last executing test programs: 2.555937501s ago: executing program 4 (id=13388): r0 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000180)='dirsync\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.555487126s ago: executing program 2 (id=13389): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0xe48, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x2, 0xabd}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) io_uring_enter(r1, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 2.478033235s ago: executing program 4 (id=13391): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x600}]) io_setup(0x2, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_destroy(r0) 2.31596507s ago: executing program 0 (id=13393): r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000280)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000), &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000040)=[0x6, 0x2], 0x2) 2.024072244s ago: executing program 2 (id=13396): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000002280)="80", 0x1}, {&(0x7f00000003c0)="cc03135bd3be9518", 0x8}], 0x2}, 0x0) recvmmsg(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000100)=""/119, 0x77}], 0x1, &(0x7f00000002c0)=""/81, 0x51}, 0x2}], 0x1, 0x40012000, 0x0) 1.82390124s ago: executing program 0 (id=13397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000169000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000006c0)={0x1, 0x0, [{0x4b564d00, 0x0, 0xffe}]}) 1.73159811s ago: executing program 2 (id=13398): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) 1.608847311s ago: executing program 1 (id=13399): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r0 = syz_io_uring_setup(0x5ba, &(0x7f0000000640)={0x0, 0x1079af, 0x3180, 0x8000, 0x40024b}, &(0x7f0000000280)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffa, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.455944326s ago: executing program 1 (id=13400): r0 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r0, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1.340354231s ago: executing program 4 (id=13401): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x40702) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0x38775951944642b9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80045505, &(0x7f0000002a40)) 1.304476906s ago: executing program 0 (id=13402): r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0x6}, 0x8) 1.23594299s ago: executing program 1 (id=13403): pwritev2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)="e8924d7e487f87896c4757aeac19473cb480701164015d0b71178d32752d9afc8d86a35708a45844dd13b4a91c932e5cc6671f86c2cc98e91b2cc185a069b3cfc27d68a58d383322f7c78ce72003f9db394340b322bcd796ed8d42f90b9c6bb21014f5f56396bf6afc540031f78f24b0426d366725b93f7bd7bbd97c3e2e1df4ebb39ff6757ea7794953a8b54d3e56fb58bf3c03c02a7e7a9f151d239446bb43e919728f341f7620513c606a402b90aeb874478b626c938bed60583d65495bb7fd0e974ea836de981fb59ca40208469d75f9ff33f398d02e7fa1", 0xda}, {&(0x7f0000000400)="77a467d61f69e6301abc3317cffc3eb95d38516b9811aec0d73991936e6fe0bea9a8efe850eb78387c198cdca42cb710c653c68b6f091755d400a75c90e535138b239be3a835749427583f14a1186f5c7be375634f181feaf4", 0x59}], 0x2, 0x7, 0x7, 0x4) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1, 0x1, [{{0xa, 0x0, 0x3000000, @empty}}]}, 0x110) 1.178089107s ago: executing program 1 (id=13404): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x103902, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x2a11, 0x400, 0x1, 0x40000335}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.035391151s ago: executing program 4 (id=13406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x1800, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) syz_io_uring_setup(0x3c63, 0x0, 0x0, 0x0) 919.092979ms ago: executing program 4 (id=13409): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x4) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpu.stat\x00', 0x5000000, 0x0) sendfile(r0, r2, 0x0, 0xc486) 897.84609ms ago: executing program 1 (id=13410): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="89000000120081ae08061cdc030ec08000000500000000000000ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x2000c000) 784.955551ms ago: executing program 2 (id=13412): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x54, 0x2000, 0x0, {0x3, 0x1}, {0x74, 0x2}, @const={0x0, {0xfffe, 0x3400}}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000100)=0x3) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 739.964419ms ago: executing program 1 (id=13413): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffc, 0x0, 0x300, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000100)={0xa, 0x800006, 0xfffffffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xf25) listen(r0, 0x20) shutdown(r0, 0x0) 631.326835ms ago: executing program 2 (id=13414): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0000fd6000000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0xfe, 0x300, 0x0, 0x1, r1}]) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) 430.050373ms ago: executing program 4 (id=13416): ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff0309"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 429.311076ms ago: executing program 3 (id=13417): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}, 0x4}], 0x2, 0x60, 0x0) 379.780891ms ago: executing program 0 (id=13418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x27800000003, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000000, 0x0, 0x1, r2, 0x5}) 303.781314ms ago: executing program 3 (id=13419): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="0000000002"], 0x48}}, 0x20000000) 287.804718ms ago: executing program 3 (id=13420): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 200.927374ms ago: executing program 0 (id=13421): pipe2$watch_queue(&(0x7f00000006c0), 0x80) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x351a, 0x100, 0x0, 0x0, 0x0) 186.802375ms ago: executing program 3 (id=13422): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 154.584346ms ago: executing program 2 (id=13423): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x181002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0xeeef0000, 0x4000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000065b000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0x9000}) 59.945769ms ago: executing program 3 (id=13424): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000005, &(0x7f00000000c0)={0xa, 0x4e21, 0x18115, @rand_addr=' \x01\x00', 0x983a}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 37.403888ms ago: executing program 3 (id=13425): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) fcntl$setstatus(r0, 0x4, 0x2400) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x9, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff801, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1ff, 0xfff, 0xfff]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) 0s ago: executing program 0 (id=13426): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="64bb6a97aa", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)="0842570cb5", 0x5}, {0x0}], 0x2}}], 0x2, 0x4802d) kernel console output (not intermixed with test programs): ttributes in process `syz.2.11604'. [ 739.107344][ T9] aquacomputer_d5next 0003:0C70:F003.00BA: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.1-1/input0 [ 739.345985][ T30] audit: type=1326 audit(1767892981.914:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31259 comm="syz.3.11612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5dd8f749 code=0x0 [ 739.347969][ T9] usb 2-1: USB disconnect, device number 123 [ 740.002390][ T2985] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.021259][ T2985] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.033072][ T2985] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.043145][ T2985] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.222468][T31294] netlink: 'syz.3.11626': attribute type 4 has an invalid length. [ 740.399901][T31305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11630'. [ 740.828358][T31327] usb usb8: usbfs: process 31327 (syz.3.11640) did not claim interface 0 before use [ 741.495739][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 741.655895][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 741.662713][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.684940][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.698339][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 741.714619][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 741.725254][T17169] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 741.734430][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 741.754491][ T9] usb 4-1: SerialNumber: syz [ 741.770878][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 741.786824][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 741.800081][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 741.895847][T17169] usb 3-1: Using ep0 maxpacket: 16 [ 741.903524][T17169] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.925296][T17169] usb 3-1: config 0 interface 0 has no altsetting 0 [ 741.940560][T17169] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 741.961561][T17169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.981367][T17169] usb 3-1: config 0 descriptor?? [ 742.106645][T17151] usb 4-1: USB disconnect, device number 120 [ 742.187582][T31377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11663'. [ 742.212863][T31360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 742.229286][T31360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 742.295932][ T30] audit: type=1326 audit(1767892984.844:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31378 comm="syz.0.11664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb18f749 code=0x7ffc0000 [ 742.453733][T17169] kye 0003:0458:0138.00BB: unknown main item tag 0x0 [ 742.463037][T17169] kye 0003:0458:0138.00BB: unknown main item tag 0x0 [ 742.470231][T17169] kye 0003:0458:0138.00BB: unknown main item tag 0x0 [ 742.485131][T17169] kye 0003:0458:0138.00BB: unknown main item tag 0x0 [ 742.493601][T17169] kye 0003:0458:0138.00BB: unknown main item tag 0x0 [ 742.500790][T17169] kye 0003:0458:0138.00BB: unknown main item tag 0x0 [ 742.516398][T17169] kye 0003:0458:0138.00BB: unknown main item tag 0x0 [ 742.523217][T17169] kye 0003:0458:0138.00BB: unknown main item tag 0x0 [ 742.532184][T17169] kye 0003:0458:0138.00BB: unknown main item tag 0x0 [ 742.545678][T17169] kye 0003:0458:0138.00BB: unknown main item tag 0x0 [ 742.600554][T17169] kye 0003:0458:0138.00BB: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.2-1/input0 [ 742.690666][T17169] usb 3-1: USB disconnect, device number 115 [ 742.750412][T31392] fido_id[31392]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 742.866104][T31397] netlink: 'syz.0.11672': attribute type 9 has an invalid length. [ 742.886940][T31397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11672'. [ 743.026195][T31404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11675'. [ 743.196103][T17169] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 743.355821][T17169] usb 2-1: Using ep0 maxpacket: 32 [ 743.363433][T17169] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 743.377566][T17169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.399434][T31421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11684'. [ 743.418900][T17169] usb 2-1: config 0 descriptor?? [ 743.652432][T17169] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 743.681729][T17169] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 743.704576][T17169] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 743.723816][T17169] usb 2-1: media controller created [ 743.761143][T17169] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 743.854548][T17169] az6027: usb out operation failed. (-71) [ 743.882430][T17169] az6027: usb out operation failed. (-71) [ 743.894169][T17169] stb0899_attach: Driver disabled by Kconfig [ 743.908766][T17169] az6027: no front-end attached [ 743.908766][T17169] [ 743.928716][T17169] az6027: usb out operation failed. (-71) [ 743.934933][T17169] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 743.955279][T17169] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input119 [ 743.986295][T17169] dvb-usb: schedule remote query interval to 400 msecs. [ 743.994353][T31446] netlink: 220 bytes leftover after parsing attributes in process `syz.3.11695'. [ 744.010110][T17169] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 744.022759][T17169] usb 2-1: USB disconnect, device number 124 [ 744.117287][T17169] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 744.166355][T17151] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 744.337458][T17151] usb 3-1: too many configurations: 53, using maximum allowed: 8 [ 744.400598][T17151] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 744.410818][T17151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.419662][T17151] usb 3-1: Product: syz [ 744.424560][T17151] usb 3-1: Manufacturer: syz [ 744.430223][T17151] usb 3-1: SerialNumber: syz [ 744.655482][T17151] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 744.686299][T17151] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 744.726380][T17151] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 744.752813][T17151] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 744.801309][T17151] usb 3-1: USB disconnect, device number 116 [ 745.284848][T31492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11717'. [ 746.513741][T31537] bond2: invalid ARP target 0.0.0.0 specified for addition [ 746.521762][T31537] bond2: option arp_ip_target: invalid value (0) [ 746.540332][T31537] bond2 (unregistering): Released all slaves [ 747.316124][T31578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11757'. [ 747.715514][T31601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.758993][T31601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.814084][T31607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11770'. [ 748.123429][T31625] bridge_slave_0: left allmulticast mode [ 748.132298][T31625] bridge_slave_0: left promiscuous mode [ 748.139365][T31625] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.153042][T31625] bridge_slave_1: left allmulticast mode [ 748.160205][T31625] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.189071][T31625] bond0: (slave bond_slave_0): Releasing backup interface [ 748.245246][T31625] bond0: (slave bond_slave_1): Releasing backup interface [ 748.270663][T31625] team0: Port device team_slave_0 removed [ 748.306937][T31625] team0: Port device team_slave_1 removed [ 748.329882][T31625] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 749.211167][T31665] netlink: 272 bytes leftover after parsing attributes in process `syz.1.11797'. [ 749.553397][T31676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11801'. [ 749.583526][T31676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11801'. [ 750.060658][T31699] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11812'. [ 750.440116][T31719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 750.853050][T31744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11834'. [ 751.065967][T17169] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 751.217483][T17169] usb 4-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 751.228422][T17169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.241766][T17169] usb 4-1: config 