C1] vkms_vblank_simulate: vblank timer overrun [ 824.002782][T26359] netlink: 'syz.3.9117': attribute type 1 has an invalid length. [ 824.030871][T26359] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.9117'. [ 824.160106][T26362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9119'. [ 824.797304][T26380] pimreg: left allmulticast mode [ 824.832084][T26382] sctp: [Deprecated]: syz.4.9128 (pid 26382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 824.832084][T26382] Use struct sctp_sack_info instead [ 828.294969][T26495] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.9167'. [ 828.325480][ T5919] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 828.468464][T26500] all (unregistering): Released all slaves [ 828.494579][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.507256][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.537332][ T5919] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 828.548254][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.609991][ T5919] usb 3-1: config 0 descriptor?? [ 828.679304][ T978] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 828.873706][ T978] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 828.893512][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.912378][ T978] usb 5-1: Product: syz [ 828.939375][ T978] usb 5-1: Manufacturer: syz [ 828.951496][ T978] usb 5-1: SerialNumber: syz [ 828.967310][ T978] usb 5-1: config 0 descriptor?? [ 829.064688][ T5919] hid-steam 0003:28DE:1142.0074: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 829.250721][ T5919] hid-steam 0003:28DE:1142.0074: Steam wireless receiver connected [ 829.331681][ T5919] hid-steam 0003:28DE:1142.0075: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 829.405271][ T5919] usb 3-1: USB disconnect, device number 89 [ 829.461940][ T5919] hid-steam 0003:28DE:1142.0074: Steam wireless receiver disconnected [ 829.479486][ T978] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (2) [ 829.487441][ T978] usb 5-1: Firmware version (0.0) predates our first public release. [ 829.535437][ T978] usb 5-1: Please update to version 0.2 or newer [ 829.658910][T26518] fido_id[26518]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 829.784400][ T978] usb 5-1: USB disconnect, device number 91 [ 830.161206][T26532] syzkaller1: entered promiscuous mode [ 830.167568][T26530] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 830.213895][T26532] syzkaller1: entered allmulticast mode [ 830.355777][T12364] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 830.467854][T26538] sock: sock_set_timeout: `syz.2.9183' (pid 26538) tries to set negative timeout [ 830.541075][T12364] usb 4-1: Using ep0 maxpacket: 8 [ 830.568880][T12364] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 830.623199][T12364] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 830.659295][T12364] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 830.683443][T12364] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.752340][T12364] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 830.772610][T26540] syzkaller1: entered promiscuous mode [ 830.778169][T26540] syzkaller1: entered allmulticast mode [ 830.781999][T12364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.037993][T12364] usb 4-1: GET_CAPABILITIES returned 0 [ 831.054039][T12364] usbtmc 4-1:16.0: can't read capabilities [ 831.243416][T12364] usb 4-1: USB disconnect, device number 95 [ 831.349682][ T978] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 831.539945][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 831.566589][ T978] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 831.576215][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.585149][ T978] usb 5-1: Product: syz [ 831.590971][ T978] usb 5-1: Manufacturer: syz [ 831.595747][ T978] usb 5-1: SerialNumber: syz [ 831.616017][ T978] usb 5-1: config 0 descriptor?? [ 831.831607][ T978] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 832.193508][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 832.193531][ T30] audit: type=1326 audit(1749967759.087:5954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26569 comm="syz.1.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 832.250093][ T30] audit: type=1326 audit(1749967759.127:5955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26569 comm="syz.1.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 832.291818][ T30] audit: type=1326 audit(1749967759.127:5956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26569 comm="syz.1.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 832.365361][ T30] audit: type=1326 audit(1749967759.127:5957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26569 comm="syz.1.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 832.449719][ T30] audit: type=1326 audit(1749967759.127:5958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26569 comm="syz.1.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 832.533974][ T30] audit: type=1326 audit(1749967759.127:5959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26569 comm="syz.1.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 832.602847][ T30] audit: type=1326 audit(1749967759.127:5960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26569 comm="syz.1.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 832.640173][ T978] usb write operation failed. (-71) [ 832.666148][ T978] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 832.702586][ T978] dvbdev: DVB: registering new adapter (Terratec H7) [ 832.720408][ T30] audit: type=1326 audit(1749967759.127:5961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26569 comm="syz.1.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 832.780096][ T978] usb 5-1: media controller created [ 832.809544][ T978] usb read operation failed. (-71) [ 832.841096][ T978] usb write operation failed. (-71) [ 832.870206][ T30] audit: type=1326 audit(1749967759.127:5962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26569 comm="syz.1.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 832.894606][ T978] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 832.943087][ T978] usb 5-1: USB disconnect, device number 92 [ 833.024650][ T30] audit: type=1326 audit(1749967759.127:5963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26569 comm="syz.1.9195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 833.029557][T26580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9201'. [ 833.219790][T12358] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 833.422126][T12358] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 833.434999][T12358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 833.446780][T12358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 833.467249][T12358] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 833.493248][T12358] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 833.511324][T12358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.546019][T12358] usb 4-1: config 0 descriptor?? [ 833.644864][T26598] binder: 26596:26598 ioctl c0306201 200000000540 returned -14 [ 833.979089][T12358] plantronics 0003:047F:FFFF.0076: ignoring exceeding usage max [ 834.023077][T12358] plantronics 0003:047F:FFFF.0076: No inputs registered, leaving [ 834.054372][T12358] plantronics 0003:047F:FFFF.0076: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 834.086870][T26609] input: syz0 as /devices/virtual/input/input87 [ 834.154701][T26612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9215'. [ 834.177337][T26612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9215'. [ 834.196342][T26612] gretap0: entered promiscuous mode [ 834.221823][T26612] gretap0: left promiscuous mode [ 835.611473][T26644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 835.897458][T26648] loop8: detected capacity change from 0 to 7 [ 835.918970][ T8450] Dev loop8: unable to read RDB block 7 [ 835.925455][ T8450] loop8: unable to read partition table [ 835.935130][ T8450] loop8: partition table beyond EOD, truncated [ 836.007312][T26648] Dev loop8: unable to read RDB block 7 [ 836.013839][T26648] loop8: unable to read partition table [ 836.020559][T26648] loop8: partition table beyond EOD, truncated [ 836.028123][T26648] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 836.028419][T26651] Dev loop8: unable to read RDB block 7 [ 836.051270][T26651] loop8: unable to read partition table [ 836.057501][T26651] loop8: partition table beyond EOD, truncated [ 836.074388][T26651] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 836.140018][ T978] usb 4-1: USB disconnect, device number 96 [ 838.042193][T26719] loop2: detected capacity change from 0 to 7 [ 838.093696][T26719] Dev loop2: unable to read RDB block 7 [ 838.111649][T26719] loop2: AHDI p4 [ 838.115487][T26719] loop2: partition table partially beyond EOD, truncated [ 839.101321][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 839.101342][ T30] audit: type=1326 audit(1749967765.997:6040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26751 comm="syz.1.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 839.229283][ T30] audit: type=1326 audit(1749967766.027:6041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26751 comm="syz.1.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 839.306634][ T30] audit: type=1326 audit(1749967766.027:6042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26751 comm="syz.1.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 839.376292][ T30] audit: type=1326 audit(1749967766.027:6043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26751 comm="syz.1.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 839.442877][ T30] audit: type=1326 audit(1749967766.027:6044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26751 comm="syz.1.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 839.511427][ T30] audit: type=1326 audit(1749967766.027:6045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26751 comm="syz.1.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 839.599361][ T30] audit: type=1326 audit(1749967766.027:6046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26751 comm="syz.1.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 839.662429][ T30] audit: type=1326 audit(1749967766.027:6047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26751 comm="syz.1.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 839.719465][ T30] audit: type=1326 audit(1749967766.027:6048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26751 comm="syz.1.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 839.762437][ T30] audit: type=1326 audit(1749967766.027:6049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26751 comm="syz.1.9275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 840.217119][T26775] syzkaller1: entered promiscuous mode [ 840.243941][T26775] syzkaller1: entered allmulticast mode [ 841.208006][T26801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9296'. [ 841.351071][T26805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9298'. [ 841.381983][T26805] netlink: 'syz.3.9298': attribute type 7 has an invalid length. [ 841.403211][T26805] netlink: 'syz.3.9298': attribute type 8 has an invalid length. [ 841.429272][T26805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9298'. [ 841.927327][T26815] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 843.269388][ T978] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 843.454310][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.476293][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.519049][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 843.549442][ T978] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 843.578437][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.608621][T26849] syzkaller1: entered promiscuous mode [ 843.614620][T26849] syzkaller1: entered allmulticast mode [ 843.627831][ T978] usb 3-1: config 0 descriptor?? [ 844.093412][ T978] plantronics 0003:047F:FFFF.0077: No inputs registered, leaving [ 844.105824][T26856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9319'. [ 844.136339][T26856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9319'. [ 844.224458][ T978] plantronics 0003:047F:FFFF.0077: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 844.391515][ T978] usb 3-1: USB disconnect, device number 90 [ 845.105236][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 845.105258][ T30] audit: type=1326 audit(1749967771.997:6091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26880 comm="syz.2.9331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40c3f8e929 code=0x0 [ 845.513240][T26890] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 845.550721][T26890] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 845.603477][T26892] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9336'. [ 845.847800][T26898] syzkaller1: entered promiscuous mode [ 845.878091][T26898] syzkaller1: entered allmulticast mode [ 846.487622][T26919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9347'. [ 