0 descriptor?? [ 751.468578][T17169] usbhid 4-1:0.0: can't add hid device: -71 [ 751.476718][T17169] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 751.505936][T17169] usb 4-1: USB disconnect, device number 121 [ 751.569737][T31771] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.11845'. [ 751.580149][T31771] openvswitch: netlink: Message has 16 unknown bytes. [ 751.684133][T31773] netpci0: tun_chr_ioctl cmd 1074025677 [ 751.692655][T31773] netpci0: linktype set to 780 [ 752.042154][T31798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11858'. [ 752.435696][T17169] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 752.586132][T17169] usb 4-1: Using ep0 maxpacket: 16 [ 752.606089][T17169] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.626231][T17169] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.645976][T17169] usb 4-1: config 0 interface 0 has no altsetting 0 [ 752.653024][T17169] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 752.681854][T17169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.704253][T17169] usb 4-1: config 0 descriptor?? [ 753.138080][T17169] hid (null): unknown global tag 0xd [ 753.143832][T17169] hid (null): unknown global tag 0xe [ 753.160735][T17169] hid_parser_main: 1239 callbacks suppressed [ 753.160760][T17169] cougar 0003:060B:500A.00BC: unknown main item tag 0x0 [ 753.197739][T17169] cougar 0003:060B:500A.00BC: unknown main item tag 0x0 [ 753.204892][T17169] cougar 0003:060B:500A.00BC: unknown main item tag 0x0 [ 753.226368][T17169] cougar 0003:060B:500A.00BC: unknown main item tag 0x0 [ 753.233420][T17169] cougar 0003:060B:500A.00BC: unknown main item tag 0x0 [ 753.251893][T17169] cougar 0003:060B:500A.00BC: unknown main item tag 0x0 [ 753.262678][T17169] cougar 0003:060B:500A.00BC: unknown main item tag 0x0 [ 753.276235][T17169] cougar 0003:060B:500A.00BC: unknown main item tag 0x0 [ 753.286046][T17169] cougar 0003:060B:500A.00BC: unknown main item tag 0x0 [ 753.306020][T17169] cougar 0003:060B:500A.00BC: unknown main item tag 0x0 [ 753.314951][T17169] cougar 0003:060B:500A.00BC: unexpected long global item [ 753.333581][T17169] cougar 0003:060B:500A.00BC: parse failed [ 753.345795][T17169] cougar 0003:060B:500A.00BC: probe with driver cougar failed with error -22 [ 753.362264][T17169] usb 4-1: USB disconnect, device number 122 [ 753.599330][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.606010][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.796291][T17151] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 753.974492][T17151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 754.002441][T17151] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 754.035135][T17151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.052490][T17151] usb 3-1: config 0 descriptor?? [ 754.062530][T31849] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 754.444910][T31887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11899'. [ 754.457250][T31887] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11899'. [ 754.500312][T17151] belkin 0003:050D:3201.00BD: item fetching failed at offset 2/3 [ 754.516520][T17151] belkin 0003:050D:3201.00BD: parse failed [ 754.522711][T17151] belkin 0003:050D:3201.00BD: probe with driver belkin failed with error -22 [ 754.541061][T31889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11900'. [ 754.714207][T17169] usb 3-1: USB disconnect, device number 117 [ 755.161909][T31918] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 755.726630][T17151] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 755.887599][T17151] usb 3-1: config 252 has an invalid interface number: 251 but max is 0 [ 755.898819][T17151] usb 3-1: config 252 has no interface number 0 [ 755.905770][T17151] usb 3-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 755.916878][T17151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.937063][T17151] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 756.346367][T17151] gspca_sn9c20x: Write register 1001 failed -71 [ 756.358802][T17151] gspca_sn9c20x: Device initialization failed [ 756.376748][T17151] gspca_sn9c20x 3-1:252.251: probe with driver gspca_sn9c20x failed with error -71 [ 756.390318][T17151] usb 3-1: USB disconnect, device number 118 [ 757.329213][T31992] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 758.031929][T32016] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11953'. [ 758.630658][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 758.630680][ T30] audit: type=1326 audit(1767893001.204:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32047 comm="syz.2.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6378f749 code=0x7ffc0000 [ 758.665090][ T30] audit: type=1326 audit(1767893001.244:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32047 comm="syz.2.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6378f749 code=0x7ffc0000 [ 758.718283][ T30] audit: type=1326 audit(1767893001.244:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32047 comm="syz.2.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ffb6378f749 code=0x7ffc0000 [ 758.758664][T32050] netlink: 'syz.1.11965': attribute type 1 has an invalid length. [ 758.768217][ T30] audit: type=1326 audit(1767893001.244:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32047 comm="syz.2.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6378f749 code=0x7ffc0000 [ 758.813837][ T30] audit: type=1326 audit(1767893001.244:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32047 comm="syz.2.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6378f749 code=0x7ffc0000 [ 758.838610][ T30] audit: type=1326 audit(1767893001.274:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32047 comm="syz.2.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ffb6378f749 code=0x7ffc0000 [ 758.884612][ T30] audit: type=1326 audit(1767893001.274:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32047 comm="syz.2.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6378f749 code=0x7ffc0000 [ 758.913155][ T30] audit: type=1326 audit(1767893001.274:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32047 comm="syz.2.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7ffb6378f749 code=0x7ffc0000 [ 758.937747][ T30] audit: type=1326 audit(1767893001.274:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32047 comm="syz.2.11966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6378f749 code=0x7ffc0000 [ 759.231501][T32066] sg_write: data in/out 131040/8 bytes for SCSI command 0x0-- guessing data in; [ 759.231501][T32066] program syz.1.11975 not setting count and/or reply_len properly [ 759.515997][T17169] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 759.679584][T17169] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 759.725771][T17169] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 759.736806][T17169] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 759.749483][T17169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 759.758599][T17169] usb 4-1: SerialNumber: syz [ 759.936638][T32101] xt_hashlimit: size too large, truncated to 1048576 [ 759.979264][T17169] usb 4-1: 0:2 : does not exist [ 759.998176][T32105] : renamed from vxcan1 [ 760.040240][T17169] usb 4-1: USB disconnect, device number 123 [ 760.085431][T18795] udevd[18795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.663427][T32132] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12004'. [ 760.675482][T32132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12004'. [ 760.856417][T17151] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 761.026260][T17151] usb 3-1: Using ep0 maxpacket: 16 [ 761.033874][T17151] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 761.056332][T17151] usb 3-1: config 0 has no interface number 0 [ 761.062500][T17151] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 761.082960][T17151] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 761.096354][T17151] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 761.109881][T17151] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 761.127593][T17151] usb 3-1: Product: syz [ 761.131828][T17151] usb 3-1: SerialNumber: syz [ 761.140983][T17151] usb 3-1: config 0 descriptor?? [ 761.162690][T17151] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 761.178683][T17151] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input120 [ 761.392093][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 761.392538][T17169] usb 3-1: USB disconnect, device number 119 [ 761.399283][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 761.432799][T17169] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 761.467252][T32158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12016'. [ 762.070340][T32182] netlink: 'syz.2.12027': attribute type 11 has an invalid length. [ 763.224978][T32201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12033'. [ 763.476126][T32222] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12044'. [ 763.826017][ T9] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 763.967326][T32253] loop9: detected capacity change from 0 to 7 [ 764.000288][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 764.037839][ T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 764.087166][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 764.098340][ T9] usb 2-1: config 220 has no interface number 2 [ 764.104810][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 764.119500][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 764.129038][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 764.137548][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 764.158279][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 764.187624][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.211004][ T9] usb 2-1: Product: syz [ 764.225011][ T9] usb 2-1: Manufacturer: syz [ 764.253325][T18795] Dev loop9: unable to read RDB block 7 [ 764.255690][ T9] usb 2-1: SerialNumber: syz [ 764.266464][T18795] loop9: unable to read partition table [ 764.268831][T32254] Invalid logical block size (1) [ 764.273860][T18795] loop9: partition table beyond EOD, truncated [ 764.450427][T32264] bridge0: port 1(macvtap0) entered blocking state [ 764.460378][T32264] bridge0: port 1(macvtap0) entered disabled state [ 764.496939][T17169] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 764.499763][T32264] macvtap0: entered allmulticast mode [ 764.507902][ T9] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 764.512584][T32264] bridge0: entered allmulticast mode [ 764.525028][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 764.539473][T32264] macvtap0: left allmulticast mode [ 764.545338][T32264] bridge0: left allmulticast mode [ 764.556261][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 764.586990][T32253] Dev loop9: unable to read RDB block 7 [ 764.592985][T32253] loop9: unable to read partition table [ 764.599451][ T9] usb 2-1: selecting invalid altsetting 0 [ 764.608940][T32253] loop9: partition table beyond EOD, truncated [ 764.615395][T32253] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 764.630928][ T9] usb 2-1: selecting invalid altsetting 0 [ 764.638251][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 764.651214][ T9] usb 2-1: USB disconnect, device number 125 [ 764.665962][T17169] usb 4-1: Using ep0 maxpacket: 32 [ 764.681374][T17169] usb 4-1: config 0 has an invalid interface number: 247 but max is 0 [ 764.690454][T17169] usb 4-1: config 0 has no interface number 0 [ 764.701054][T17169] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 764.712456][T17169] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 764.720839][T17169] usb 4-1: Product: syz [ 764.725475][T17169] usb 4-1: Manufacturer: syz [ 764.740366][T17169] usb 4-1: config 0 descriptor?? [ 764.967217][T17158] usb 4-1: USB disconnect, device number 124 [ 765.256204][T17151] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 765.418808][T17151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.430653][T17151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.447295][T17151] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 765.461571][T17151] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 765.472350][T17151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.494896][T17151] usb 3-1: config 0 descriptor?? [ 765.937529][T17151] hid_parser_main: 176 callbacks suppressed [ 765.937553][T17151] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 765.973314][T17151] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 765.991862][T17151] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 766.008351][T17151] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 766.016436][T17151] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 766.025056][T17151] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 766.038083][T17151] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 766.048097][T17151] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 766.056719][T17151] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 766.064483][T17151] plantronics 0003:047F:FFFF.00BE: unknown main item tag 0x0 [ 766.095069][T17151] plantronics 0003:047F:FFFF.00BE: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 766.209858][T17151] usb 3-1: USB disconnect, device number 120 [ 767.985974][T17151] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 768.145748][T17151] usb 3-1: Using ep0 maxpacket: 32 [ 768.160858][T17151] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 768.205665][T17151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.231320][T17151] usb 3-1: config 0 descriptor?? [ 768.247765][T17151] gspca_main: sunplus-2.14.0 probing 041e:400b [ 769.151480][T32414] netlink: 176 bytes leftover after parsing attributes in process `syz.3.12127'. [ 769.258530][T17151] gspca_sunplus: reg_w_riv err -71 [ 769.263824][T17151] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 769.291511][T32418] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12129'. [ 769.295031][T17151] usb 3-1: USB disconnect, device number 121 [ 769.743639][T32438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12139'. [ 770.226144][T17151] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 770.305891][T17165] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 770.398060][T17151] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 770.411281][T17151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 770.422779][T17151] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 770.436111][T17151] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 770.445815][T17151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.454305][T17151] usb 3-1: Product: syz [ 770.466198][T17151] usb 3-1: Manufacturer: syz [ 770.470886][T17151] usb 3-1: SerialNumber: syz [ 770.478402][T17165] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 770.491174][T17151] usb 3-1: config 0 descriptor?? [ 770.492580][T17165] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 770.507160][T32453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 770.509368][T17165] usb 4-1: config 1 interface 0 has no altsetting 0 [ 770.527697][T17165] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 770.537768][T17165] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.548128][T17165] usb 4-1: Product: syz [ 770.552419][T17165] usb 4-1: Manufacturer: syz [ 770.563637][T17165] usb 4-1: SerialNumber: syz [ 770.572273][T32457] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 770.580677][T32457] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 