846.786465][T26928] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 847.525219][T12358] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 847.579276][ T978] delete_channel: no stack [ 847.591074][T26951] loop2: detected capacity change from 0 to 7 [ 847.603939][ T8450] Dev loop2: unable to read RDB block 7 [ 847.611554][ T8450] loop2: unable to read partition table [ 847.617629][ T8450] loop2: partition table beyond EOD, truncated [ 847.660966][T26951] Dev loop2: unable to read RDB block 7 [ 847.667644][T26951] loop2: unable to read partition table [ 847.677916][T26951] loop2: partition table beyond EOD, truncated [ 847.688140][T26951] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 847.697893][T12358] usb 3-1: Using ep0 maxpacket: 8 [ 847.709633][T12364] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 847.734344][T12358] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 847.757291][T12358] usb 3-1: config 0 has no interface number 0 [ 847.788688][T12358] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 847.847519][T12358] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 847.868629][T12358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.895823][T12358] usb 3-1: config 0 descriptor?? [ 847.917041][T12358] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 847.964639][T12364] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 847.991822][T12364] usb 4-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 848.023607][T12364] usb 4-1: Product: syz [ 848.027855][T12364] usb 4-1: Manufacturer: syz [ 848.051813][T12364] usb 4-1: SerialNumber: syz [ 848.084558][T12364] usb 4-1: config 0 descriptor?? [ 848.108748][T12364] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 848.138080][ T978] usb 3-1: USB disconnect, device number 91 [ 848.499279][T12331] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 848.679228][T12331] usb 2-1: Using ep0 maxpacket: 16 [ 848.695570][T12331] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 848.725114][T12331] usb 2-1: config 0 has no interface number 0 [ 848.754104][T12331] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 848.782729][T12331] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 848.806345][T12331] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 848.848952][T12331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.878759][T12331] usb 2-1: Product: syz [ 848.885903][T12331] usb 2-1: Manufacturer: syz [ 848.901394][T12331] usb 2-1: SerialNumber: syz [ 848.923035][T12331] usb 2-1: config 0 descriptor?? [ 848.937670][T26959] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 848.942864][T12364] usb 4-1: USB disconnect, device number 97 [ 848.977449][T26959] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 849.076301][T26807] Set syz1 is full, maxelem 65536 reached [ 849.163014][T26975] binder: 26974:26975 ioctl c0306201 200000001d40 returned -14 [ 849.210805][T26959] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 849.228831][T26959] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 849.864522][T12331] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 849.892660][T12331] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 849.937678][T12331] asix 2-1:0.251: probe with driver asix failed with error -71 [ 849.968617][T12331] usb 2-1: USB disconnect, device number 72 [ 850.039588][T12364] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 850.211370][T12364] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 850.238432][T12364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 850.260085][T12364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 850.299801][ T978] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 850.301629][T12364] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 850.348514][T12364] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 850.359466][T12364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.371446][T27006] IPVS: ip_vs_add_dest(): server weight less than zero [ 850.412685][T12364] usb 3-1: config 0 descriptor?? [ 850.476501][ T978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.502688][ T978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 850.539002][ T978] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 850.564659][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 850.580488][ T978] usb 4-1: SerialNumber: syz [ 850.808440][ T978] usb 4-1: 0:2 : does not exist [ 850.812633][T27021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9393'. [ 850.828818][T27021] netlink: 'syz.0.9393': attribute type 7 has an invalid length. [ 850.842339][T27021] netlink: 'syz.0.9393': attribute type 8 has an invalid length. [ 850.855082][T27021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9393'. [ 850.868989][T12364] plantronics 0003:047F:FFFF.0078: ignoring exceeding usage max [ 850.878145][ T978] usb 4-1: USB disconnect, device number 98 [ 850.898941][T12364] plantronics 0003:047F:FFFF.0078: No inputs registered, leaving [ 850.931503][T27021] gretap0: entered promiscuous mode [ 850.948055][T12364] plantronics 0003:047F:FFFF.0078: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 850.950048][T27021] batadv_slave_1: entered promiscuous mode [ 850.982115][T27021] hsr1: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network [ 850.984011][ T8450] udevd[8450]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 850.996350][T27021] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 851.326961][T27032] vlan3: entered promiscuous mode [ 851.332398][T27032] bond0: entered promiscuous mode [ 851.337912][T27032] bond_slave_0: entered promiscuous mode [ 851.357525][T27032] bond_slave_1: entered promiscuous mode [ 851.367200][T27032] team0: entered promiscuous mode [ 851.378708][T27032] team_slave_0: entered promiscuous mode [ 851.388901][T27032] team_slave_1: entered promiscuous mode [ 851.489682][T27038] sctp: [Deprecated]: syz.3.9399 (pid 27038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 851.489682][T27038] Use struct sctp_sack_info instead [ 852.861611][T27071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9414'. [ 853.454706][T12364] usb 3-1: reset high-speed USB device number 92 using dummy_hcd [ 853.579625][T12358] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 853.633068][T12364] usb 3-1: device firmware changed [ 853.666733][ T978] usb 3-1: USB disconnect, device number 92 [ 853.764274][T12358] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.785459][T12358] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 853.807285][T12358] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 853.819298][T12358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 853.837775][T12358] usb 2-1: SerialNumber: syz [ 853.889718][ T978] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 854.087648][T12358] usb 2-1: 0:2 : does not exist [ 854.093953][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.132483][ T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.179567][ T978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 854.196449][T12358] usb 2-1: USB disconnect, device number 73 [ 854.256482][ T978] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 854.298909][ T8450] udevd[8450]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.317572][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.354813][ T978] usb 3-1: config 0 descriptor?? [ 854.787563][T27124] sctp: [Deprecated]: syz.3.9436 (pid 27124) Use of struct sctp_assoc_value in delayed_ack socket option. [ 854.787563][T27124] Use struct sctp_sack_info instead [ 854.847289][ T978] plantronics 0003:047F:FFFF.0079: No inputs registered, leaving [ 854.856891][T12331] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 854.910158][ T978] plantronics 0003:047F:FFFF.0079: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 855.029929][T12331] usb 5-1: Using ep0 maxpacket: 8 [ 855.063278][T12331] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 855.079328][T12331] usb 5-1: config 0 has no interface number 0 [ 855.099701][T12331] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 855.137578][T12331] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 855.154415][ T978] usb 3-1: USB disconnect, device number 93 [ 855.173213][T12331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.208206][T12331] usb 5-1: config 0 descriptor?? [ 855.235263][T12331] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 855.250180][T27133] netlink: 'syz.3.9439': attribute type 1 has an invalid length. [ 855.678555][T12364] usb 5-1: USB disconnect, device number 93 [ 856.031733][T27145] input: syz0 as /devices/virtual/input/input90 [ 856.343140][T27158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.569570][T12364] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 856.685625][T27164] netlink: 'syz.1.9453': attribute type 1 has an invalid length. [ 856.704181][T27164] netlink: 'syz.1.9453': attribute type 2 has an invalid length. [ 856.739595][T12364] usb 3-1: Using ep0 maxpacket: 8 [ 856.756380][T12364] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 856.771048][T12364] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 856.803619][T12364] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 856.824886][T12364] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 856.859245][T12364] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.897051][T12364] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 856.908336][T12364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.155611][T12364] usb 3-1: usb_control_msg returned -32 [ 857.170037][T12364] usbtmc 3-1:16.0: can't read capabilities [ 857.732188][ T978] usb 3-1: USB disconnect, device number 94 [ 858.829325][ T30] audit: type=1326 audit(1749967785.717:6092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.2.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c3f8e929 code=0x7ffc0000 [ 858.925753][ T30] audit: type=1326 audit(1749967785.727:6093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.2.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c3f2ab19 code=0x7ffc0000 [ 858.997036][ T30] audit: type=1326 audit(1749967785.727:6094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.2.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c3f2ab19 code=0x7ffc0000 [ 859.060551][ T30] audit: type=1326 audit(1749967785.727:6095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.2.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c3f2ab19 code=0x7ffc0000 [ 859.151816][ T30] audit: type=1326 audit(1749967785.727:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.2.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c3f2ab19 code=0x7ffc0000 [ 859.413965][ T30] audit: type=1326 audit(1749967785.727:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.2.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c3f2ab19 code=0x7ffc0000 [ 859.553520][ T30] audit: type=1326 audit(1749967785.727:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.2.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c3f2ab19 code=0x7ffc0000 [ 859.575999][ C0] vkms_vblank_simulate: vblank timer overrun [ 859.798402][ T30] audit: type=1326 audit(1749967785.727:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.2.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c3f2ab19 code=0x7ffc0000 [ 859.904789][ T30] audit: type=1326 audit(1749967785.727:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.2.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c3f2ab19 code=0x7ffc0000 [ 859.927182][ C0] vkms_vblank_simulate: vblank timer overrun [ 860.064135][ T30] audit: type=1326 audit(1749967785.727:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27222 comm="syz.2.9477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40c3f2ab19 code=0x7ffc0000 [ 861.283928][T27281] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 861.819506][T27298] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (192) [ 862.171535][T27309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.443822][T27323] sctp: [Deprecated]: syz.4.9519 (pid 27323) Use of int in max_burst socket option. [ 862.443822][T27323] Use struct sctp_assoc_value instead [ 862.987222][T27335] syzkaller1: entered promiscuous mode [ 862.995229][T27335] syzkaller1: entered allmulticast mode [ 863.569422][T27347] bond0: entered promiscuous mode [ 863.583738][T27347] bond_slave_0: entered promiscuous mode [ 863.593254][T27347] bond_slave_1: entered promiscuous mode [ 864.359676][T12331] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 864.478114][T27382] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9544'. [ 864.531803][T12331] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 864.551644][T12331] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 864.579079][T12331] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 864.598953][T12331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.882997][T12331] usb 5-1: GET_CAPABILITIES returned 0 [ 864.898927][T12331] usbtmc 5-1:16.0: can't read capabilities [ 865.113992][T12364] usb 5-1: USB disconnect, device number 94 [ 866.172198][T27427] tipc: New replicast peer: 0.0.0.0 [ 866.215652][T27427] tipc: Enabled bearer , priority 10 [ 866.290925][T27430] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 867.419261][T12364] tipc: Node number set to 11552 [ 867.560031][T12364] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 867.725112][T12364] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 867.777806][T12364] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 867.798403][T12364] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 867.854282][T12364] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 867.863921][T12364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.889329][T12364] usb 2-1: Product: syz [ 867.893639][T12364] usb 2-1: Manufacturer: syz [ 867.911300][T12364] usb 2-1: SerialNumber: syz [ 868.171475][T12364] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 868.450672][T12364] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 868.632697][T12364] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 868.641845][T12364] usb 4-1: config 0 has no interface number 0 [ 868.657004][T12364] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 868.681815][T12364] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 868.704961][T12364] usb 4-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 868.715083][T12364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.733021][T12358] usb 2-1: USB disconnect, device number 74 [ 868.744775][T12358] usblp0: removed [ 868.759831][T12364] usb 4-1: Product: syz [ 868.775174][T12364] usb 4-1: Manufacturer: syz [ 868.781700][T12364] usb 4-1: SerialNumber: syz [ 868.794009][T12364] usb 4-1: config 0 descriptor?? [ 868.809734][T12364] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 869.625596][T12364] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input91 [ 869.823652][T12364] usb 4-1: USB disconnect, device number 99 [ 870.005834][T27511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9596'. [ 870.388543][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 870.388567][ T30] audit: type=1326 audit(1749967797.277:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c3f8e929 code=0x7ffc0000 [ 870.458570][ T30] audit: type=1326 audit(1749967797.277:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c3f8e929 code=0x7ffc0000 [ 870.500349][ T30] audit: type=1326 audit(1749967797.317:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f40c3f8e929 code=0x7ffc0000 [ 870.523218][ T30] audit: type=1326 audit(1749967797.317:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c3f8e929 code=0x7ffc0000 [ 870.547073][ T30] audit: type=1326 audit(1749967797.317:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c3f8e929 code=0x7ffc0000 [ 870.576330][ T30] audit: type=1326 audit(1749967797.317:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f40c3f8e929 code=0x7ffc0000 [ 870.599433][ T30] audit: type=1326 audit(1749967797.447:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c3f8e929 code=0x7ffc0000 [ 870.622217][ T30] audit: type=1326 audit(1749967797.447:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27524 comm="syz.2.9601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40c3f8e929 code=0x7ffc0000 [ 872.024947][T27554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 872.067288][T27567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9619'. [ 872.240145][T27571] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9620'. [ 872.430022][T12364] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 872.509887][T27579] input: syz1 as /devices/virtual/input/input92 [ 872.601175][T12364] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 872.624681][T12364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 872.650270][T12364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 872.672728][T12364] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 872.719710][T12358] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 872.737841][T12364] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 872.764444][T12364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.782966][T12364] usb 2-1: config 0 descriptor?? [ 872.788916][T27570] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 872.899341][T12358] usb 4-1: Using ep0 maxpacket: 16 [ 872.918364][T12358] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 872.937700][T12358] usb 4-1: config 0 has no interface number 0 [ 872.950170][T12358] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 872.962212][T12358] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 872.979530][T12358] usb 4-1: config 0 interface 41 has no altsetting 0 [ 873.047145][T12358] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 873.057151][T12358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.071418][T12358] usb 4-1: Product: syz [ 873.075720][T12358] usb 4-1: Manufacturer: syz [ 873.094387][T12358] usb 4-1: SerialNumber: syz [ 873.116414][T12358] usb 4-1: config 0 descriptor?? [ 873.127341][T27577] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 873.142814][T27577] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 873.245358][T12364] plantronics 0003:047F:FFFF.007A: reserved main item tag 0xd [ 873.268514][T12364] plantronics 0003:047F:FFFF.007A: No inputs registered, leaving [ 873.310591][T12364] plantronics 0003:047F:FFFF.007A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 873.369771][T27577] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 873.387571][T27577] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 873.389451][T12331] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 873.533050][T12364] usb 2-1: USB disconnect, device number 75 [ 873.573826][T12331] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 873.600320][T12331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.622391][T12331] usb 3-1: config 0 descriptor?? [ 874.046586][T12331] ath6kl: Failed to submit usb control message: -71 [ 874.055055][T12331] ath6kl: unable to send the bmi data to the device: -71 [ 874.075285][T12331] ath6kl: Unable to send get target info: -71 [ 874.102746][T12331] ath6kl: Failed to init ath6kl core: -71 [ 874.148083][T12331] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 874.201643][T12331] usb 3-1: USB disconnect, device number 95 [ 874.234538][T12358] dm9601 4-1:0.41 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 874.324821][T12358] dm9601 4-1:0.41 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, ae:d2:e1:a3:12:0f [ 874.388966][T12358] usb 4-1: USB disconnect, device number 100 [ 874.427574][T12358] dm9601 4-1:0.41 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 876.269684][T12358] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 876.439305][T12358] usb 2-1: Using ep0 maxpacket: 8 [ 876.457063][T12358] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 876.478662][T12358] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 876.489486][T12358] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 876.499836][T12358] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.513205][T12358] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 876.522742][T12358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.554099][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.560894][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.744864][T12358] usb 2-1: GET_CAPABILITIES returned 0 [ 876.759611][T12358] usbtmc 2-1:16.0: can't read capabilities [ 876.969174][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 876.992313][T27637] usbtmc 2-1:16.0: Unable to send data, error -71 [ 877.021283][T12358] usb 2-1: USB disconnect, device number 76 [ 877.415214][T27656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9656'. [ 877.435534][T27657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9657'. [ 877.446135][T27656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9656'. [ 877.457172][T27657] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9657'. [ 877.648391][T27664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9660'. [ 878.979859][T12358] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 879.170983][T12358] usb 4-1: Using ep0 maxpacket: 32 [ 879.187394][T12358] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 879.203066][T12358] usb 4-1: config 0 has no interface number 0 [ 879.227139][T12358] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 879.253789][T12358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.263996][T12358] usb 4-1: Product: syz [ 879.268312][T12358] usb 4-1: Manufacturer: syz [ 879.277189][T12358] usb 4-1: SerialNumber: syz [ 879.287246][T12358] usb 4-1: config 0 descriptor?? [ 879.301482][T12358] smsc95xx v2.0.0 [ 879.402153][T12331] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 879.561746][T12331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 879.576441][T12331] usb 2-1: config 0 has no interfaces? [ 879.583417][T12331] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 879.596260][T12331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.609658][T12331] usb 2-1: config 0 descriptor?? [ 879.887924][T12331] usb 2-1: USB disconnect, device number 77 [ 880.117865][T12358] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 880.318680][T12358] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 880.335665][T12358] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 880.355085][T12358] usb 4-1: USB disconnect, device number 101 [ 880.759242][T12364] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 880.939311][T12364] usb 2-1: Using ep0 maxpacket: 32 [ 880.955545][T12364] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 880.993835][T12364] usb 2-1: config 0 has no interface number 0 [ 881.004203][T12364] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 881.018133][T12364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.045611][T12364] usb 2-1: Product: syz [ 881.058737][T12364] usb 2-1: Manufacturer: syz [ 881.075704][T12364] usb 2-1: SerialNumber: syz [ 881.101616][T12364] usb 2-1: config 0 descriptor?? [ 881.150160][T12364] smsc95xx v2.0.0 [ 881.425528][T27767] netlink: 566 bytes leftover after parsing attributes in process `syz.4.9705'. [ 882.189947][T12364] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 882.229025][T12364] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 882.253996][T12364] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 882.266101][T12364] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 882.293409][T12364] usb 2-1: USB disconnect, device number 78 [ 883.612744][T12331] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 883.820144][T12331] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 883.845295][T12331] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 883.892044][T12331] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 883.938891][T12331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 883.998819][T12331] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.032844][T12331] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.085358][T12331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 884.109285][T12331] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.116476][T27839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 884.143112][T12331] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.155407][T12331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 884.170701][T12331] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.195793][T12331] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.217550][T12331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 884.238908][T12331] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.247564][T27841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9738'. [ 884.259039][T12331] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.295818][T12331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 884.319704][T12331] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.339493][T12331] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.359716][T12331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 884.378394][T12331] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.393289][T12331] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.415321][T12331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 884.430551][T12331] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 884.454588][T12331] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 884.479185][T12331] usb 2-1: config 0 interface 0 has no altsetting 0 [ 884.507919][T12331] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 884.532464][T12331] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 884.549636][T12331] usb 2-1: Product: syz [ 884.567926][T12331] usb 2-1: Manufacturer: syz [ 884.573186][T12331] usb 2-1: SerialNumber: syz [ 884.584560][T12331] usb 2-1: config 0 descriptor?? [ 884.602216][T12331] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 884.978760][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 884.979365][T12358] usb 2-1: USB disconnect, device number 79 [ 884.992377][T27857] yurex 2-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 