770.728429][T32453] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 770.951088][ T9] usb 3-1: USB disconnect, device number 122 [ 771.613458][T17165] (unnamed net_device) (uninitialized): Assigned a random MAC address: 36:4e:aa:e0:b5:26 [ 771.651860][T17165] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 771.678851][T17165] usb 4-1: USB disconnect, device number 125 [ 771.746843][T32487] vivid-007: disconnect [ 771.762632][T32486] vivid-007: reconnect [ 773.821177][T32576] input: syz1 as /devices/virtual/input/input122 [ 773.855781][T17165] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 774.025906][T17165] usb 4-1: Using ep0 maxpacket: 16 [ 774.035929][T17165] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.065717][T17165] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.095785][T17165] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 774.120315][T17165] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 774.178477][T17165] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 774.205966][T17165] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 774.234600][T17165] usb 4-1: SerialNumber: syz [ 774.264856][T17165] hub 4-1:1.0: bad descriptor, ignoring hub [ 774.271923][T17165] hub 4-1:1.0: probe with driver hub failed with error -5 [ 774.293616][T17165] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 774.324534][T32587] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 774.658883][T32563] raw-gadget.0 gadget.3: fail, usb_ep_set_wedge returned -11 [ 774.755665][T17165] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 774.778751][T17151] usb 4-1: USB disconnect, device number 126 [ 774.865969][ T9] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 774.909193][T17165] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 774.937001][T17165] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 774.963143][T17165] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 774.974686][T17165] usb 3-1: config 0 interface 0 has no altsetting 0 [ 774.983479][T17165] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 774.999624][T17165] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 775.011829][T17165] usb 3-1: config 0 interface 0 has no altsetting 0 [ 775.020772][T17165] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.030716][T17165] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 775.041892][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 775.050238][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 775.059071][ T9] usb 2-1: config 179 has no interface number 0 [ 775.065375][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 775.077017][T17165] usb 3-1: config 0 interface 0 has no altsetting 0 [ 775.086242][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 775.098773][T17165] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.108573][T17165] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 775.120305][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 775.132753][T17165] usb 3-1: config 0 interface 0 has no altsetting 0 [ 775.140307][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 775.152297][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 775.168198][T17165] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.177756][T17165] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 775.188997][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 775.198905][T17165] usb 3-1: config 0 interface 0 has no altsetting 0 [ 775.206092][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.215664][T17165] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.227294][T17165] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 775.240124][T32593] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 775.248078][T17165] usb 3-1: config 0 interface 0 has no altsetting 0 [ 775.272368][T17165] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.282189][T17165] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 775.294182][T17165] usb 3-1: config 0 interface 0 has no altsetting 0 [ 775.303337][T17165] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 775.313196][T17165] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 775.337958][T17165] usb 3-1: config 0 interface 0 has no altsetting 0 [ 775.350331][T17165] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 775.365689][T17165] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 775.384670][T17165] usb 3-1: Product: syz [ 775.390056][T17165] usb 3-1: Manufacturer: syz [ 775.415284][T17165] usb 3-1: SerialNumber: syz [ 775.437888][T17165] usb 3-1: config 0 descriptor?? [ 775.470874][T17165] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 775.531345][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input123 [ 775.696971][ T9] usb 2-1: USB disconnect, device number 126 [ 775.697031][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 775.711468][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 775.793192][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 776.106212][T17158] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 776.266091][T17158] usb 4-1: Using ep0 maxpacket: 32 [ 776.277718][T17158] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 776.305711][T17158] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 776.330355][T17158] usb 4-1: config 0 interface 0 has no altsetting 0 [ 776.346465][T17158] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 776.376442][T17158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.400160][T17158] usb 4-1: config 0 descriptor?? [ 776.625697][T17151] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 776.693337][T17165] usb 3-1: USB disconnect, device number 123 [ 776.719567][T17165] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 776.776151][T17151] usb 2-1: Using ep0 maxpacket: 8 [ 776.787552][T17151] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 776.803950][T17151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.830999][T17151] pvrusb2: Hardware description: Terratec Grabster AV400 [ 776.865013][T17158] input: HID 28bd:0933 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.00BF/input/input124 [ 776.886111][T17151] pvrusb2: ********** [ 776.890140][T17151] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 776.916204][T17151] pvrusb2: Important functionality might not be entirely working. [ 776.924625][T17151] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 776.948858][T17151] pvrusb2: ********** [ 776.983073][T17158] uclogic 0003:28BD:0933.00BF: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0 [ 777.045295][ T2344] pvrusb2: Invalid write control endpoint [ 777.197060][ T2344] pvrusb2: Invalid write control endpoint [ 777.204043][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 777.232025][T17151] usb 4-1: USB disconnect, device number 127 [ 777.246992][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 777.265730][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 777.270469][T17165] usb 2-1: USB disconnect, device number 127 [ 777.278712][ T2344] pvrusb2: Device being rendered inoperable [ 777.299568][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 777.311964][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 777.348460][ T2344] pvrusb2: Attached sub-driver cx25840 [ 777.355806][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 777.371010][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 777.791754][T32649] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 777.881102][T17151] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 778.045702][T17151] usb 3-1: Using ep0 maxpacket: 8 [ 778.059685][T17151] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 778.073900][T17151] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 778.093208][T17151] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 778.114000][T17151] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 778.146133][T17151] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 778.160441][T17151] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 778.170992][T17151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.184823][T32666] sctp: [Deprecated]: syz.1.12238 (pid 32666) Use of struct sctp_assoc_value in delayed_ack socket option. [ 778.184823][T32666] Use struct sctp_sack_info instead [ 778.406137][T17151] usb 3-1: usb_control_msg returned -32 [ 778.411977][T17151] usbtmc 3-1:16.0: can't read capabilities [ 778.566051][T17165] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 778.725755][T17165] usb 2-1: Using ep0 maxpacket: 16 [ 778.733467][T17165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 199, changing to 7 [ 778.753613][T17165] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 778.764084][T17165] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.774833][T17165] usb 2-1: Product: syz [ 778.786720][T17165] usb 2-1: Manufacturer: syz [ 778.791549][T17165] usb 2-1: SerialNumber: syz [ 778.801468][T32686] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 778.806398][T17165] usb 2-1: config 0 descriptor?? [ 778.825377][T17169] usb 3-1: USB disconnect, device number 124 [ 778.847765][T17165] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 779.039731][ T32] usb 2-1: Failed to submit usb control message: -71 [ 779.040060][T17151] usb 2-1: USB disconnect, device number 2 [ 779.047954][ T32] usb 2-1: unable to send the bmi data to the device: -71 [ 779.048132][ T32] usb 2-1: unable to get target info from device [ 779.073429][ T32] usb 2-1: could not get target info (-71) [ 779.080220][ T32] usb 2-1: could not probe fw (-71) [ 780.024758][T32725] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 780.075957][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 780.344953][T32746] loop9: detected capacity change from 0 to 7 [ 780.352222][T32746] Dev loop9: unable to read RDB block 7 [ 780.359098][T32746] loop9: unable to read partition table [ 780.367558][T32746] loop9: partition table beyond EOD, truncated [ 780.374198][T32746] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 780.446016][T17151] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 780.606248][T17151] usb 4-1: Using ep0 maxpacket: 16 [ 780.617336][T17151] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 780.639865][T17151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.649556][T17151] usb 4-1: Product: syz [ 780.654035][T17151] usb 4-1: Manufacturer: syz [ 780.659071][T17151] usb 4-1: SerialNumber: syz [ 780.667709][T17151] usb 4-1: config 0 descriptor?? [ 781.092702][T17151] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 781.104199][T17151] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 781.115134][T17151] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 781.125670][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 781.125759][T17151] usb 4-1: media controller created [ 781.153209][T17151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 781.296496][T17151] zl10353_read_register: readreg error (reg=127, ret==0) [ 781.304305][T17151] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 781.341749][T17151] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 781.362121][T17151] usb 4-1: USB disconnect, device number 2 [ 781.458683][T17151] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 782.142339][ T333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12292'. [ 782.155803][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 782.183371][T17165] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 782.231077][ T335] loop7: detected capacity change from 0 to 1 [ 782.308471][ T335] Dev loop7: unable to read RDB block 1 [ 782.314671][ T335] loop7: unable to read partition table [ 782.331710][ T335] loop7: partition table beyond EOD, truncated [ 782.345416][ T335] loop_reread_partitions: partition scan of loop7 (ݷU@:B${Wɴ) failed (rc=-5) [ 782.376271][T17165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.405816][T17165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.480051][T17165] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 782.499075][T17165] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 782.519950][ T342] loop8: detected capacity change from 0 to 8 [ 782.536641][T17165] usb 2-1: Manufacturer: syz [ 782.550941][T18736] Dev loop8: unable to read RDB block 8 [ 782.558848][T17165] usb 2-1: config 0 descriptor?? [ 782.565111][T18736] loop8: unable to read partition table [ 782.585049][T18736] loop8: partition table beyond EOD, truncated [ 782.603239][ T342] Dev loop8: unable to read RDB block 8 [ 782.610431][ T342] loop8: unable to read partition table [ 782.620783][ T342] loop8: partition table beyond EOD, truncated [ 782.639550][ T342] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 783.195664][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 783.400488][T17165] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C0/input/input125 [ 783.485903][T17165] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C0/input/input126 [ 783.519302][T17165] input: syz Touch Strip as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C0/input/input127 [ 783.565965][T17165] input: syz Dial as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.00C0/input/input128 [ 783.608818][T17165] uclogic 0003:256C:006D.00C0: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.1-1/input0 [ 783.636483][T17165] usb 2-1: USB disconnect, device number 3 [ 783.873962][ T363] fido_id[363]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 784.235635][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 785.277964][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 785.376220][ T430] bridge0: port 3(bond0) entered blocking state [ 785.384193][ T430] bridge0: port 3(bond0) entered disabled state [ 785.392941][ T430] bond0: entered allmulticast mode [ 785.399878][ T430] bond_slave_0: entered allmulticast mode [ 785.407492][ T430] bond_slave_1: entered allmulticast mode [ 785.413776][ T430] batadv0: entered allmulticast mode [ 785.413869][ T432] kvm: user requested TSC rate below hardware speed [ 785.422938][ T430] bond0: entered promiscuous mode [ 785.435072][ T430] bond_slave_0: entered promiscuous mode [ 785.443883][ T430] bond_slave_1: entered promiscuous mode [ 785.453159][ T430] batadv0: entered promiscuous mode [ 785.758401][ T6240] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 785.768291][ T6240] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 786.315639][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 787.216084][ T470] loop8: detected capacity change from 0 to 7 [ 787.237041][ T470] Dev loop8: unable to read RDB block 7 [ 787.242768][ T470] loop8: unable to read partition table [ 787.261154][ T470] loop8: partition table beyond EOD, truncated [ 787.293880][ T470] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 787.355660][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 788.156035][T17165] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 788.315919][T17165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.338650][T17165] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 788.360837][T17165] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 788.375865][T17165] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.395486][T17165] usb 2-1: config 0 descriptor?? [ 788.400948][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 788.654364][ T488] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.12356'. [ 788.896600][T17165] hid_parser_main: 28 callbacks suppressed [ 788.896625][T17165] hid-steam 0003:28DE:1142.00C1: unknown main item tag 0x0 [ 