885.015713][T12358] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 885.973467][T27893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9760'. [ 886.092955][T27900] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9763'. [ 886.104282][T27900] netlink: 'syz.1.9763': attribute type 7 has an invalid length. [ 886.116893][T27900] netlink: 'syz.1.9763': attribute type 8 has an invalid length. [ 886.125812][T27900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9763'. [ 886.146459][T27900] gretap0: entered promiscuous mode [ 886.176213][T27900] gretap0: left promiscuous mode [ 886.469777][T12331] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 886.649359][T12331] usb 4-1: Using ep0 maxpacket: 32 [ 886.661589][T12331] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 886.699636][T12331] usb 4-1: config 0 has no interface number 0 [ 886.705866][T12331] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 886.739189][T12331] usb 4-1: config 0 interface 85 has no altsetting 0 [ 886.770766][T12331] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 886.783423][T12331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.806413][T12331] usb 4-1: Product: syz [ 886.810792][T12331] usb 4-1: Manufacturer: syz [ 886.815625][T12331] usb 4-1: SerialNumber: syz [ 886.849343][T12331] usb 4-1: config 0 descriptor?? [ 887.068755][T27903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.100309][T27903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.774515][T12331] appletouch 4-1:0.85: Geyser mode initialized. [ 887.791625][T12331] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input94 [ 887.854881][T12331] usb 4-1: USB disconnect, device number 102 [ 887.854989][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 888.049043][T27945] xfrm0: entered allmulticast mode [ 888.060948][T12331] appletouch 4-1:0.85: input: appletouch disconnected [ 888.501640][ T978] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 888.703770][ T978] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 888.733127][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.796034][ T978] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 888.814634][ T978] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 888.839295][ T978] usb 2-1: Manufacturer: syz [ 888.857355][ T978] usb 2-1: config 0 descriptor?? [ 889.009276][ T978] rc_core: IR keymap rc-hauppauge not found [ 889.022409][ T978] Registered IR keymap rc-empty [ 889.040187][ T978] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 889.068328][ T978] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input95 [ 889.106337][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 889.125969][ T978] usb 2-1: USB disconnect, device number 80 [ 889.732174][T27989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9799'. [ 889.782387][T27958] IPVS: You probably need to specify IP address on multicast interface. [ 889.850204][T27958] IPVS: Error connecting to the multicast addr [ 889.850827][T27995] loop6: detected capacity change from 0 to 1 [ 890.028010][T27995] Dev loop6: unable to read RDB block 1 [ 890.068028][T27995] loop6: unable to read partition table [ 890.087888][T27995] loop6: partition table beyond EOD, truncated [ 890.118211][T27995] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 891.570086][ T978] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 891.769650][ T978] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 891.789155][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.820777][ T978] usb 4-1: config 0 descriptor?? [ 891.851439][ T978] cp210x 4-1:0.0: cp210x converter detected [ 892.265952][ T978] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 892.369358][T12331] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 892.504635][ T978] usb 4-1: cp210x converter now attached to ttyUSB0 [ 892.549493][T12331] usb 3-1: Using ep0 maxpacket: 16 [ 892.568746][T12331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 892.639327][T12331] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 892.649372][T12331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.662146][T12331] usb 3-1: config 0 descriptor?? [ 892.701364][T12358] usb 4-1: USB disconnect, device number 103 [ 892.718348][T12331] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input96 [ 892.833801][T12358] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 892.938995][T12358] cp210x 4-1:0.0: device disconnected [ 893.100065][T12331] usb 3-1: USB disconnect, device number 96 [ 893.106922][ T5188] bcm5974 3-1:0.0: could not read from device [ 893.138127][ T7059] bcm5974 3-1:0.0: could not read from device [ 893.776754][T28079] veth0_to_bridge: entered promiscuous mode [ 893.797397][T28077] veth0_to_bridge: left promiscuous mode [ 894.170092][T12364] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 894.201172][ T30] audit: type=1326 audit(1749967821.087:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28098 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1390d8e929 code=0x7ffc0000 [ 894.223692][ C0] vkms_vblank_simulate: vblank timer overrun [ 894.229260][T12358] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 894.272247][ T30] audit: type=1326 audit(1749967821.087:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28098 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1390d8e929 code=0x7ffc0000 [ 894.294731][ C0] vkms_vblank_simulate: vblank timer overrun [ 894.339527][T12364] usb 5-1: Using ep0 maxpacket: 32 [ 894.360073][ T30] audit: type=1326 audit(1749967821.147:6190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28098 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1390d8e929 code=0x7ffc0000 [ 894.392897][T12364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.406696][ T30] audit: type=1326 audit(1749967821.147:6191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28098 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1390d8e929 code=0x7ffc0000 [ 894.419220][T12364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 894.450771][T12358] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 894.457554][ T30] audit: type=1326 audit(1749967821.147:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28098 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1390d8e929 code=0x7ffc0000 [ 894.481537][T12364] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 894.497811][T12358] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 894.512566][T12358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 894.513108][ T30] audit: type=1326 audit(1749967821.147:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28098 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1390d8e929 code=0x7ffc0000 [ 894.530097][T12358] usb 4-1: SerialNumber: syz [ 894.543559][ C0] vkms_vblank_simulate: vblank timer overrun [ 894.547938][ T30] audit: type=1326 audit(1749967821.147:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28098 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1390d8e929 code=0x7ffc0000 [ 894.549869][T12364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.555145][ T30] audit: type=1326 audit(1749967821.147:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28098 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1390d8e929 code=0x7ffc0000 [ 894.576892][ C0] vkms_vblank_simulate: vblank timer overrun [ 894.608245][ C0] vkms_vblank_simulate: vblank timer overrun [ 894.624002][ T30] audit: type=1326 audit(1749967821.147:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28098 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f1390d8e929 code=0x7ffc0000 [ 894.647057][ T30] audit: type=1326 audit(1749967821.147:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28098 comm="syz.0.9845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1390d8e929 code=0x7ffc0000 [ 894.659674][T12364] usb 5-1: config 0 descriptor?? [ 895.134788][T12364] savu 0003:1E7D:2D5A.007B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 895.299432][T12358] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 895.384367][T12358] usb 5-1: USB disconnect, device number 95 [ 895.696550][T12358] usb 4-1: USB disconnect, device number 104 [ 895.725049][T12358] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 896.199443][T12364] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 896.417074][T12364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.433072][T12364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.443950][T12364] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 896.458595][T12364] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 896.488305][T12364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.565212][T12364] usb 2-1: config 0 descriptor?? [ 897.000217][T12364] plantronics 0003:047F:FFFF.007C: reserved main item tag 0xd [ 897.024287][T12364] plantronics 0003:047F:FFFF.007C: No inputs registered, leaving [ 897.057554][T12364] plantronics 0003:047F:FFFF.007C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 897.322060][T12358] usb 2-1: USB disconnect, device number 81 [ 897.358188][ T978] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 897.446653][T28172] fuse: Bad value for 'fd' [ 897.539297][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 897.577104][ T978] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 897.609337][ T978] usb 5-1: config 0 has no interface number 0 [ 897.615666][ T978] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 897.688758][ T978] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 897.739444][ T978] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 897.778950][ T978] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 897.831779][ T978] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 897.848681][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.883343][ T978] usb 5-1: config 0 descriptor?? [ 897.950395][ T978] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 898.198476][T12358] usb 5-1: USB disconnect, device number 96 [ 898.234420][T12358] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 898.908852][T28222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 899.945943][T28253] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.9898'. [ 901.512500][T28292] vlan3: entered promiscuous mode [ 901.517626][T28292] bond0: entered promiscuous mode [ 901.545239][T28292] bond3: entered promiscuous mode [ 901.564507][T28292] team0: entered promiscuous mode [ 901.570940][T28292] macvlan0: entered promiscuous mode [ 901.578316][T28292] bond0: (slave vlan3): Opening slave failed [ 902.479413][T12331] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 902.641433][T12331] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.667023][T12331] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 902.676233][ T978] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 902.704979][T12331] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 902.721362][T12331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.733722][T12331] usb 2-1: Product: syz [ 902.738136][T12331] usb 2-1: Manufacturer: syz [ 902.743916][T12331] usb 2-1: SerialNumber: syz [ 902.839631][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 902.867637][ T978] usb 4-1: config 0 interface 0 has no altsetting 0 [ 902.889914][ T978] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 902.904566][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.931538][ T978] usb 4-1: Product: syz [ 902.935834][ T978] usb 4-1: Manufacturer: syz [ 902.970778][T12331] usb 2-1: 0:2 : does not exist [ 902.978117][ T978] usb 4-1: SerialNumber: syz [ 902.994741][T12331] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 903.010498][ T978] usb 4-1: config 0 descriptor?? [ 903.072508][T12331] usb 2-1: USB disconnect, device number 82 [ 903.223480][ T8450] udevd[8450]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 903.470352][ T978] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 903.729067][T28344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9936'. [ 904.117335][ T978] usb 4-1: USB disconnect, device number 105 [ 904.779429][T12358] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 904.939499][T12358] usb 2-1: Using ep0 maxpacket: 8 [ 904.964610][T12358] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 905.007073][T12358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.040374][T12358] usb 2-1: config 0 descriptor?? [ 905.256195][T12358] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 906.069789][T12358] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 906.085836][T12358] asix 2-1:0.0: probe with driver asix failed with error -71 [ 906.134588][T12358] usb 2-1: USB disconnect, device number 83 [ 906.852331][T28408] syzkaller1: entered promiscuous mode [ 906.873864][T28408] syzkaller1: entered allmulticast mode [ 908.125487][T28460] input: syz0 as /devices/virtual/input/input98 [ 908.137624][T28460] input: failed to attach handler leds to device input98, error: -6 [ 908.889983][T28474] netlink: 'syz.2.9977': attribute type 29 has an invalid length. [ 908.931872][T28474] netlink: 'syz.2.9977': attribute type 