788.931233][T17165] hid-steam 0003:28DE:1142.00C1: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 789.015730][T17165] hid-steam 0003:28DE:1142.00C1: Steam wireless receiver connected [ 789.032025][T17165] hid-steam 0003:28DE:1142.00C1: No HID_FEATURE_REPORT submitted - nothing to read [ 789.090128][T17165] hid-steam 0003:28DE:1142.00C2: unknown main item tag 0x0 [ 789.158564][T17165] hid-steam 0003:28DE:1142.00C2: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 789.435650][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 789.502011][ T30] audit: type=1326 audit(1767893032.074:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=501 comm="syz.3.12361" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c5dd8f749 code=0x0 [ 789.628465][ T506] loop9: detected capacity change from 0 to 7 [ 789.657325][ T506] Dev loop9: unable to read RDB block 7 [ 789.662978][ T506] loop9: AHDI p2 [ 789.673502][T17151] usb 2-1: USB disconnect, device number 4 [ 789.686171][ T506] loop9: partition table partially beyond EOD, truncated [ 789.721999][T17151] hid-steam 0003:28DE:1142.00C1: Steam wireless receiver disconnected [ 789.971610][ T510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12365'. [ 790.071369][ T514] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12364'. [ 790.475741][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 790.911715][ T544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12381'. [ 791.238842][ T30] audit: type=1326 audit(1767893033.814:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=556 comm="syz.1.12386" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ab918f749 code=0x0 [ 791.516100][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 792.135672][T17158] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 792.306336][T17158] usb 4-1: Using ep0 maxpacket: 8 [ 792.313150][T17158] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 792.325481][T17158] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 792.338507][T17158] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 792.355718][T17158] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 792.367589][T17158] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 792.381421][T17158] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 792.394482][T17158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.555632][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 792.674699][ T597] RDS: rds_bind could not find a transport for ::3:0:20:0, load rds_tcp or rds_rdma? [ 792.729036][ T599] binder: 598:599 ioctl 4018620d 0 returned -22 [ 793.197743][ T607] usbtmc 4-1:16.0: simple usb_control_msg failed -32 [ 793.207241][T17165] usb 4-1: USB disconnect, device number 3 [ 793.326163][T17169] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 793.488127][T17169] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 793.499044][T17169] usb 3-1: config 0 interface 0 has no altsetting 0 [ 793.512568][T17169] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 793.524951][T17169] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 793.534315][T17169] usb 3-1: Product: syz [ 793.539686][T17169] usb 3-1: Manufacturer: syz [ 793.544912][T17169] usb 3-1: SerialNumber: syz [ 793.552456][T17169] usb 3-1: config 0 descriptor?? [ 793.564874][T17169] usb 3-1: selecting invalid altsetting 0 [ 793.595661][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 793.785439][T17165] usb 3-1: USB disconnect, device number 125 [ 793.959867][T17158] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 793.972590][ T30] audit: type=1326 audit(1767893036.554:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=626 comm="syz.0.12413" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb18f749 code=0x0 [ 794.007224][ T629] bridge_slave_0: left allmulticast mode [ 794.013727][ T629] bridge_slave_0: left promiscuous mode [ 794.021463][ T629] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.032142][ T629] bridge_slave_1: left allmulticast mode [ 794.039171][ T629] bridge_slave_1: left promiscuous mode [ 794.045610][ T629] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.064752][ T629] bond0: (slave bond_slave_0): Releasing backup interface [ 794.073926][ T629] bond0: (slave bond_slave_1): Releasing backup interface [ 794.090250][ T629] team0: Port device team_slave_0 removed [ 794.099859][ T629] team0: Port device team_slave_1 removed [ 794.107595][ T629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.122831][ T629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.132776][T17158] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 794.146084][T17158] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 794.159092][T17158] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 794.169224][T17158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.191807][ T619] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 794.209044][T17158] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 794.342180][T17169] hid-generic 0000:0000:0000.00C3: unknown main item tag 0x0 [ 794.363786][T17169] hid-generic 0000:0000:0000.00C3: hidraw0: HID v0.00 Device [syz1] on syz0 [ 794.448578][T17151] usb 2-1: USB disconnect, device number 5 [ 794.635721][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 794.654619][ T641] netlink: 'syz.2.12418': attribute type 10 has an invalid length. [ 794.665372][ T641] syz_tun: entered promiscuous mode [ 794.675482][ T641] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 794.823581][ T645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12420'. [ 795.245894][ T663] input: syz0 as /devices/virtual/input/input129 [ 795.289025][ T663] input: failed to attach handler leds to device input129, error: -6 [ 795.675662][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 795.972441][ T701] binder: 700:701 ioctl c0306201 2000000003c0 returned -14 [ 796.344982][ T723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12452'. [ 796.469324][ T727] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12456'. [ 796.489129][ T727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12456'. [ 796.715661][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 797.246489][T17169] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 797.419320][T17169] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 797.430863][T17169] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.442762][T17169] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 797.464528][T17169] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.493812][T17169] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 797.504322][T17169] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 797.514422][T17169] usb 3-1: Product: syz [ 797.519925][T17169] usb 3-1: Manufacturer: syz [ 797.534526][T17169] cdc_wdm 3-1:1.0: skipping garbage [ 797.541073][T17169] cdc_wdm 3-1:1.0: skipping garbage [ 797.549502][T17169] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 797.555864][T17169] cdc_wdm 3-1:1.0: Unknown control protocol [ 797.755643][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 797.764860][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 797.771508][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 797.778747][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 797.785377][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 797.791826][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 797.798445][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 797.805496][T17169] usb 3-1: USB disconnect, device number 126 [ 797.812218][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 797.812247][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 797.812266][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 798.255753][T17151] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 798.416082][T17151] usb 2-1: Using ep0 maxpacket: 16 [ 798.423838][T17151] usb 2-1: config 0 has no interfaces? [ 798.437740][T17151] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 798.450294][T17151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.458719][T17151] usb 2-1: Product: syz [ 798.462914][T17151] usb 2-1: Manufacturer: syz [ 798.467973][T17151] usb 2-1: SerialNumber: syz [ 798.475370][T17151] usb 2-1: config 0 descriptor?? [ 798.795922][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 798.940798][T17151] usb 2-1: USB disconnect, device number 6 [ 799.063464][ T821] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12497'. [ 799.169552][ T826] input: syz0 as /devices/virtual/input/input130 [ 799.411126][ T830] netlink: 348 bytes leftover after parsing attributes in process `syz.1.12501'. [ 799.476500][T17169] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 799.637357][T17169] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 799.649978][T17169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 799.665939][T17169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 799.682167][T17169] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.696518][T17169] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.706615][T17169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.718392][T17169] usb 3-1: config 0 descriptor?? [ 799.833375][ T839] loop2: detected capacity change from 0 to 7 [ 799.845741][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 799.856367][ T839] Dev loop2: unable to read RDB block 7 [ 799.862186][ T839] loop2: unable to read partition table [ 799.868620][ T839] loop2: partition table beyond EOD, truncated [ 799.876019][ T839] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 800.142431][T17169] plantronics 0003:047F:FFFF.00C4: unknown main item tag 0x0 [ 800.157025][T17169] plantronics 0003:047F:FFFF.00C4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 800.235819][T17151] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 800.405962][T17151] usb 2-1: Using ep0 maxpacket: 32 [ 800.409464][T17169] usb 3-1: USB disconnect, device number 127 [ 800.419351][T17151] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 800.429745][T17151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.442499][T17151] usb 2-1: config 0 descriptor?? [ 800.455405][T17151] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 800.807662][ T846] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12508'. [ 800.875730][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 801.060115][T17151] gspca_vc032x: reg_w err -71 [ 801.066141][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.076663][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.082014][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.089508][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.094854][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.100554][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.106369][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.111894][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.118902][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.124438][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.130313][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.136152][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.141481][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.147340][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.152656][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.158669][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.164218][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.170154][T17151] gspca_vc032x: I2c Bus Busy Wait 00 [ 801.175898][T17151] gspca_vc032x: Unknown sensor... [ 801.181299][T17151] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 801.201612][T17151] usb 2-1: USB disconnect, device number 7 [ 801.640028][ T867] syzkaller1: entered promiscuous mode [ 801.645529][ T867] syzkaller1: entered allmulticast mode [ 801.925662][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 802.926197][T17158] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 802.936740][ T893] netlink: 'syz.2.12530': attribute type 6 has an invalid length. [ 802.955694][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 803.082603][T17158] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.111185][T17158] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 803.125276][T17158] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.145698][T17158] usb 2-1: Product: syz [ 803.151764][T17158] usb 2-1: Manufacturer: syz [ 803.184204][T17158] usb 2-1: SerialNumber: syz [ 803.223156][ T910] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.12535'. [ 803.354876][ T917] bridge1: entered promiscuous mode [ 803.362378][ T917] bridge1: entered allmulticast mode [ 803.372534][ T917] team0: Port device bridge1 added [ 803.390224][ T917] bridge0: port 1(team0) entered blocking state [ 803.406428][ T917] bridge0: port 1(team0) entered disabled state [ 803.426164][ T917] team0: entered allmulticast mode [ 803.443448][ T917] team0: entered promiscuous mode [ 803.940306][ T941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12543'. [ 803.995742][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 804.246923][T17158] cdc_ncm 2-1:1.0: bind() failure [ 804.274359][T17158] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 804.282219][T17158] cdc_ncm 2-1:1.1: bind() failure [ 804.296103][T17158] usb 2-1: USB disconnect, device number 8 [ 804.881215][ T967] ip6tnl4: entered allmulticast mode [ 804.960430][ T969] loop8: detected capacity change from 0 to 8 [ 804.970193][ T364] Dev loop8: unable to read RDB block 8 [ 804.979022][ T364] loop8: unable to read partition table [ 804.995286][ T364] loop8: partition table beyond EOD, truncated [ 805.017850][ T969] Dev loop8: unable to read RDB block 8 [ 805.034638][ T969] loop8: unable to read partition table [ 805.040484][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 805.051993][ T969] loop8: partition table beyond EOD, truncated [ 805.060774][ T969] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 805.403571][ T981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12560'. [ 805.917396][ T1001] bond4: option primary_reselect: invalid value (13) [ 805.927199][ T1001] bond4 (unregistering): Released all slaves [ 806.075757][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 806.225744][T17169] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 806.378289][T17169] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.389255][T17169] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.402699][T17169] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 806.413124][T17169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 806.423445][T17169] usb 4-1: SerialNumber: syz [ 806.654654][T17169] usb 4-1: 0:2 : does not exist [ 806.680538][T17169] usb 4-1: USB disconnect, device number 4 [ 806.754907][ T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.025397][ T1024] netlink: 'syz.2.12577': attribute type 29 has an invalid length. [ 807.037011][ T1024] netlink: 'syz.2.12577': attribute type 29 has an invalid length. [ 807.047053][ T1024] netlink: 500 bytes leftover after parsing attributes in process `syz.2.12577'. [ 807.056823][ T1024] unsupported nla_type 58 [ 807.115670][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 807.365758][T17169] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 807.516230][T17158] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 807.555865][T17169] usb 3-1: Using ep0 maxpacket: 32 [ 807.567100][T17169] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 807.575458][T17169] usb 3-1: config 0 has no interface number 