29 has an invalid length. [ 908.957053][T28474] netlink: 500 bytes leftover after parsing attributes in process `syz.2.9977'. [ 909.579501][T12358] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 909.729414][T12358] usb 5-1: Using ep0 maxpacket: 16 [ 909.737617][T12358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.781361][T12358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.803562][T12358] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 909.863629][T12358] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 909.884780][T12358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.912926][T12358] usb 5-1: config 0 descriptor?? [ 910.376319][T12358] shield 0003:0955:7214.007D: unknown main item tag 0x0 [ 910.395504][T12358] shield 0003:0955:7214.007D: unknown main item tag 0x0 [ 910.409381][T12358] shield 0003:0955:7214.007D: unknown main item tag 0x0 [ 910.425017][T12358] shield 0003:0955:7214.007D: unknown main item tag 0x0 [ 910.459256][T12364] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 910.469060][T12358] shield 0003:0955:7214.007D: unknown main item tag 0x0 [ 910.506326][T12358] input: HID 0955:7214 Haptics as /devices/virtual/input/input99 [ 910.626722][T12358] shield 0003:0955:7214.007D: Registered Thunderstrike controller [ 910.644067][T12358] shield 0003:0955:7214.007D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 910.661431][T12364] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 910.722467][T12364] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 910.733917][T12360] shield 0003:0955:7214.007D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 910.764654][T12358] usb 5-1: USB disconnect, device number 97 [ 910.785158][T12364] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 910.803725][T12360] shield 0003:0955:7214.007D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 910.833670][T12364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 910.853052][T12360] shield 0003:0955:7214.007D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 910.866855][T12364] usb 4-1: SerialNumber: syz [ 910.896107][T12360] shield 0003:0955:7214.007D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 911.229909][T12364] usb 4-1: 0:2 : does not exist [ 911.292011][T12364] usb 4-1: USB disconnect, device number 106 [ 911.428684][ T8450] udevd[8450]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 911.494421][T28513] tun0: tun_chr_ioctl cmd 1074025675 [ 911.502354][T28513] tun0: persist enabled [ 911.517567][T28513] tun0: tun_chr_ioctl cmd 1074025675 [ 911.525545][T28513] tun0: persist disabled [ 911.601542][T12358] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 911.776851][T12358] usb 3-1: config index 0 descriptor too short (expected 31, got 27) [ 911.811435][T12358] usb 3-1: config 1 interface 0 has no altsetting 0 [ 911.850411][T12358] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 911.860017][T12358] usb 3-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 911.868375][T12358] usb 3-1: Product: syz [ 911.890300][T12358] usb 3-1: Manufacturer: syz [ 911.895098][T12358] usb 3-1: SerialNumber: syz [ 912.171415][T12358] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 97 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 912.201013][T12358] usb 3-1: USB disconnect, device number 97 [ 912.233850][T12358] usblp0: removed [ 912.545451][T28548] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 912.569933][T12358] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 912.823642][T28562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10014'. [ 912.899550][T28566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10016'. [ 913.377062][T28588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10027'. [ 913.489497][ T978] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 913.562135][T28594] macvlan1: entered promiscuous mode [ 913.568842][T28594] ipvlan0: entered promiscuous mode [ 913.577444][T28594] ipvlan0: left promiscuous mode [ 913.583447][T28594] macvlan1: left promiscuous mode [ 913.599640][T12358] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 913.664995][ T978] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 913.684174][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 913.707042][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 913.725446][ T978] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 913.754555][ T978] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 913.789516][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.804814][ T978] usb 4-1: config 0 descriptor?? [ 914.228914][ T978] plantronics 0003:047F:FFFF.007E: ignoring exceeding usage max [ 914.252862][T28613] binder: 28611:28613 ioctl c0306201 2000000003c0 returned -14 [ 914.266917][ T978] plantronics 0003:047F:FFFF.007E: No inputs registered, leaving [ 914.302535][ T978] plantronics 0003:047F:FFFF.007E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 914.431200][T28617] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10041'. [ 914.489683][ T5919] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 914.651687][ T5919] usb 3-1: config 0 has an invalid interface number: 144 but max is 0 [ 914.662726][ T5919] usb 3-1: config 0 has no interface number 0 [ 914.668932][ T5919] usb 3-1: too many endpoints for config 0 interface 144 altsetting 138: 68, using maximum allowed: 30 [ 914.685913][ T5919] usb 3-1: config 0 interface 144 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 914.699924][ T5919] usb 3-1: config 0 interface 144 has no altsetting 0 [ 914.700483][T28627] syzkaller1: entered promiscuous mode [ 914.706876][ T5919] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 914.714576][T28627] syzkaller1: entered allmulticast mode [ 914.732923][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.748456][ T5919] usb 3-1: config 0 descriptor?? [ 914.770493][ T5919] cp210x 3-1:0.144: cp210x converter detected [ 914.894183][T12358] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 915.051707][T12358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.069225][T12358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.082920][T12358] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 915.097218][T12358] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 915.106732][T12358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.120150][T12358] usb 2-1: config 0 descriptor?? [ 915.177178][ T5919] cp210x 3-1:0.144: failed to get vendor val 0x000e size 3: -71 [ 915.211037][ T5919] usb 3-1: cp210x converter now attached to ttyUSB0 [ 915.226473][ T5919] usb 3-1: USB disconnect, device number 98 [ 915.253921][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 915.275819][ T5919] cp210x 3-1:0.144: device disconnected [ 915.542321][T12358] plantronics 0003:047F:FFFF.007F: No inputs registered, leaving [ 915.555433][T12364] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 915.571013][T12358] plantronics 0003:047F:FFFF.007F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 915.719950][T12364] usb 5-1: Using ep0 maxpacket: 8 [ 915.734809][T12364] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 915.757995][T12364] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 915.771688][T12364] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 915.786914][T12364] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 915.800208][T12364] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 915.809423][T12364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.831248][T12364] hub 5-1:1.0: bad descriptor, ignoring hub [ 915.837498][T12364] hub 5-1:1.0: probe with driver hub failed with error -5 [ 915.849970][T12358] usb 2-1: USB disconnect, device number 84 [ 915.893609][T12364] cdc_wdm 5-1:1.0: skipping garbage [ 915.904584][T12364] cdc_wdm 5-1:1.0: skipping garbage [ 915.928323][T12364] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 915.952988][T12364] cdc_wdm 5-1:1.0: Unknown control protocol [ 916.117010][T28644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 916.202930][T12331] usb 5-1: USB disconnect, device number 98 [ 916.223535][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 916.223558][ T30] audit: type=1800 audit(1749967843.117:6202): pid=28649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10055" name="nullb0" dev="devtmpfs" ino=3637 res=0 errno=0 [ 916.251280][ C1] vkms_vblank_simulate: vblank timer overrun [ 916.334410][ T978] usb 4-1: USB disconnect, device number 107 [ 917.282075][T28678] binder: 28676:28678 ioctl c0306201 200000000480 returned -14 [ 917.489893][T12364] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 917.669193][T12364] usb 3-1: Using ep0 maxpacket: 32 [ 917.680828][T12364] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 917.689040][T12364] usb 3-1: config 0 has no interface number 0 [ 917.706310][T12364] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 917.727047][T12364] usb 3-1: config 0 interface 85 has no altsetting 0 [ 917.738385][T12364] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 917.762556][T12364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.773405][T12364] usb 3-1: Product: syz [ 917.777753][T12364] usb 3-1: Manufacturer: syz [ 917.783023][T12364] usb 3-1: SerialNumber: syz [ 917.793956][T12364] usb 3-1: config 0 descriptor?? [ 918.119278][ T978] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 918.269372][ T978] usb 4-1: Using ep0 maxpacket: 16 [ 918.277059][ T978] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 918.286533][ T978] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.297100][ T978] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.322560][ T978] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.339268][ T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.356101][ T978] usb 4-1: Product: syz [ 918.365836][ T978] usb 4-1: Manufacturer: syz [ 918.378874][ T978] usb 4-1: SerialNumber: syz [ 918.437173][T12364] appletouch 3-1:0.85: Geyser mode initialized. [ 918.463376][T12364] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input101 [ 918.664408][T12331] usb 3-1: USB disconnect, device number 99 [ 918.746866][T12331] appletouch 3-1:0.85: input: appletouch disconnected [ 918.823324][ T978] usb 4-1: 0:2 : does not exist [ 919.270317][T12331] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 919.467221][T12331] usb 2-1: Using ep0 maxpacket: 32 [ 919.476515][ T978] usb 4-1: USB disconnect, device number 108 [ 919.484730][T12331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 919.507694][T12331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 919.544716][ T8450] udevd[8450]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.547278][T12331] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 919.597180][T12331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.634859][T12331] usb 2-1: config 0 descriptor?? [ 919.696907][T28729] bond4 (unregistering): Released all slaves [ 920.091402][T12331] savu 0003:1E7D:2D5A.0080: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 920.139916][T12364] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 920.312069][T12364] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 920.320753][T12364] usb 3-1: config 0 has no interface number 0 [ 920.326908][T12364] usb 3-1: config 0 interface 196 altsetting 72 has an invalid descriptor for endpoint zero, skipping [ 920.338193][T12364] usb 3-1: config 0 interface 196 has no altsetting 0 [ 920.347909][T12364] usb 3-1: New USB device found, idVendor=1b3d, idProduct=0104, bcdDevice=bd.56 [ 920.358442][T12364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.361512][T12331] usb 2-1: USB disconnect, device number 85 [ 920.375245][T12364] usb 3-1: config 0 descriptor?? [ 920.596058][T12364] usb 3-1: string descriptor 0 read error: -71 [ 920.620250][T12364] ftdi_sio 3-1:0.196: FTDI USB Serial Device converter detected [ 920.647845][T12364] ftdi_sio ttyUSB0: unknown device type: 0xbd56 [ 920.669548][T12364] usb 3-1: USB disconnect, device number 100 [ 920.684342][T12364] ftdi_sio 3-1:0.196: device disconnected [ 921.528719][T28764] input: syz0 as /devices/virtual/input/input102 [ 921.646502][T28766] binder: 28765:28766 ioctl c0306201 200000000c00 returned -14 [ 921.710789][T12331] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 921.873394][T28774] loop3: detected capacity change from 0 to 1 [ 921.884351][T28774] Dev loop3: unable to read RDB block 1 [ 921.893500][T28774] loop3: AHDI p1 [ 921.895075][T12331] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 921.897344][T28774] loop3: partition table partially beyond EOD, truncated [ 921.911079][T12331] usb 3-1: config 0 has no interface number 0 [ 921.929347][T12331] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 921.944881][T12331] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 921.956275][T12331] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 921.968690][T12331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.984100][T12331] usb 3-1: config 0 descriptor?? [ 921.995778][T28762] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 922.040468][T12331] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 922.268749][T12331] usb 3-1: USB disconnect, device number 101 [ 922.275015][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 922.581318][T28787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10113'. [ 922.628002][T28787] team1: entered promiscuous mode [ 922.633519][T28787] team1: entered allmulticast mode [ 922.640331][T28787] 8021q: adding VLAN 0 to HW filter on device team1 [ 924.307943][T12364] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 924.511561][T12364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.543630][T12364] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 924.564905][T12364] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 924.579932][T12364] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 924.616162][T12364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.638094][T12364] usb 3-1: config 0 descriptor?? [ 925.077320][T12364] plantronics 0003:047F:FFFF.0081: No inputs registered, leaving [ 925.123009][T12364] plantronics 0003:047F:FFFF.0081: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 925.344322][T12331] usb 3-1: USB disconnect, device number 102 [ 925.690617][T12364] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 925.871626][T12364] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 925.896296][T12364] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 925.929323][T12364] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 925.945838][T12364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.974884][T12364] usb 4-1: config 0 descriptor?? [ 925.996621][T12364] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 926.009683][T12364] dvb-usb: bulk message failed: -22 (3/0) [ 926.030990][T12364] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 926.048385][T12364] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 926.056419][T12364] usb 4-1: media controller created [ 926.065212][T12364] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 926.086515][T12364] dvb-usb: bulk message failed: -22 (6/0) [ 926.106878][T12364] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 926.132801][T12364] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input104 [ 926.171687][T12364] dvb-usb: schedule remote query interval to 150 msecs. [ 926.178741][T12364] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 926.329746][T12364] dvb-usb: bulk message failed: -22 (1/0) [ 926.335663][T12364] dvb-usb: error while querying for an remote control event. [ 926.495342][T28853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10143'. [ 926.509625][T12364] dvb-usb: bulk message failed: -22 (1/0) [ 926.515871][T12364] dvb-usb: error while querying for an remote control event. [ 926.663545][T12331] usb 4-1: USB disconnect, device number 109 [ 926.715110][T12331] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 926.790597][T12364] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 926.953431][T12364] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.968601][T12364] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 926.980878][T12364] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 927.001444][T12364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 927.017775][T28872] futex_wake_op: syz.4.10150 tries to shift op by 32; fix this program [ 927.031198][T12364] usb 2-1: SerialNumber: syz [ 927.281600][T12364] usb 2-1: 0:2 : does not exist [ 927.325596][T12364] usb 2-1: USB disconnect, device number 86 [ 927.398406][ T8450] udevd[8450]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 927.693447][T28893] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10159'. [ 927.789235][T12331] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 927.980566][T12331] usb 4-1: Using ep0 maxpacket: 32 [ 928.000673][T12331] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 928.035096][T12331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.067932][T12331] usb 4-1: config 0 descriptor?? [ 928.121497][T12331] gspca_main: sq930x-2.14.0 probing 041e:403c [ 928.693084][T12364] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 928.702040][T28923] netlink: 428 bytes leftover after parsing attributes in process `syz.4.10172'. [ 928.713511][T28923] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10172'. [ 928.778635][T28925] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 928.792881][T28925] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 928.878360][T12364] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 928.892865][T12364] usb 3-1: config 0 interface 0 has no altsetting 0 [ 928.908499][T12364] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 928.922651][T12364] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 928.931868][T12364] usb 3-1: Product: syz [ 928.936257][T12364] usb 3-1: Manufacturer: syz [ 928.942272][T12364] usb 3-1: SerialNumber: syz [ 928.954497][T12364] usb 3-1: config 0 descriptor?? [ 928.973767][T12364] usb 3-1: selecting invalid altsetting 0 [ 929.152867][T12331] gspca_sq930x: ucbus_write failed -71 [ 929.158599][T12331] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 929.180286][T12331] usb 4-1: USB disconnect, device number 110 [ 929.208964][T12364] usb 3-1: USB disconnect, device number 103 [ 929.409251][ T978] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 929.608177][ T978] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 929.659323][ T978] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.33 [ 929.681137][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.699247][ T978] usb 5-1: Product: syz [ 929.725028][ T978] usb 5-1: Manufacturer: syz [ 929.742717][ T978] usb 5-1: SerialNumber: syz [ 929.940250][T28945] tun0: tun_chr_ioctl cmd 1074025675 [ 929.945757][T28945] tun0: persist enabled [ 929.956046][T28945] tun0: tun_chr_ioctl cmd 1074025675 [ 929.973468][T28945] tun0: persist enabled [ 930.233205][T28954] netlink: 'syz.1.10186': attribute type 10 has an invalid length. [ 930.881608][ T978] cdc_ncm 5-1:1.0: bind() failure [ 930.902754][ T978] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 930.924576][ T978] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 930.944369][ T978] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 930.972046][ T978] usb 5-1: USB disconnect, device number 99 [ 931.493778][ T30] audit: type=1800 audit(1749967858.387:6203): pid=28982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10197" name="nullb0" dev="devtmpfs" ino=3637 res=0 errno=0 [ 931.684719][T28988] gre0: Master is either lo or non-ether device [ 931.729263][ T978] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 931.889717][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 931.906838][ T978] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 931.937796][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 931.959182][ T978] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 931.983238][ T978] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.001138][ T30] audit: type=1800 audit(1749967858.897:6204): pid=29000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10205" name="nullb0" dev="devtmpfs" ino=3637 res=0 errno=0 [ 932.023221][ T978] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 932.049372][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.287745][ T978] usb 4-1: GET_CAPABILITIES returned 0 [ 932.303776][ T978] usbtmc 4-1:16.0: can't read capabilities [ 932.625321][T12364] usb 4-1: USB disconnect, device number 111 [ 933.290956][T29020] input: syz0 as /devices/virtual/input/input105 [ 933.307896][T29020] input: failed to attach handler leds to device input105, error: -6 [ 933.578344][ T978] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 933.759220][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 933.776176][ T978] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 933.804893][ T978] usb 3-1: config 0 has no interface number 0 [ 933.822260][ T978] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 933.842281][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.859317][T12331] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 933.867077][ T978] usb 3-1: Product: syz [ 933.879808][ T978] usb 3-1: Manufacturer: syz [ 933.884587][ T978] usb 3-1: SerialNumber: syz [ 933.903849][ T978] usb 3-1: config 0 descriptor?? [ 933.912676][ T978] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 933.926793][ T978] usb 3-1: selecting invalid altsetting 1 [ 933.932833][ T978] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 933.943386][ T978] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 933.954873][ T978] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 933.963729][ T978] usb 3-1: media controller created [ 934.002810][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 934.036989][T12331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.048335][T12331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.058862][T12331] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 934.072280][T12331] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 934.081770][T12331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.094292][T12331] usb 2-1: config 0 descriptor?? [ 934.110563][T12364] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 934.279535][T12364] usb 5-1: Using ep0 maxpacket: 8 [ 934.291584][T12364] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 934.309217][T12364] usb 5-1: config 0 has no interface number 0 [ 934.321909][T12364] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 934.342180][T12364] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 934.355574][T12364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.370527][T12364] usb 5-1: config 0 descriptor?? [ 934.401019][T12364] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 934.527228][T12331] plantronics 0003:047F:FFFF.0082: No inputs registered, leaving [ 934.541317][T12331] plantronics 0003:047F:FFFF.0082: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 934.745940][T12331] usb 2-1: USB disconnect, device number 87 [ 934.873688][T29058] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 935.017784][ T30] audit: type=1326 audit(1749967861.907:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.3.10231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8faf8e929 code=0x7ffc0000 [ 935.066309][ T30] audit: type=1326 audit(1749967861.907:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.3.10231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8faf2ab19 code=0x7ffc0000 [ 935.100518][ T30] audit: type=1326 audit(1749967861.907:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.3.10231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8faf2ab19 code=0x7ffc0000 [ 935.133171][ T978] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 935.156422][ T978] zl10353_read_register: readreg error (reg=127, ret==-110) [ 935.173861][T29021] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 935.195430][ T30] audit: type=1326 audit(1749967861.907:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.3.10231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8faf2ab19 code=0x7ffc0000 [ 935.218218][ T978] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 935.225639][ T30] audit: type=1326 audit(1749967861.907:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.3.10231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8faf2ab19 code=0x7ffc0000 [ 935.324675][ T30] audit: type=1326 audit(1749967861.907:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.3.10231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8faf2ab19 code=0x7ffc0000 [ 935.471194][ T978] usb 3-1: USB disconnect, device number 104 [ 935.482875][ T30] audit: type=1326 audit(1749967861.907:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.3.10231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8faf2ab19 code=0x7ffc0000 [ 935.609177][ T30] audit: type=1326 audit(1749967861.907:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29059 comm="syz.3.10231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb8faf2ab19 code=0x7ffc0000 [ 935.675367][T12364] usb 5-1: USB disconnect, device number 100 [ 936.741560][T29100] input: syz1 as /devices/virtual/input/input106 [ 937.422989][T29125] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 937.558879][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 937.558982][ T30] audit: type=1326 audit(1749967864.447:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29126 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 937.652892][ T30] audit: type=1326 audit(1749967864.447:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29126 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 937.685427][ T30] audit: type=1326 audit(1749967864.447:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29126 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 937.725371][ T30] audit: type=1326 audit(1749967864.487:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29126 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 937.765733][ T30] audit: type=1326 audit(1749967864.487:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29126 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 937.863544][ T30] audit: type=1326 audit(1749967864.487:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29126 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 937.930975][ T30] audit: type=1326 audit(1749967864.487:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29126 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 937.963771][ T30] audit: type=1326 audit(1749967864.487:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29126 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 937.993316][ T30] audit: type=1326 audit(1749967864.487:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29126 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f54b2f2ab19 code=0x7ffc0000 [ 937.994663][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.027686][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.092263][ T30] audit: type=1326 audit(1749967864.487:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29126 comm="syz.1.