0 [ 807.592840][T17169] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 807.608728][T17169] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 807.618531][T17169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.631395][T17169] usb 3-1: Product: syz [ 807.639448][T17169] usb 3-1: Manufacturer: syz [ 807.644423][T17169] usb 3-1: SerialNumber: syz [ 807.654517][T17169] usb 3-1: config 0 descriptor?? [ 807.664030][ T1026] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 807.677928][T17158] usb 4-1: Using ep0 maxpacket: 16 [ 807.686683][T17158] usb 4-1: config 1 has an invalid descriptor of length 133, skipping remainder of the config [ 807.699114][T17158] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 807.720233][T17158] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.730720][T17158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.739159][T17158] usb 4-1: Product: syz [ 807.753590][T17158] usb 4-1: Manufacturer: syz [ 807.759467][T17158] usb 4-1: SerialNumber: syz [ 807.896337][ T1026] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 807.992126][T17158] usb 4-1: 0:2 : does not exist [ 808.019105][T17158] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 808.057857][T17158] usb 4-1: USB disconnect, device number 5 [ 808.101806][ T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.165774][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 808.440018][ T30] audit: type=1326 audit(1767893051.014:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab918f749 code=0x7ffc0000 [ 808.484544][ T30] audit: type=1326 audit(1767893051.034:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f9ab918f749 code=0x7ffc0000 [ 808.521495][T17169] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 808.534765][ T30] audit: type=1326 audit(1767893051.044:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab918f749 code=0x7ffc0000 [ 808.586317][ T30] audit: type=1326 audit(1767893051.044:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1064 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab918f749 code=0x7ffc0000 [ 808.723207][T17169] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 808.738547][T17169] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 808.763558][T17169] asix 3-1:0.188: probe with driver asix failed with error -71 [ 808.786238][T17169] usb 3-1: USB disconnect, device number 2 [ 809.196229][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 810.235650][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 811.275655][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 812.325650][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 812.386323][T17158] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 812.421082][ T1203] input: syz0 as /devices/virtual/input/input132 [ 812.550311][T17158] usb 4-1: Using ep0 maxpacket: 32 [ 812.558089][T17158] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 812.569414][T17158] usb 4-1: config 0 has no interface number 0 [ 812.576118][T17158] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 812.612413][T17158] usb 4-1: config 0 interface 85 has no altsetting 0 [ 812.643444][T17158] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 812.659898][T17158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.682931][T17158] usb 4-1: Product: syz [ 812.688748][T17158] usb 4-1: Manufacturer: syz [ 812.693801][T17158] usb 4-1: SerialNumber: syz [ 812.702827][T17158] usb 4-1: config 0 descriptor?? [ 813.127398][ T1199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.146508][ T1199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.355660][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 813.367188][T17158] appletouch 4-1:0.85: Geyser mode initialized. [ 813.386052][T17158] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input133 [ 813.606802][T17158] usb 4-1: USB disconnect, device number 6 [ 813.667485][T17158] appletouch 4-1:0.85: input: appletouch disconnected [ 813.836647][T17169] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 814.005742][T17169] usb 3-1: Using ep0 maxpacket: 8 [ 814.017794][T17169] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 814.036078][T17169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 814.061010][T17169] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.076135][T17169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 814.088932][T17169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 814.110190][T17169] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 814.118680][T17169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 814.131632][T17169] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.145118][T17169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 814.162731][T17169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 814.176187][T17169] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 814.183721][T17169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 814.232042][T17169] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 814.262160][T17169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 814.284999][T17169] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 814.306085][T17169] usb 3-1: string descriptor 0 read error: -22 [ 814.312742][T17169] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 814.322636][T17169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.341271][T17169] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 814.395680][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 814.580524][T17169] usb 3-1: USB disconnect, device number 3 [ 815.051328][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.065704][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.435642][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 815.864241][ T1302] netlink: 'syz.4.12678': attribute type 6 has an invalid length. [ 816.346366][T17169] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 816.475782][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 816.507965][T17169] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 816.522503][T17169] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.558817][T17169] usb 4-1: config 0 descriptor?? [ 816.618960][ T1343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12699'. [ 816.646326][ T1343] bond0: ARP target 128.0.0.0 is already present [ 816.663566][ T1343] bond0: option arp_ip_target: invalid value (128) [ 816.819414][ T1348] cifs: Unknown parameter 'fd' [ 817.515645][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 817.598737][T17169] usb 4-1: Cannot set autoneg [ 817.603954][T17169] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 817.635777][T17169] usb 4-1: USB disconnect, device number 7 [ 818.276708][ T1391] bond0: (slave syz_tun): Releasing backup interface [ 818.307519][ T1391] team0: left allmulticast mode [ 818.312450][ T1391] team0: left promiscuous mode [ 818.320494][ T1391] bridge0: port 1(team0) entered disabled state [ 818.334714][ T1391] bond0: (slave dummy0): Releasing backup interface [ 818.343075][ T1391] dummy0: left promiscuous mode [ 818.363530][ T1391] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 818.401295][ T1395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12719'. [ 818.556105][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 818.855713][T17169] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 819.016049][T17169] usb 3-1: Using ep0 maxpacket: 32 [ 819.023907][T17169] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 819.050502][T17169] usb 3-1: config 1 interface 0 has no altsetting 0 [ 819.078142][T17169] usb 3-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 819.096600][T17169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.108444][T17169] usb 3-1: Product: syz [ 819.112850][T17169] usb 3-1: Manufacturer: syz [ 819.119713][T17169] usb 3-1: SerialNumber: syz [ 819.215085][ T1410] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 819.222971][ T1410] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 819.412997][T17169] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input134 [ 819.472292][T17169] usb 3-1: USB disconnect, device number 4 [ 819.472452][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 819.588906][T17169] appletouch 3-1:1.0: input: appletouch disconnected [ 819.596592][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 819.898567][ T1431] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 820.070538][ T1436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12734'. [ 820.645655][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 820.817714][ T30] audit: type=1326 audit(1767893063.394:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1471 comm="syz.4.12751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22018f749 code=0x7ffc0000 [ 820.863313][ T1467] netlink: 'syz.1.12749': attribute type 6 has an invalid length. [ 821.056609][ T30] audit: type=1326 audit(1767893063.634:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1471 comm="syz.4.12751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fa22018f749 code=0x7ffc0000 [ 821.108208][ T30] audit: type=1326 audit(1767893063.634:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1471 comm="syz.4.12751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22018f749 code=0x7ffc0000 [ 821.150171][ T30] audit: type=1326 audit(1767893063.634:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1471 comm="syz.4.12751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22018f749 code=0x7ffc0000 [ 821.211523][ T30] audit: type=1326 audit(1767893063.644:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1471 comm="syz.4.12751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa22018f749 code=0x7ffc0000 [ 821.235332][ T30] audit: type=1326 audit(1767893063.644:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1471 comm="syz.4.12751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22018f749 code=0x7ffc0000 [ 821.290675][ T30] audit: type=1326 audit(1767893063.644:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1471 comm="syz.4.12751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22018f749 code=0x7ffc0000 [ 821.362743][ T30] audit: type=1326 audit(1767893063.654:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1471 comm="syz.4.12751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa22018f749 code=0x7ffc0000 [ 821.402769][ T30] audit: type=1326 audit(1767893063.654:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1471 comm="syz.4.12751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22018f749 code=0x7ffc0000 [ 821.428002][ T30] audit: type=1326 audit(1767893063.654:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1471 comm="syz.4.12751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22018f749 code=0x7ffc0000 [ 821.675712][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 822.715683][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 822.990281][ T1553] bond0: Removing last ns target with arp_interval on [ 823.001360][ T1553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.526085][ T1577] loop7: detected capacity change from 0 to 7 [ 823.548195][ T364] Dev loop7: unable to read RDB block 7 [ 823.556501][ T364] loop7: unable to read partition table [ 823.562418][ T364] loop7: partition table beyond EOD, truncated [ 823.570156][ T1577] Dev loop7: unable to read RDB block 7 [ 823.580087][ T1577] loop7: unable to read partition table [ 823.586414][ T1577] loop7: partition table beyond EOD, truncated [ 823.615714][ T1577] loop_reread_partitions: partition scan of loop7 (被x ) failed (rc=-5) [ 823.755740][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 824.072313][ T1595] pim6reg: entered allmulticast mode [ 824.093750][ T1595] pim6reg: left allmulticast mode [ 824.122125][ T1596] delete_channel: no stack [ 824.795768][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 825.116152][T17169] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 825.277648][T17169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.299229][T17169] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.341717][T17169] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 825.365494][T17169] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 825.375418][T17169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.401739][T17169] usb 3-1: config 0 descriptor?? [ 825.546728][T17158] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 825.706178][T17158] usb 4-1: Using ep0 maxpacket: 32 [ 825.714029][T17158] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 825.725930][T17158] usb 4-1: config 0 has no interface number 0 [ 825.743538][T17158] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 825.785323][T17158] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 825.796510][T17158] usb 4-1: config 0 interface 126 has no altsetting 0 [ 825.805412][T17158] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 825.845687][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 825.849423][T17158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.882027][T17158] usb 4-1: Product: syz [ 825.892050][T17158] usb 4-1: Manufacturer: syz [ 825.897523][T17169] plantronics 0003:047F:FFFF.00C5: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 825.898292][T17158] usb 4-1: SerialNumber: syz [ 825.918829][T17158] usb 4-1: config 0 descriptor?? [ 825.946046][ T1629] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 825.953376][ T1629] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 826.139334][ T5919] usb 3-1: USB disconnect, device number 5 [ 826.387987][T17158] ir_usb 4-1:0.126: IR Dongle converter detected [ 826.589537][T17158] usb 4-1: IRDA class descriptor not found, device not bound [ 826.658992][T17169] hid-generic 0000:0000:0000.00C6: unknown main item tag 0x0 [ 826.678138][T17169] hid-generic 0000:0000:0000.00C6: hidraw0: HID v0.00 Device [syz1] on syz0 [ 826.794160][T17169] usb 4-1: USB disconnect, device number 8 [ 826.875674][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 827.221219][ T1677] input: syz0 as /devices/virtual/input/input135 [ 827.381907][ T1686] input: syz1 as /devices/virtual/input/input136 [ 827.518664][ T1693] syzkaller1: entered promiscuous mode [ 827.527292][ T1693] syzkaller1: entered allmulticast mode [ 827.817840][ T1703] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12854'. [ 827.827542][T17158] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 827.915640][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 827.986284][T17158] usb 2-1: Using ep0 maxpacket: 8 [ 827.996922][T17158] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 828.009359][T17158] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 828.022438][T17158] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 828.040633][T17158] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 828.051821][T17158] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.075442][T17158] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 828.087087][T17158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.336505][T17158] usb 2-1: usb_control_msg returned -32 [ 828.354587][T17158] usbtmc 2-1:16.0: can't read capabilities [ 828.518899][ T1727] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12865'. [ 828.918380][ T9] usb 2-1: USB disconnect, device number 9 [ 828.925704][T17158] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 828.955785][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 829.075914][T17158] usb 3-1: Using ep0 maxpacket: 32 [ 829.082675][T17158] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 829.091098][T17158] usb 3-1: config 2 has no interface number 0 [ 829.097852][T17158] usb 3-1: config 2 interface 88 has no altsetting 0 [ 829.109778][T17158] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 829.119879][T17158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.130861][T17158] usb 3-1: Product: syz [ 829.135044][T17158] usb 3-1: Manufacturer: syz [ 829.139763][T17158] usb 3-1: SerialNumber: syz [ 830.005713][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 830.162876][T17158] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 830.174553][T17158] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 830.186972][T17158] asix 3-1:2.88: probe with driver asix failed with error -71 [ 830.197877][T17158] usb 3-1: USB disconnect, device number 6 [ 830.953095][ T1766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12882'. [ 830.975501][ T1766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12882'. [ 831.035681][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 831.898127][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 831.969294][ T1805] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.12898'. [ 832.059825][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.071312][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.081392][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 832.089268][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 832.103400][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 832.114048][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.126987][ T9] usb 3-1: config 0 descriptor?? [ 832.528253][ T1826] kvm: kvm [1825]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xfffffffffffffffc [ 832.568761][ T9] plantronics 0003:047F:FFFF.00C7: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 833.115671][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 833.176151][T17158] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 833.355658][T17158] usb 2-1: Using ep0 maxpacket: 16 [ 833.363248][T17158] usb 2-1: config 0 interface 0 altsetting 235 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.395636][T17158] usb 2-1: config 0 interface 0 altsetting 235 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.407077][T17158] usb 2-1: config 0 interface 0 has no altsetting 0 [ 833.413761][T17158] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 833.423391][T17158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.434782][T17158] usb 2-1: config 0 descriptor?? [ 833.626405][ T5919] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 833.805996][ T5919] usb 4-1: Using ep0 maxpacket: 8 [ 833.813065][ T5919] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 833.825606][ T5919] usb 4-1: config 179 has no interface number 0 [ 833.833394][ T5919] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 833.857696][ T5919] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 833.862128][ C0] plantronics 0003:047F:FFFF.00C7: usb_submit_urb(ctrl) failed: -1 [ 833.871037][T17158] mcp2221 0003:04D8:00DD.00C8: unknown main item tag 0x0 [ 833.891616][T17169] usb 3-1: USB disconnect, device number 7 [ 833.895630][ T5919] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 833.920347][T17158] mcp2221 0003:04D8:00DD.00C8: unknown main item tag 0x0 [ 833.945676][ T5919] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 833.961785][T17158] mcp2221 0003:04D8:00DD.00C8: unknown main item tag 0x0 [ 833.982579][T17158] mcp2221 0003:04D8:00DD.00C8: unknown main item tag 0x0 [ 833.996106][ T5919] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 834.006647][T17158] mcp2221 0003:04D8:00DD.00C8: unknown main item tag 0x0 [ 834.017080][T17158] mcp2221 0003:04D8:00DD.00C8: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 834.030178][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.052290][ T1854] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 834.120776][T17158] usb 2-1: USB disconnect, device number 10 [ 834.155653][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 834.272264][ T5919] hid-generic 0000:3000000:0000.00C9: unknown main item tag 0x4 [ 834.285093][ T5919] hid-generic 0000:3000000:0000.00C9: unknown main item tag 0x2 [ 834.293025][ T5919] hid-generic 0000:3000000:0000.00C9: unknown main item tag 0x0 [ 834.301238][ T5919] hid-generic 0000:3000000:0000.00C9: unknown main item tag 0x0 [ 834.312600][ T5919] hid-generic 0000:3000000:0000.00C9: unknown main item tag 0x0 [ 834.331781][ T5919] hid-generic 0000:3000000:0000.00C9: hidraw0: HID v0.00 Device [sy] on syz0 [ 834.392407][T17158] usb 4-1: USB disconnect, device number 9 [ 834.444570][ T1870] fido_id[1870]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 835.195747][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 835.626417][ T5919] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 835.801462][ T5919] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 835.821772][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.840342][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 835.840361][ T30] audit: type=1326 audit(1767893078.414:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1909 comm="syz.1.12943" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ab918f749 code=0x0 [ 835.852315][ T5919] usb 4-1: config 0 descriptor?? [ 835.932865][ T5919] gspca_main: spca508-2.14.0 probing 8086:0110 [ 836.153674][ T5919] gspca_spca508: reg_read err -32 [ 836.166708][ T5919] gspca_spca508: reg_read err -32 [ 836.172837][ T5919] gspca_spca508: reg_read err -32 [ 836.235664][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 836.382684][ T5919] gspca_spca508: reg_read err -71 [ 836.401570][ T5919] gspca_spca508: reg write: error -71 [ 836.419192][ T5919] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 836.449869][ T5919] usb 4-1: USB disconnect, device number 10 [ 836.798213][ T1941] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.12956'. [ 836.825446][ T5919] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 836.996099][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 837.008935][ T5919] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 837.031644][ T5919] usb 3-1: config 0 has no interface number 0 [ 837.049981][ T5919] usb 3-1: config 0 interface 12 has no altsetting 0 [ 837.079678][ T5919] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 837.098358][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.108907][ T5919] usb 3-1: Product: syz [ 837.113655][ T5919] usb 3-1: Manufacturer: syz [ 837.118895][ T5919] usb 3-1: SerialNumber: syz [ 837.130379][ T5919] usb 3-1: config 0 descriptor?? [ 837.216550][T17158] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 837.245513][ T1957] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12963'. [ 837.275662][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 837.398313][T17158] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.410097][T17158] usb 2-1: config 0 has no interfaces? [ 837.416876][T17158] usb 2-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 837.427331][T17158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.445659][T17151] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 837.466664][T17158] usb 2-1: config 0 descriptor?? [ 837.601097][ T1964] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.12966'. [ 837.639561][T17151] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 837.664255][T17151] usb 4-1: config 0 interface 0 has no altsetting 0 [ 837.674805][T17151] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 837.687492][T17151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.710038][T17151] usb 4-1: config 0 descriptor?? [ 837.716958][ T1955] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 837.744165][T17169] usb 2-1: USB disconnect, device number 11 [ 837.956932][ T5919] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71 [ 837.985853][ T5919] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 837.999150][ T5919] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 838.025903][ T5919] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 838.087262][ T5919] usb 3-1: USB disconnect, device number 8 [ 838.149024][ T1955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.173077][ T1955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.194978][T17151] usbhid 4-1:0.0: can't add hid device: -71 [ 838.202443][T17151] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 838.221624][T17151] usb 4-1: USB disconnect, device number 11 [ 838.315677][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 838.935889][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 839.119095][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 839.129169][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 839.139484][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 839.158362][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 839.167880][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 839.176338][ T9] usb 3-1: Product: syz [ 839.180529][ T9] usb 3-1: Manufacturer: syz [ 839.185259][ T9] usb 3-1: SerialNumber: syz [ 839.355867][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 839.413497][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 839.673924][T17151] usb 3-1: USB disconnect, device number 9 [ 839.697130][T17151] usblp0: removed [ 840.228639][T17169] hid_parser_main: 2 callbacks suppressed [ 840.228661][T17169] hid-generic 0000:0000:0000.00CA: unknown main item tag 0x0 [ 840.284217][T17169] hid-generic 0000:0000:0000.00CA: hidraw0: HID v0.00 Device [syz1] on syz0 [ 840.395745][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 840.998274][ T2055] sctp: [Deprecated]: syz.3.13004 (pid 2055) Use of int in maxseg socket option. [ 840.998274][ T2055] Use struct sctp_assoc_value instead [ 841.015998][T17169] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 841.165727][T17169] usb 3-1: Using ep0 maxpacket: 32 [ 841.177781][T17169] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 841.197655][T17169] usb 3-1: config 0 has no interface number 0 [ 841.205245][T17169] usb 3-1: config 0 interface 230 has no altsetting 0 [ 841.220049][T17169] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 841.234082][T17169] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.246745][T17169] usb 3-1: Product: syz [ 841.251366][T17169] usb 3-1: Manufacturer: syz [ 841.265994][T17169] usb 3-1: SerialNumber: syz [ 841.286899][T17169] usb 3-1: config 0 descriptor?? [ 841.313488][T17169] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 841.352957][T17169] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 841.435701][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 841.565704][T17151] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 841.582768][ T2078] sctp: [Deprecated]: syz.1.13013 (pid 2078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 841.582768][ T2078] Use struct sctp_sack_info instead [ 841.614060][ T2080] syzkaller1: entered promiscuous mode [ 841.621464][ T2080] syzkaller1: entered allmulticast mode [ 841.729917][ T2082] netlink: 'syz.0.13016': attribute type 1 has an invalid length. [ 841.737476][T17151] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 841.738680][ T2082] netlink: 'syz.0.13016': attribute type 2 has an invalid length. [ 841.747801][T17151] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 841.759214][ T2082] netlink: 'syz.0.13016': attribute type 1 has an invalid length. [ 841.769184][T17151] usb 4-1: config 0 interface 0 has no altsetting 0 [ 841.776051][ T2082] netlink: 'syz.0.13016': attribute type 3 has an invalid length. [ 841.784386][T17151] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 841.803283][T17151] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 841.812417][T17151] usb 4-1: Product: syz [ 841.816932][T17151] usb 4-1: Manufacturer: syz [ 841.821573][T17151] usb 4-1: SerialNumber: syz [ 841.830221][T17151] usb 4-1: config 0 descriptor?? [ 841.840173][T17151] hub 4-1:0.0: bad descriptor, ignoring hub [ 841.846451][T17151] hub 4-1:0.0: probe with driver hub failed with error -5 [ 841.857766][T17151] usb 4-1: selecting invalid altsetting 0 [ 842.475680][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 842.484488][ T2068] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 842.653471][ T2068] usb 4-1: device firmware changed [ 842.667056][T17151] usb 4-1: USB disconnect, device number 12 [ 842.826269][T17158] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 842.834587][T17151] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 842.986410][T17158] usb 2-1: Using ep0 maxpacket: 16 [ 842.993438][T17158] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.003751][T17151] usb 4-1: config index 0 descriptor too short (expected 39, got 18) [ 843.012418][T17158] usb 2-1: config 0 interface 0 has no altsetting 0 [ 843.019650][T17151] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 843.032941][T17158] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 843.042576][T17158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.051067][T17151] usb 4-1: config 0 interface 0 has no altsetting 0 [ 843.061114][T17158] usb 2-1: config 0 descriptor?? [ 843.067268][T17151] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 843.076867][T17151] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 843.085330][T17151] usb 4-1: Product: syz [ 843.092598][T17151] usb 4-1: Manufacturer: syz [ 843.097869][T17151] usb 4-1: SerialNumber: syz [ 843.106370][T17151] usb 4-1: config 0 descriptor?? [ 843.113540][T17151] hub 4-1:0.0: bad descriptor, ignoring hub [ 843.121280][T17151] hub 4-1:0.0: probe with driver hub failed with error -5 [ 843.141936][T17151] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 843.183941][T18795] udevd[18795]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.426080][ T9] usb 4-1: USB disconnect, device number 13 [ 843.480767][ T2101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.490056][ T2101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.511872][T17158] cougar 0003:060B:500A.00CB: unknown main item tag 0x0 [ 843.519211][T17158] cougar 0003:060B:500A.00CB: unknown main item tag 0x0 [ 843.525673][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 843.527198][T17158] cougar 0003:060B:500A.00CB: unknown main item tag 0x0 [ 843.541887][T17158] cougar 0003:060B:500A.00CB: unknown main item tag 0x0 [ 843.549269][T17158] cougar 0003:060B:500A.00CB: unknown main item tag 0x0 [ 843.557248][T17158] cougar 0003:060B:500A.00CB: unknown main item tag 0x0 [ 843.561262][T17169] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 843.564502][T17158] cougar 0003:060B:500A.00CB: unknown main item tag 0x0 [ 843.595331][T17158] cougar 0003:060B:500A.00CB: unknown main item tag 0x0 [ 843.604218][T17158] cougar 0003:060B:500A.00CB: unknown main item tag 0x0 [ 843.620910][T17158] cougar 0003:060B:500A.00CB: item 0 2 0 8 parsing failed [ 843.629216][T17158] cougar 0003:060B:500A.00CB: parse failed [ 843.635314][T17158] cougar 0003:060B:500A.00CB: probe with driver cougar failed with error -22 [ 843.707968][T17158] usb 2-1: USB disconnect, device number 12 [ 843.754191][T17169] usb 3-1: USB disconnect, device number 10 [ 844.172717][ T2120] input: syz0 as /devices/virtual/input/input137 [ 844.495733][T17158] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 844.555788][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 844.675667][T17158] usb 4-1: Using ep0 maxpacket: 8 [ 844.686270][T17158] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 844.707420][T17158] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 