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54b2f8e929 code=0x7ffc0000 [ 938.133046][T29140] batadv_slave_1: left promiscuous mode [ 938.142871][T29140] tipc: Resetting bearer [ 938.152178][T29140] xfrm0: left allmulticast mode [ 938.174085][T29140] bridge0: left promiscuous mode [ 938.180261][ T978] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 938.193870][T29140] macvlan2: left promiscuous mode [ 938.221680][T29140] team1: left promiscuous mode [ 938.227412][T29140] team1: left allmulticast mode [ 938.243060][T29144] syzkaller1: entered promiscuous mode [ 938.249795][T29144] syzkaller1: entered allmulticast mode [ 938.339181][ T978] usb 5-1: Using ep0 maxpacket: 8 [ 938.353750][ T978] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 938.369725][ T978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 938.382268][ T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 938.392675][ T978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 938.404316][ T978] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 938.441845][ T978] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 938.463006][ T978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.697260][ T978] usb 5-1: usb_control_msg returned -32 [ 938.703478][ T978] usbtmc 5-1:16.0: can't read capabilities [ 939.719346][T12364] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 939.889463][T12364] usb 4-1: Using ep0 maxpacket: 8 [ 939.901330][T12364] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 939.957335][T12364] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 939.977928][T12364] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 939.994615][T12364] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 940.005889][T12364] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.022691][T12364] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 940.033742][T12364] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.292830][T12364] usb 4-1: usb_control_msg returned -32 [ 940.306529][T12364] usbtmc 4-1:16.0: can't read capabilities [ 940.653393][T29209] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 940.661686][T12364] usb 5-1: USB disconnect, device number 101 [ 940.739525][ T978] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 940.911464][ T978] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 940.920536][ T978] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 940.931218][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 940.942081][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 940.970676][ T978] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 940.986512][ T978] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 940.996078][ T978] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 941.004523][ T978] usb 2-1: Product: syz [ 941.008968][ T978] usb 2-1: Manufacturer: syz [ 941.032605][ T978] cdc_wdm 2-1:1.0: skipping garbage [ 941.038505][ T978] cdc_wdm 2-1:1.0: skipping garbage [ 941.047054][ T978] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 941.053308][ T978] cdc_wdm 2-1:1.0: Unknown control protocol [ 941.270919][T29219] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.10299'. [ 941.313581][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 941.313786][T12360] usb 2-1: USB disconnect, device number 88 [ 941.320553][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 941.320585][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 941.589813][T29230] netlink: 'syz.2.10304': attribute type 10 has an invalid length. [ 941.612555][T29230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 941.622448][T29230] batadv0: entered promiscuous mode [ 941.628415][T29230] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 941.643727][T29230] netlink: 'syz.2.10304': attribute type 10 has an invalid length. [ 941.652361][T29230] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10304'. [ 941.661632][T29230] batadv0: entered allmulticast mode [ 941.680278][T29230] bond0: (slave batadv0): Releasing backup interface [ 941.703158][T29230] bridge0: port 1(batadv0) entered blocking state [ 941.712913][T29230] bridge0: port 1(batadv0) entered disabled state [ 941.730056][ T59] batman_adv: batadv0: IGMP Querier appeared [ 941.737251][ T59] batman_adv: batadv0: MLD Querier appeared [ 941.890978][T29238] binder: 29237:29238 ioctl c018620c 200000000040 returned -22 [ 942.509712][T12360] usb 4-1: USB disconnect, device number 112 [ 943.394866][T29255] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10316'. [ 943.625085][T29281] netlink: 92 bytes leftover after parsing attributes in process `syz.4.10323'. [ 944.070467][T12360] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 944.159374][T12331] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 944.246965][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 944.246987][ T30] audit: type=1800 audit(1749967871.137:6362): pid=29287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.10326" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 944.280336][T12360] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 944.297952][T12360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.329278][T12331] usb 4-1: Using ep0 maxpacket: 16 [ 944.337923][T12360] usb 5-1: config 0 descriptor?? [ 944.343014][T12331] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 944.343051][T12331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.343074][T12331] usb 4-1: Product: syz [ 944.343093][T12331] usb 4-1: Manufacturer: syz [ 944.343111][T12331] usb 4-1: SerialNumber: syz [ 944.361506][T12331] usb 4-1: config 0 descriptor?? [ 944.391001][T29297] [ 944.393447][T29297] ===================================================== [ 944.393573][T12331] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 944.400487][T29297] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 944.400519][T29297] 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 Not tainted [ 944.400534][T29297] ----------------------------------------------------- [ 944.400542][T29297] syz.2.10330/29297 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 944.400565][T29297] ffff8880588d9750 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 944.400633][T29297] [ 944.400633][T29297] and this task is already holding: [ 944.400643][T29297] ffff888071ac2028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 944.400699][T29297] which would create a new lock dependency: [ 944.400708][T29297] (&client->buffer_lock [ 944.420718][T12331] usb 4-1: Detected FT232H [ 944.422772][T29297] ){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 944.484218][T29297] [ 944.484218][T29297] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 944.493692][T29297] (&dev->event_lock#2){..-.}-{3:3} [ 944.493736][T29297] [ 944.493736][T29297] ... which became SOFTIRQ-irq-safe at: [ 944.506667][T29297] lock_acquire+0x120/0x360 [ 944.511293][T29297] _raw_spin_lock_irqsave+0xa7/0xf0 [ 944.516605][T29297] input_event+0x7a/0xc0 [ 944.520965][T29297] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 944.526720][T29297] __usb_hcd_giveback_urb+0x41a/0x690 [ 944.532258][T29297] dummy_timer+0x862/0x4550 [ 944.536898][T29297] __hrtimer_run_queues+0x52c/0xc60 [ 944.542329][T29297] hrtimer_run_softirq+0x187/0x2b0 [ 944.547551][T29297] handle_softirqs+0x286/0x870 [ 944.552445][T29297] __irq_exit_rcu+0xca/0x1f0 [ 944.557169][T29297] irq_exit_rcu+0x9/0x30 [ 944.561538][T29297] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 944.567288][T29297] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 944.573382][T29297] lock_acquire+0x175/0x360 [ 944.578004][T29297] unwind_next_frame+0xc2/0x2390 [ 944.583062][T29297] arch_stack_walk+0x11c/0x150 [ 944.587938][T29297] stack_trace_save+0x9c/0xe0 [ 944.592720][T29297] kasan_save_track+0x3e/0x80 [ 944.597524][T29297] kasan_save_free_info+0x46/0x50 [ 944.603183][T29297] __kasan_slab_free+0x62/0x70 [ 944.608076][T29297] kfree+0x18e/0x440 [ 944.612098][T29297] tomoyo_path_number_perm+0x47a/0x5a0 [ 944.617684][T29297] security_file_ioctl+0xcb/0x2d0 [ 944.622821][T29297] __se_sys_ioctl+0x47/0x170 [ 944.627526][T29297] do_syscall_64+0xfa/0x3b0 [ 944.632141][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.638163][T29297] [ 944.638163][T29297] to a SOFTIRQ-irq-unsafe lock: [ 944.645206][T29297] (tasklist_lock){.+.+}-{3:3} [ 944.645241][T29297] [ 944.645241][T29297] ... which became SOFTIRQ-irq-unsafe at: [ 944.658007][T29297] ... [ 944.658028][T29297] lock_acquire+0x120/0x360 [ 944.665272][T29297] _raw_read_lock+0x36/0x50 [ 944.669932][T29297] __do_wait+0xde/0x740 [ 944.674232][T29297] do_wait+0x1f8/0x520 [ 944.678420][T29297] kernel_wait+0xab/0x170 [ 944.682970][T29297] call_usermodehelper_exec_work+0xbe/0x230 [ 944.689003][T29297] process_scheduled_works+0xae1/0x17b0 [ 944.694701][T29297] worker_thread+0x8a0/0xda0 [ 944.699425][T29297] kthread+0x70e/0x8a0 [ 944.703631][T29297] ret_from_fork+0x3fc/0x770 [ 944.708352][T29297] ret_from_fork_asm+0x1a/0x30 [ 944.713435][T29297] [ 944.713435][T29297] other info that might help us debug this: [ 944.713435][T29297] [ 944.723715][T29297] Chain exists of: [ 944.723715][T29297] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 944.723715][T29297] [ 944.737432][T29297] Possible interrupt unsafe locking scenario: [ 944.737432][T29297] [ 944.745794][T29297] CPU0 CPU1 [ 944.751194][T29297] ---- ---- [ 944.756584][T29297] lock(tasklist_lock); [ 944.760877][T29297] local_irq_disable(); [ 944.767752][T29297] lock(&dev->event_lock#2); [ 944.774991][T29297] lock(&client->buffer_lock); [ 944.782677][T29297] [ 944.786161][T29297] lock(&dev->event_lock#2); [ 944.791059][T29297] [ 944.791059][T29297] *** DEADLOCK *** [ 944.791059][T29297] [ 944.799225][T29297] 7 locks held by syz.2.10330/29297: [ 944.804524][T29297] #0: ffff8880299e2118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 944.813722][T29297] #1: ffff888029716230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 944.824074][T29297] #2: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 944.833880][T29297] #3: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 944.843524][T29297] #4: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 944.852706][T29297] #5: ffff888071ac2028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 944.862937][T29297] #6: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 944.872072][T29297] [ 944.872072][T29297] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 944.882847][T29297] -> (&dev->event_lock#2){..-.}-{3:3} { [ 944.888647][T29297] IN-SOFTIRQ-W at: [ 944.892765][T29297] lock_acquire+0x120/0x360 [ 944.899143][T29297] _raw_spin_lock_irqsave+0xa7/0xf0 [ 944.906219][T29297] input_event+0x7a/0xc0 [ 944.912407][T29297] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 944.919910][T29297] __usb_hcd_giveback_urb+0x41a/0x690 [ 944.927139][T29297] dummy_timer+0x862/0x4550 [ 944.933494][T29297] __hrtimer_run_queues+0x52c/0xc60 [ 944.940548][T29297] hrtimer_run_softirq+0x187/0x2b0 [ 944.947770][T29297] handle_softirqs+0x286/0x870 [ 944.954409][T29297] __irq_exit_rcu+0xca/0x1f0 [ 944.960880][T29297] irq_exit_rcu+0x9/0x30 [ 944.967067][T29297] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 944.974564][T29297] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 944.982511][T29297] lock_acquire+0x175/0x360 [ 944.988973][T29297] unwind_next_frame+0xc2/0x2390 [ 944.995779][T29297] arch_stack_walk+0x11c/0x150 [ 945.002577][T29297] stack_trace_save+0x9c/0xe0 [ 945.009129][T29297] kasan_save_track+0x3e/0x80 [ 945.015666][T29297] kasan_save_free_info+0x46/0x50 [ 945.022567][T29297] __kasan_slab_free+0x62/0x70 [ 945.029213][T29297] kfree+0x18e/0x440 [ 945.035025][T29297] tomoyo_path_number_perm+0x47a/0x5a0 [ 945.042795][T29297] security_file_ioctl+0xcb/0x2d0 [ 945.049681][T29297] __se_sys_ioctl+0x47/0x170 [ 945.056128][T29297] do_syscall_64+0xfa/0x3b0 [ 945.062500][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.070359][T29297] INITIAL USE at: [ 945.074374][T29297] lock_acquire+0x120/0x360 [ 945.080647][T29297] _raw_spin_lock_irqsave+0xa7/0xf0 [ 945.087618][T29297] input_inject_event+0xab/0x320 [ 945.094350][T29297] kbd_led_trigger_activate+0xbc/0x100 [ 945.101679][T29297] led_trigger_set+0x52a/0x950 [ 945.108214][T29297] led_trigger_set_default+0x260/0x2a0 [ 945.115529][T29297] led_classdev_register_ext+0x73d/0x930 [ 945.122938][T29297] input_leds_connect+0x517/0x790 [ 945.129731][T29297] input_register_device+0xceb/0x10b0 [ 945.136872][T29297] atkbd_connect+0x70e/0x9c0 [ 945.143232][T29297] serio_driver_probe+0x82/0xa0 [ 945.149848][T29297] really_probe+0x26a/0x9a0 [ 945.156126][T29297] __driver_probe_device+0x18c/0x2f0 [ 945.163185][T29297] driver_probe_device+0x4f/0x430 [ 945.169982][T29297] __driver_attach+0x452/0x700 [ 945.176530][T29297] bus_for_each_dev+0x230/0x2b0 [ 945.183163][T29297] serio_handle_event+0x1a2/0x860 [ 945.189974][T29297] process_scheduled_works+0xae1/0x17b0 [ 945.197394][T29297] worker_thread+0x8a0/0xda0 [ 945.203878][T29297] kthread+0x70e/0x8a0 [ 945.209889][T29297] ret_from_fork+0x3fc/0x770 [ 945.217041][T29297] ret_from_fork_asm+0x1a/0x30 [ 945.223691][T29297] } [ 945.226371][T29297] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 945.235668][T29297] -> (&client->buffer_lock){....}-{3:3} { [ 945.241487][T29297] INITIAL USE at: [ 945.245421][T29297] lock_acquire+0x120/0x360 [ 945.251717][T29297] _raw_spin_lock+0x2e/0x40 [ 945.257868][T29297] evdev_handle_get_val+0x70/0x9f0 [ 945.264682][T29297] evdev_ioctl_handler+0x1202/0x1f10 [ 945.271662][T29297] __se_sys_ioctl+0xf9/0x170 [ 945.277880][T29297] do_syscall_64+0xfa/0x3b0 [ 945.283973][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.291560][T29297] } [ 945.294103][T29297] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 945.302383][T29297] ... acquired at: [ 945.306205][T29297] lock_acquire+0x120/0x360 [ 945.310925][T29297] _raw_spin_lock+0x2e/0x40 [ 945.315642][T29297] evdev_handle_get_val+0x70/0x9f0 [ 945.320971][T29297] evdev_ioctl_handler+0x1202/0x1f10 [ 945.326474][T29297] __se_sys_ioctl+0xf9/0x170 [ 945.331303][T29297] do_syscall_64+0xfa/0x3b0 [ 945.336079][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.342205][T29297] [ 945.344991][T29297] [ 945.344991][T29297] the dependencies between the lock to be acquired [ 945.345004][T29297] and SOFTIRQ-irq-unsafe lock: [ 945.358556][T29297] -> (tasklist_lock){.+.+}-{3:3} { [ 945.363921][T29297] HARDIRQ-ON-R at: [ 945.368111][T29297] lock_acquire+0x120/0x360 [ 945.374658][T29297] _raw_read_lock+0x36/0x50 [ 945.381199][T29297] __do_wait+0xde/0x740 [ 945.387644][T29297] do_wait+0x1f8/0x520 [ 945.394168][T29297] kernel_wait+0xab/0x170 [ 945.400542][T29297] call_usermodehelper_exec_work+0xbe/0x230 [ 945.408465][T29297] process_scheduled_works+0xae1/0x17b0 [ 945.416133][T29297] worker_thread+0x8a0/0xda0 [ 945.422763][T29297] kthread+0x70e/0x8a0 [ 945.428869][T29297] ret_from_fork+0x3fc/0x770 [ 945.435500][T29297] ret_from_fork_asm+0x1a/0x30 [ 945.442304][T29297] SOFTIRQ-ON-R at: [ 945.446485][T29297] lock_acquire+0x120/0x360 [ 945.453030][T29297] _raw_read_lock+0x36/0x50 [ 945.459574][T29297] __do_wait+0xde/0x740 [ 945.465764][T29297] do_wait+0x1f8/0x520 [ 945.471866][T29297] kernel_wait+0xab/0x170 [ 945.478239][T29297] call_usermodehelper_exec_work+0xbe/0x230 [ 945.486206][T29297] process_scheduled_works+0xae1/0x17b0 [ 945.493808][T29297] worker_thread+0x8a0/0xda0 [ 945.500553][T29297] kthread+0x70e/0x8a0 [ 945.506653][T29297] ret_from_fork+0x3fc/0x770 [ 945.513287][T29297] ret_from_fork_asm+0x1a/0x30 [ 945.520082][T29297] INITIAL USE at: [ 945.524183][T29297] lock_acquire+0x120/0x360 [ 945.530635][T29297] _raw_write_lock_irq+0xa2/0xf0 [ 945.537519][T29297] copy_process+0x224f/0x3c00 [ 945.544130][T29297] kernel_clone+0x21e/0x870 [ 945.550568][T29297] user_mode_thread+0xdd/0x140 [ 945.557269][T29297] rest_init+0x23/0x300 [ 945.563387][T29297] start_kernel+0x47d/0x500 [ 945.569846][T29297] x86_64_start_reservations+0x24/0x30 [ 945.577262][T29297] x86_64_start_kernel+0x143/0x1c0 [ 945.584460][T29297] common_startup_64+0x13e/0x147 [ 945.591639][T29297] INITIAL READ USE at: [ 945.596183][T29297] lock_acquire+0x120/0x360 [ 945.603156][T29297] _raw_read_lock+0x36/0x50 [ 945.610048][T29297] __do_wait+0xde/0x740 [ 945.616586][T29297] do_wait+0x1f8/0x520 [ 945.623033][T29297] kernel_wait+0xab/0x170 [ 945.629746][T29297] call_usermodehelper_exec_work+0xbe/0x230 [ 945.638201][T29297] process_scheduled_works+0xae1/0x17b0 [ 945.646254][T29297] worker_thread+0x8a0/0xda0 [ 945.653389][T29297] kthread+0x70e/0x8a0 [ 945.659840][T29297] ret_from_fork+0x3fc/0x770 [ 945.666817][T29297] ret_from_fork_asm+0x1a/0x30 [ 945.673960][T29297] } [ 945.676767][T29297] ... key at: [] tasklist_lock+0x18/0x40 [ 945.684699][T29297] ... acquired at: [ 945.688711][T29297] lock_acquire+0x120/0x360 [ 945.693616][T29297] _raw_read_lock+0x36/0x50 [ 945.698419][T29297] send_sigio+0x101/0x370 [ 945.702989][T29297] kill_fasync+0x24d/0x4d0 [ 945.707787][T29297] lease_break_callback+0x26/0x30 [ 945.713191][T29297] __break_lease+0x6a5/0x1620 [ 945.718129][T29297] do_dentry_open+0xd62/0x1970 [ 945.723213][T29297] vfs_open+0x3b/0x340 [ 945.727489][T29297] path_openat+0x2ee5/0x3830 [ 945.732288][T29297] do_filp_open+0x1fa/0x410 [ 945.736992][T29297] do_sys_openat2+0x121/0x1c0 [ 945.741888][T29297] __x64_sys_open+0x11e/0x150 [ 945.746780][T29297] do_syscall_64+0xfa/0x3b0 [ 945.751504][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.757663][T29297] [ 945.760043][T29297] -> (&f_owner->lock){....}-{3:3} { [ 945.765394][T29297] INITIAL USE at: [ 945.769402][T29297] lock_acquire+0x120/0x360 [ 945.775684][T29297] _raw_write_lock_irq+0xa2/0xf0 [ 945.782400][T29297] __f_setown+0x67/0x370 [ 945.788528][T29297] generic_setlease+0xd5d/0x1240 [ 945.795253][T29297] fcntl_setlease+0x3a2/0x4c0 [ 945.801887][T29297] do_fcntl+0x6a9/0x1910 [ 945.808081][T29297] __se_sys_fcntl+0xc8/0x150 [ 945.814444][T29297] do_syscall_64+0xfa/0x3b0 [ 945.820732][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.828396][T29297] INITIAL READ USE at: [ 945.832840][T29297] lock_acquire+0x120/0x360 [ 945.839649][T29297] _raw_read_lock_irq+0xaa/0xf0 [ 945.846900][T29297] f_getown+0x54/0x2a0 [ 945.853277][T29297] do_fcntl+0x7ae/0x1910 [ 945.859747][T29297] __se_sys_fcntl+0xc8/0x150 [ 945.866617][T29297] do_syscall_64+0xfa/0x3b0 [ 945.873491][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.881810][T29297] } [ 945.884437][T29297] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 945.893468][T29297] ... acquired at: [ 945.897401][T29297] lock_acquire+0x120/0x360 [ 945.902129][T29297] _raw_read_lock_irqsave+0xaf/0x100 [ 945.907627][T29297] send_sigio+0x38/0x370 [ 945.912118][T29297] kill_fasync+0x24d/0x4d0 [ 945.916755][T29297] lease_break_callback+0x26/0x30 [ 945.922109][T29297] __break_lease+0x6a5/0x1620 [ 945.927008][T29297] do_dentry_open+0xd62/0x1970 [ 945.932347][T29297] vfs_open+0x3b/0x340 [ 945.936717][T29297] path_openat+0x2ee5/0x3830 [ 945.941635][T29297] do_filp_open+0x1fa/0x410 [ 945.946360][T29297] do_sys_openat2+0x121/0x1c0 [ 945.951334][T29297] __x64_sys_open+0x11e/0x150 [ 945.956411][T29297] do_syscall_64+0xfa/0x3b0 [ 945.961129][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.967221][T29297] [ 945.969567][T29297] -> (&new->fa_lock){....}-{3:3} { [ 945.974757][T29297] INITIAL USE at: [ 945.978742][T29297] lock_acquire+0x120/0x360 [ 945.984858][T29297] _raw_write_lock_irq+0xa2/0xf0 [ 945.991494][T29297] fasync_remove_entry+0xf1/0x1c0 [ 945.998123][T29297] pipe_fasync+0xff/0x1e0 [ 946.004048][T29297] __fput+0x8a2/0xa70 [ 946.009631][T29297] task_work_run+0x1d1/0x260 [ 946.015826][T29297] exit_to_user_mode_loop+0xec/0x110 [ 946.022796][T29297] do_syscall_64+0x2bd/0x3b0 [ 946.028973][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.036469][T29297] INITIAL READ USE at: [ 946.040827][T29297] lock_acquire+0x120/0x360 [ 946.047368][T29297] _raw_read_lock_irqsave+0xaf/0x100 [ 946.054690][T29297] kill_fasync+0x199/0x4d0 [ 946.061147][T29297] mousedev_write+0x8f9/0x950 [ 946.067853][T29297] vfs_write+0x27e/0xa90 [ 946.074130][T29297] ksys_write+0x145/0x250 [ 946.080482][T29297] do_syscall_64+0xfa/0x3b0 [ 946.087018][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.095207][T29297] } [ 946.097727][T29297] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 946.106522][T29297] ... acquired at: [ 946.110353][T29297] lock_acquire+0x120/0x360 [ 946.115069][T29297] _raw_read_lock_irqsave+0xaf/0x100 [ 946.120570][T29297] kill_fasync+0x199/0x4d0 [ 946.125205][T29297] evdev_pass_values+0x627/0xbd0 [ 946.130347][T29297] evdev_events+0x1e6/0x340 [ 946.135055][T29297] input_pass_values+0x285/0x890 [ 946.140413][T29297] input_event_dispose+0x330/0x6b0 [ 946.145738][T29297] input_inject_event+0x1fe/0x320 [ 946.150977][T29297] evdev_write+0x2fc/0x480 [ 946.155593][T29297] vfs_write+0x27e/0xa90 [ 946.160050][T29297] ksys_write+0x145/0x250 [ 946.164592][T29297] do_syscall_64+0xfa/0x3b0 [ 946.169306][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.175405][T29297] [ 946.177768][T29297] [ 946.177768][T29297] stack backtrace: [ 946.183686][T29297] CPU: 1 UID: 0 PID: 29297 Comm: syz.2.10330 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) [ 946.183710][T29297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 946.183726][T29297] Call Trace: [ 946.183738][T29297] [ 946.183748][T29297] dump_stack_lvl+0x189/0x250 [ 946.183781][T29297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 946.183809][T29297] ? __pfx__printk+0x10/0x10 [ 946.183833][T29297] validate_chain+0x1f05/0x2140 [ 946.183864][T29297] __lock_acquire+0xab9/0xd20 [ 946.183896][T29297] ? kill_fasync+0x199/0x4d0 [ 946.183921][T29297] lock_acquire+0x120/0x360 [ 946.183945][T29297] ? kill_fasync+0x199/0x4d0 [ 946.183975][T29297] _raw_read_lock_irqsave+0xaf/0x100 [ 946.184007][T29297] ? kill_fasync+0x199/0x4d0 [ 946.184031][T29297] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 946.184056][T29297] ? do_raw_spin_lock+0x121/0x290 [ 946.184079][T29297] kill_fasync+0x199/0x4d0 [ 946.184103][T29297] ? kill_fasync+0x53/0x4d0 [ 946.184129][T29297] evdev_pass_values+0x627/0xbd0 [ 946.184156][T29297] ? evdev_pass_values+0x5a1/0xbd0 [ 946.184178][T29297] evdev_events+0x1e6/0x340 [ 946.184197][T29297] ? evdev_events+0x79/0x340 [ 946.184217][T29297] ? input_pass_values+0x8d/0x890 [ 946.184235][T29297] input_pass_values+0x285/0x890 [ 946.184257][T29297] ? input_handle_event+0x70c/0xf30 [ 946.184290][T29297] input_event_dispose+0x330/0x6b0 [ 946.184319][T29297] input_inject_event+0x1fe/0x320 [ 946.184346][T29297] ? input_inject_event+0xbc/0x320 [ 946.184374][T29297] evdev_write+0x2fc/0x480 [ 946.184396][T29297] ? __pfx_evdev_write+0x10/0x10 [ 946.184422][T29297] ? bpf_lsm_file_permission+0x9/0x20 [ 946.184448][T29297] ? security_file_permission+0x75/0x290 [ 946.184468][T29297] ? rw_verify_area+0x258/0x650 [ 946.184495][T29297] ? __pfx_evdev_write+0x10/0x10 [ 946.184515][T29297] vfs_write+0x27e/0xa90 [ 946.184534][T29297] ? __pfx_vfs_write+0x10/0x10 [ 946.184566][T29297] ? __fget_files+0x2a/0x420 [ 946.184587][T29297] ? __fget_files+0x2a/0x420 [ 946.184606][T29297] ? __fget_files+0x3a0/0x420 [ 946.184632][T29297] ? __fget_files+0x2a/0x420 [ 946.184654][T29297] ksys_write+0x145/0x250 [ 946.184671][T29297] ? __pfx_ksys_write+0x10/0x10 [ 946.184690][T29297] ? rcu_is_watching+0x15/0xb0 [ 946.184720][T29297] ? do_syscall_64+0xbe/0x3b0 [ 946.184739][T29297] do_syscall_64+0xfa/0x3b0 [ 946.184754][T29297] ? lockdep_hardirqs_on+0x9c/0x150 [ 946.184781][T29297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.184799][T29297] ? clear_bhb_loop+0x60/0xb0 [ 946.184822][T29297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.184841][T29297] RIP: 0033:0x7f40c3f8e929 [ 946.184858][T29297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.184876][T29297] RSP: 002b:00007f40c4df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 946.184895][T29297] RAX: ffffffffffffffda RBX: 00007f40c41b5fa0 RCX: 00007f40c3f8e929 [ 946.184909][T29297] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000004 [ 946.184921][T29297] RBP: 00007f40c4010b39 R08: 0000000000000000 R09: 0000000000000000 [ 946.184933][T29297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.184946][T29297] R13: 0000000000000000 R14: 00007f40c41b5fa0 R15: 00007f40c42dfa28 [ 946.184968][T29297] [ 946.552030][T12360] gspca_main: spca508-2.14.0 probing 8086:0110 [ 946.570386][T12331] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 946.755559][T12360] gspca_spca508: reg_read err -32 [ 946.763534][T12360] gspca_spca508: reg_read err -32 [ 946.770416][T12360] gspca_spca508: reg_read err -32 [ 946.976897][T12360] gspca_spca508: reg_read err -71 [ 946.982959][T12360] gspca_spca508: reg write: error -71 [ 946.989166][T12360] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 946.998085][T12331] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 946.998650][T12360] usb 5-1: USB disconnect, device number 102 [ 947.225981][T12360] usb 4-1: USB disconnect, device number 113 [ 947.240053][T12360] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 947.252629][T12360] ftdi_sio 4-1:0.0: device disconnected