844.741120][T17158] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 844.793439][T17158] usb 4-1: config 250 has no interface number 0 [ 844.800615][T17158] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 844.823649][T17158] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 844.835860][T17158] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 844.848824][T17158] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 844.864783][T17158] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 844.883271][T17158] usb 4-1: config 250 interface 228 has no altsetting 0 [ 844.902921][T17158] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 844.916822][T17158] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 844.935444][T17158] usb 4-1: Product: syz [ 844.945928][T17158] usb 4-1: SerialNumber: syz [ 844.969642][ T2146] netlink: set zone limit has 4 unknown bytes [ 844.974947][T17158] hub 4-1:250.228: bad descriptor, ignoring hub [ 844.990685][T17158] hub 4-1:250.228: probe with driver hub failed with error -5 [ 845.045727][T17151] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 845.192151][T17158] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 14 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 845.210542][ T2155] input: syz0 as /devices/virtual/input/input138 [ 845.218692][T17151] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 845.237141][T17151] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 845.264573][T17151] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 845.292228][T17151] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 845.317282][T17151] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 845.333944][T17151] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 845.343740][T17151] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 845.352731][T17151] usb 3-1: Product: syz [ 845.359247][T17151] usb 3-1: Manufacturer: syz [ 845.369983][T17151] cdc_wdm 3-1:1.0: skipping garbage [ 845.380011][T17151] cdc_wdm 3-1:1.0: skipping garbage [ 845.393898][T17151] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 845.400900][T17151] cdc_wdm 3-1:1.0: Unknown control protocol [ 845.460617][T17158] usb 4-1: reset high-speed USB device number 14 using dummy_hcd [ 845.595706][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 845.660311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 845.689745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 845.698610][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 845.707240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 845.717048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 845.725702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 845.734362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 845.743097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 845.752287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 846.277494][T17169] usb 4-1: USB disconnect, device number 14 [ 846.302853][T17169] usblp0: removed [ 846.635640][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 847.675660][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 847.834425][T17158] usb 3-1: USB disconnect, device number 11 [ 848.715656][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 849.624046][ T2346] loop5: detected capacity change from 0 to 4743 [ 849.671950][ T364] Buffer I/O error on dev loop5, logical block 592, async page read [ 849.676452][ T2346] loop5: detected capacity change from 4743 to 6583 [ 849.755661][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 849.774006][ T364] Buffer I/O error on dev loop5, logical block 822, async page read [ 850.795633][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 851.507205][ T30] audit: type=1326 audit(1767893094.084:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2400 comm="syz.0.13114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb18f749 code=0x0 [ 851.835746][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 851.953304][ T2393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13111'. [ 851.976020][ T2393] netlink: 'syz.1.13111': attribute type 5 has an invalid length. [ 851.984892][ T2393] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13111'. [ 852.056201][T17158] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 852.066470][ T2393] geneve0: entered promiscuous mode [ 852.097239][ T2393] geneve0: entered allmulticast mode [ 852.249049][T17158] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 852.286998][T17158] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.309483][T17158] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 852.335791][T17158] usb 4-1: config 0 interface 0 has no altsetting 0 [ 852.354973][T17158] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.364712][T17158] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 852.378141][T17158] usb 4-1: config 0 interface 0 has no altsetting 0 [ 852.387589][T17158] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.426511][T17158] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 852.445699][T17151] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 852.479717][T17158] usb 4-1: config 0 interface 0 has no altsetting 0 [ 852.499483][T17158] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.518829][T17158] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 852.545802][T17158] usb 4-1: config 0 interface 0 has no altsetting 0 [ 852.575825][T17158] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.584798][T17158] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 852.629762][T17158] usb 4-1: config 0 interface 0 has no altsetting 0 [ 852.643704][T17151] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 852.665859][T17151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 852.678925][T17158] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.690010][T17158] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 852.711510][T17151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 852.722321][T17158] usb 4-1: config 0 interface 0 has no altsetting 0 [ 852.738138][T17151] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 852.752827][T17151] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 852.762527][T17151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.772040][T17158] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.781758][T17158] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 852.795387][T17151] usb 3-1: config 0 descriptor?? [ 852.815679][T17158] usb 4-1: config 0 interface 0 has no altsetting 0 [ 852.824242][T17158] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 852.842688][T17158] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 852.869722][T17158] usb 4-1: config 0 interface 0 has no altsetting 0 [ 852.885641][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 852.895019][ T2435] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13125'. [ 852.897262][T17158] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 852.935744][T17158] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 852.954469][T17158] usb 4-1: Product: syz [ 852.959384][T17158] usb 4-1: Manufacturer: syz [ 852.964033][T17158] usb 4-1: SerialNumber: syz [ 852.989428][T17158] usb 4-1: config 0 descriptor?? [ 853.012145][T17158] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 853.039792][ T2439] input: syz1 as /devices/virtual/input/input141 [ 853.280533][ C1] usb 4-1: yurex_control_callback - control failed: -2 [ 853.313505][T17158] usb 4-1: USB disconnect, device number 15 [ 853.341707][T17151] plantronics 0003:047F:FFFF.00CC: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 853.356204][T17158] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 853.478008][T17151] usb 3-1: USB disconnect, device number 12 [ 853.661639][ T2464] xt_CT: You must specify a L4 protocol and not use inversions on it [ 853.915655][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 854.191438][T17151] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 854.270621][ T2481] loop4: detected capacity change from 0 to 7 [ 854.288131][ T2481] Dev loop4: unable to read RDB block 7 [ 854.294445][ T2481] loop4: unable to read partition table [ 854.300958][ T2481] loop4: partition table beyond EOD, truncated [ 854.318928][ T2481] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 854.355720][T17151] usb 2-1: Using ep0 maxpacket: 8 [ 854.363135][ T5198] Dev loop4: unable to read RDB block 7 [ 854.378497][T17151] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 854.387379][ T5198] loop4: unable to read partition table [ 854.396482][ T5198] loop4: partition table beyond EOD, truncated [ 854.423633][T17151] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 854.456192][T17151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.483369][T17151] usb 2-1: Product: syz [ 854.496494][T17151] usb 2-1: Manufacturer: syz [ 854.503819][T17151] usb 2-1: SerialNumber: syz [ 854.520394][T17151] usb 2-1: config 0 descriptor?? [ 854.531052][T17151] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 854.539941][T17151] usb 2-1: setting power ON [ 854.544938][T17151] dvb-usb: bulk message failed: -22 (2/0) [ 854.583912][T17151] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 854.612921][T17151] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 854.623470][T17151] usb 2-1: media controller created [ 854.661014][T17151] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 854.710128][T17151] usb 2-1: selecting invalid altsetting 6 [ 854.724843][T17151] usb 2-1: digital interface selection failed (-22) [ 854.733145][T17151] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 854.754846][T17151] usb 2-1: setting power OFF [ 854.760651][T17151] dvb-usb: bulk message failed: -22 (2/0) [ 854.766889][T17151] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 854.791411][T17151] (NULL device *): no alternate interface [ 854.860474][T17151] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 854.892061][T17151] usb 2-1: USB disconnect, device number 13 [ 854.955641][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 855.267292][ T2513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13153'. [ 855.312401][ T2514] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13152'. [ 855.826123][ T2538] netlink: 'syz.3.13162': attribute type 1 has an invalid length. [ 855.995689][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 856.038772][ T2538] bond3: entered promiscuous mode [ 856.044411][ T2538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 856.086671][ T2544] bond3: (slave bridge4): making interface the new active one [ 856.095016][ T2544] bridge4: entered promiscuous mode [ 856.103047][ T2544] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 856.640547][ T2566] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.13168'. [ 857.035791][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 857.038365][ T2574] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.13171'. [ 857.260451][ T2585] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.13175'. [ 858.075730][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 858.238871][ T30] audit: type=1326 audit(1767893100.814:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2593 comm="syz.2.13178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6378f749 code=0x7fc00000 [ 858.922320][ T2634] IPVS: Scheduler module ip_vs_ not found [ 859.115684][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 859.503981][ T2660] netlink: 'syz.2.13199': attribute type 4 has an invalid length. [ 860.155657][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 860.755498][ T2729] netlink: 'syz.2.13226': attribute type 1 has an invalid length. [ 861.195707][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 861.267384][ T2757] fuse: Bad value for 'fd' [ 861.574494][ T2771] loop4: detected capacity change from 0 to 7 [ 861.583712][ T364] Dev loop4: unable to read RDB block 7 [ 861.590097][ T364] loop4: unable to read partition table [ 861.598569][ T364] loop4: partition table beyond EOD, truncated [ 861.606591][ T2771] Dev loop4: unable to read RDB block 7 [ 861.622837][ T2771] loop4: unable to read partition table [ 861.630247][ T2771] loop4: partition table beyond EOD, truncated [ 861.640023][ T2771] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 862.067724][ T2788] input: syz1 as /devices/virtual/input/input143 [ 862.145680][ T5919] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 862.235924][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 862.316308][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 862.329058][ T5919] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 862.349989][ T5919] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 862.370992][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 862.389706][ T5919] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 862.408638][ T5919] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 862.427913][ T5919] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 862.438890][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.658285][ T5919] usb 2-1: usb_control_msg returned -32 [ 862.664481][ T5919] usbtmc 2-1:16.0: can't read capabilities [ 863.036877][ T2813] usbtmc 2-1:16.0: usb_bulk_msg returned -71 [ 863.252213][T17151] usb 2-1: USB disconnect, device number 14 [ 863.275672][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 863.407538][T17158] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 863.577924][T17158] usb 4-1: config 0 interface 0 has no altsetting 0 [ 863.598080][T17158] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 863.615732][T17158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.637197][T17158] usb 4-1: config 0 descriptor?? [ 864.315649][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 864.584955][ T2875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13273'. [ 864.677658][T17158] video4linux radio48: keene_cmd_set failed (-71) [ 864.688046][T17158] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 864.703198][T17158] usb 4-1: USB disconnect, device number 16 [ 865.317751][ T30] audit: type=1326 audit(1767893107.894:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2894 comm="syz.1.13282" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ab918f749 code=0x0 [ 865.355647][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 865.475773][T17151] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 865.625715][T17151] usb 3-1: Using ep0 maxpacket: 8 [ 865.681029][T17151] usb 3-1: unable to get BOS descriptor or descriptor too short [ 865.690451][T17151] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 865.706202][T17151] usb 3-1: can't read configurations, error -71 [ 865.770280][ T2907] vlan3: entered allmulticast mode [ 866.068515][ T2924] netdevsim netdevsim0 : renamed from netdevsim0 [ 866.396130][ T2943] loop4: detected capacity change from 0 to 524287936 [ 866.405805][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 866.536233][T17158] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 866.687814][T17158] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 866.700469][T17158] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.728285][T17158] usb 2-1: config 0 descriptor?? [ 866.742508][T17158] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 866.788887][ T2960] ALSA: mixer_oss: invalid OSS volume '' [ 866.794783][ T2960] ALSA: mixer_oss: invalid OSS volume 'clock' [ 866.801070][ T2960] ALSA: mixer_oss: invalid OSS volume '.base:' [ 866.808172][ T2960] ALSA: mixer_oss: invalid OSS volume '.index:' [ 866.845765][T17151] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 867.028010][T17151] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 867.042909][ T2972] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 867.046194][T17151] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 867.072883][T17151] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 867.095727][T17151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 867.104071][T17151] usb 3-1: SerialNumber: syz [ 867.333546][T17151] usb 3-1: 0:2 : does not exist [ 867.349101][T17158] gspca_cpia1: usb_control_msg 01, error -32 [ 867.356409][T17158] gspca_cpia1: usb_control_msg 01, error -71 [ 867.362428][T17158] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 867.387059][T17158] usb 2-1: USB disconnect, device number 15 [ 867.393856][T17151] usb 3-1: USB disconnect, device number 15 [ 867.435681][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 867.460696][ T364] udevd[364]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.820462][ T2989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13319'. [ 868.475680][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 868.663333][ T30] audit: type=1326 audit(1767893111.234:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3027 comm="syz.4.13336" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa22018f749 code=0x0 [ 868.835930][T17165] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 868.987439][T17165] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 868.995878][T17165] usb 2-1: config 0 has no interface number 0 [ 869.002036][T17165] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 869.013916][T17165] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 869.025400][T17165] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 869.037484][T17165] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 869.047238][T17165] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 869.056164][T17165] usb 2-1: Product: syz [ 869.060430][T17165] usb 2-1: SerialNumber: syz [ 869.077109][T17165] usb 2-1: config 0 descriptor?? [ 869.100851][T17165] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 869.130000][ T3050] xt_hashlimit: size too large, truncated to 1048576 [ 869.136030][T17165] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input144 [ 869.328254][ T3055] sctp: [Deprecated]: syz.3.13347 (pid 3055) Use of struct sctp_assoc_value in delayed_ack socket option. [ 869.328254][ T3055] Use struct sctp_sack_info instead [ 869.349308][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 869.515749][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 869.635318][ T3065] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13352'. [ 869.635413][ T3065] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13352'. [ 869.892015][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.899841][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.915698][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.923068][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.931843][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.939168][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.946326][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.953534][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.961334][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.969320][T17165] usb 2-1: USB disconnect, device number 16 [ 869.969665][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 869.982323][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 869.999337][T17169] hid_parser_main: 832 callbacks suppressed [ 869.999357][T17169] hid-generic 0000:0000:0000.00CD: unknown main item tag 0x0 [ 870.017526][T17165] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 870.033057][T17169] hid-generic 0000:0000:0000.00CD: hidraw0: HID v0.00 Device [syz1] on syz0 [ 870.555650][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 871.138966][ T3113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13372'. [ 871.191890][ T3115] Invalid argument reading file caps for ./file0 [ 871.595647][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 871.604919][ T3140] loop7: detected capacity change from 0 to 7 [ 871.661223][ T3141] usb usb8: usbfs: process 3141 (syz.2.13384) did not claim interface 0 before use [ 871.770467][ T364] Dev loop7: unable to read RDB block 7 [ 871.789799][ T364] loop7: unable to read partition table [ 871.806057][ T364] loop7: partition table beyond EOD, truncated [ 871.813085][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.822951][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.841276][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.851176][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.863637][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.873351][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.881898][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.891666][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.901362][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.911035][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.919812][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.929542][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.938908][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.948618][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.957005][ T3140] ldm_validate_partition_table(): Disk read failed. [ 871.965497][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.975219][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 871.984132][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 871.993819][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 872.002407][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 872.012095][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 872.025356][ T3140] Dev loop7: unable to read RDB block 0 [ 872.061700][ T3140] loop7: unable to read partition table [ 872.068461][ T3140] loop7: partition table beyond EOD, truncated [ 872.076462][ T3140] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 872.635647][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 873.173081][ T3188] sctp: [Deprecated]: syz.0.13402 (pid 3188) Use of struct sctp_assoc_value in delayed_ack socket option. [ 873.173081][ T3188] Use struct sctp_sack_info instead [ 873.666751][ T3209] loop4: detected capacity change from 0 to 7 [ 873.675758][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 873.694995][ T3209] Dev loop4: unable to read RDB block 7 [ 873.717224][ T3209] loop4: unable to read partition table [ 873.739845][ T3209] loop4: partition table beyond EOD, truncated [ 873.752313][ T3209] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 874.352254][ T3242] [ 874.354626][ T3242] ===================================================== [ 874.361577][ T3242] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 874.369227][ T3242] syzkaller #0 Tainted: G L [ 874.375210][ T3242] ----------------------------------------------------- [ 874.382209][ T3242] syz.3.13425/3242 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 874.390029][ T3242] ffff88802463c9f0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 874.398807][ T3242] [ 874.398807][ T3242] and this task is already holding: [ 874.406166][ T3242] ffff88802967e230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 874.415903][ T3242] which would create a new lock dependency: [ 874.421808][ T3242] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 874.429755][ T3242] [ 874.429755][ T3242] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 874.439307][ T3242] (&dev->event_lock#2){..-.}-{3:3} [ 874.439350][ T3242] [ 874.439350][ T3242] ... which became SOFTIRQ-irq-safe at: [ 874.452274][ T3242] lock_acquire+0x107/0x340 [ 874.456984][ T3242] _raw_spin_lock_irqsave+0x40/0x60 [ 874.462293][ T3242] input_inject_event+0xa5/0x340 [ 874.467320][ T3242] led_trigger_event+0x138/0x210 [ 874.472387][ T3242] kbd_bh+0x1f3/0x300 [ 874.476466][ T3242] tasklet_action_common+0x2da/0x4b0 [ 874.481834][ T3242] handle_softirqs+0x22b/0x7c0 [ 874.486676][ T3242] __irq_exit_rcu+0x60/0x150 [ 874.491366][ T3242] irq_exit_rcu+0x9/0x30 [ 874.495724][ T3242] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 874.501580][ T3242] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 874.507664][ T3242] _raw_spin_unlock_irqrestore+0x47/0x80 [ 874.513411][ T3242] do_con_write+0x417a/0x5210 [ 874.518192][ T3242] con_write+0x24/0x40 [ 874.522389][ T3242] n_tty_write+0xd78/0x12a0 [ 874.527082][ T3242] file_tty_write+0x559/0xa20 [ 874.531920][ T3242] vfs_write+0x5c9/0xb30 [ 874.536292][ T3242] ksys_write+0x145/0x250 [ 874.540851][ T3242] do_syscall_64+0xec/0xf80 [ 874.545554][ T3242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.551548][ T3242] [ 874.551548][ T3242] to a SOFTIRQ-irq-unsafe lock: [ 874.558575][ T3242] (tasklist_lock){.+.+}-{3:3} [ 874.558609][ T3242] [ 874.558609][ T3242] ... which became SOFTIRQ-irq-unsafe at: [ 874.571311][ T3242] ... [ 874.571319][ T3242] lock_acquire+0x107/0x340 [ 874.578494][ T3242] _raw_read_lock+0x36/0x50 [ 874.583105][ T3242] __do_wait+0xde/0x740 [ 874.587405][ T3242] do_wait+0x1e8/0x4f0 [ 874.591646][ T3242] kernel_wait+0xab/0x170 [ 874.596105][ T3242] call_usermodehelper_exec_work+0xbe/0x230 [ 874.602131][ T3242] process_scheduled_works+0xad1/0x1770 [ 874.607787][ T3242] worker_thread+0x8a0/0xda0 [ 874.612551][ T3242] kthread+0x711/0x8a0 [ 874.616746][ T3242] ret_from_fork+0x510/0xa50 [ 874.621516][ T3242] ret_from_fork_asm+0x1a/0x30 [ 874.626386][ T3242] [ 874.626386][ T3242] other info that might help us debug this: [ 874.626386][ T3242] [ 874.636637][ T3242] Chain exists of: [ 874.636637][ T3242] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 874.636637][ T3242] [ 874.649623][ T3242] Possible interrupt unsafe locking scenario: [ 874.649623][ T3242] [ 874.657967][ T3242] CPU0 CPU1 [ 874.663442][ T3242] ---- ---- [ 874.668916][ T3242] lock(tasklist_lock); [ 874.673262][ T3242] local_irq_disable(); [ 874.680123][ T3242] lock(&dev->event_lock#2); [ 874.687361][ T3242] lock(&new->fa_lock); [ 874.694146][ T3242] [ 874.697592][ T3242] lock(&dev->event_lock#2); [ 874.702466][ T3242] [ 874.702466][ T3242] *** DEADLOCK *** [ 874.702466][ T3242] [ 874.710619][ T3242] 6 locks held by syz.3.13425/3242: [ 874.715858][ T3242] #0: ffff888029878118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 874.725004][ T3242] #1: ffff88802967e230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 874.735118][ T3242] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 874.744904][ T3242] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 874.754670][ T3242] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 874.764777][ T3242] #5: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 874.773864][ T3242] [ 874.773864][ T3242] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 874.784272][ T3242] -> (&dev->event_lock#2){..-.}-{3:3} { [ 874.789835][ T3242] IN-SOFTIRQ-W at: [ 874.793810][ T3242] lock_acquire+0x107/0x340 [ 874.799962][ T3242] _raw_spin_lock_irqsave+0x40/0x60 [ 874.806829][ T3242] input_inject_event+0xa5/0x340 [ 874.813416][ T3242] led_trigger_event+0x138/0x210 [ 874.820108][ T3242] kbd_bh+0x1f3/0x300 [ 874.825740][ T3242] tasklet_action_common+0x2da/0x4b0 [ 874.832686][ T3242] handle_softirqs+0x22b/0x7c0 [ 874.839367][ T3242] __irq_exit_rcu+0x60/0x150 [ 874.845635][ T3242] irq_exit_rcu+0x9/0x30 [ 874.851521][ T3242] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 874.859231][ T3242] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 874.866981][ T3242] _raw_spin_unlock_irqrestore+0x47/0x80 [ 874.874268][ T3242] do_con_write+0x417a/0x5210 [ 874.880772][ T3242] con_write+0x24/0x40 [ 874.886479][ T3242] n_tty_write+0xd78/0x12a0 [ 874.892651][ T3242] file_tty_write+0x559/0xa20 [ 874.898998][ T3242] vfs_write+0x5c9/0xb30 [ 874.904917][ T3242] ksys_write+0x145/0x250 [ 874.911045][ T3242] do_syscall_64+0xec/0xf80 [ 874.917233][ T3242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.924798][ T3242] INITIAL USE at: [ 874.928739][ T3242] lock_acquire+0x107/0x340 [ 874.934829][ T3242] _raw_spin_lock_irqsave+0x40/0x60 [ 874.941622][ T3242] input_inject_event+0xa5/0x340 [ 874.948225][ T3242] kbd_led_trigger_activate+0xbc/0x100 [ 874.955361][ T3242] led_trigger_set+0x52d/0x950 [ 874.961723][ T3242] led_trigger_set_default+0x260/0x2a0 [ 874.968887][ T3242] led_classdev_register_ext+0x73d/0x960 [ 874.976107][ T3242] input_leds_connect+0x517/0x790 [ 874.982815][ T3242] input_register_device+0xd00/0x1170 [ 874.989771][ T3242] atkbd_connect+0x73b/0xa50 [ 874.995940][ T3242] serio_driver_probe+0x82/0xd0 [ 875.002358][ T3242] really_probe+0x26d/0xad0 [ 875.008423][ T3242] __driver_probe_device+0x18c/0x320 [ 875.015282][ T3242] driver_probe_device+0x4f/0x240 [ 875.021890][ T3242] __driver_attach+0x349/0x650 [ 875.028222][ T3242] bus_for_each_dev+0x233/0x2b0 [ 875.034827][ T3242] serio_handle_event+0x1f9/0x8d0 [ 875.041427][ T3242] process_scheduled_works+0xad1/0x1770 [ 875.048732][ T3242] worker_thread+0x8a0/0xda0 [ 875.054913][ T3242] kthread+0x711/0x8a0 [ 875.060644][ T3242] ret_from_fork+0x510/0xa50 [ 875.066989][ T3242] ret_from_fork_asm+0x1a/0x30 [ 875.073412][ T3242] } [ 875.075897][ T3242] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 875.085004][ T3242] [ 875.085004][ T3242] the dependencies between the lock to be acquired [ 875.085014][ T3242] and SOFTIRQ-irq-unsafe lock: [ 875.098792][ T3242] -> (tasklist_lock){.+.+}-{3:3} { [ 875.104227][ T3242] HARDIRQ-ON-R at: [ 875.108386][ T3242] lock_acquire+0x107/0x340 [ 875.115065][ T3242] _raw_read_lock+0x36/0x50 [ 875.121568][ T3242] __do_wait+0xde/0x740 [ 875.127744][ T3242] do_wait+0x1e8/0x4f0 [ 875.133811][ T3242] kernel_wait+0xab/0x170 [ 875.140135][ T3242] call_usermodehelper_exec_work+0xbe/0x230 [ 875.148039][ T3242] process_scheduled_works+0xad1/0x1770 [ 875.155576][ T3242] worker_thread+0x8a0/0xda0 [ 875.162176][ T3242] kthread+0x711/0x8a0 [ 875.168277][ T3242] ret_from_fork+0x510/0xa50 [ 875.174853][ T3242] ret_from_fork_asm+0x1a/0x30 [ 875.181868][ T3242] SOFTIRQ-ON-R at: [ 875.186026][ T3242] lock_acquire+0x107/0x340 [ 875.192535][ T3242] _raw_read_lock+0x36/0x50 [ 875.199045][ T3242] __do_wait+0xde/0x740 [ 875.205251][ T3242] do_wait+0x1e8/0x4f0 [ 875.211415][ T3242] kernel_wait+0xab/0x170 [ 875.217761][ T3242] call_usermodehelper_exec_work+0xbe/0x230 [ 875.225644][ T3242] process_scheduled_works+0xad1/0x1770 [ 875.233179][ T3242] worker_thread+0x8a0/0xda0 [ 875.239759][ T3242] kthread+0x711/0x8a0 [ 875.245906][ T3242] ret_from_fork+0x510/0xa50 [ 875.252492][ T3242] ret_from_fork_asm+0x1a/0x30 [ 875.259270][ T3242] INITIAL USE at: [ 875.263418][ T3242] lock_acquire+0x107/0x340 [ 875.269822][ T3242] _raw_write_lock_irq+0x3d/0x50 [ 875.276847][ T3242] copy_process+0x2185/0x3950 [ 875.283441][ T3242] kernel_clone+0x21e/0x820 [ 875.289847][ T3242] user_mode_thread+0xdd/0x140 [ 875.296655][ T3242] rest_init+0x23/0x300 [ 875.302719][ T3242] start_kernel+0x381/0x3d0 [ 875.309214][ T3242] x86_64_start_reservations+0x24/0x30 [ 875.316673][ T3242] x86_64_start_kernel+0x143/0x1c0 [ 875.323866][ T3242] common_startup_64+0x13e/0x147 [ 875.330728][ T3242] INITIAL READ USE at: [ 875.335673][ T3242] lock_acquire+0x107/0x340 [ 875.342548][ T3242] _raw_read_lock+0x36/0x50 [ 875.349527][ T3242] __do_wait+0xde/0x740 [ 875.356135][ T3242] do_wait+0x1e8/0x4f0 [ 875.362551][ T3242] kernel_wait+0xab/0x170 [ 875.369247][ T3242] call_usermodehelper_exec_work+0xbe/0x230 [ 875.377488][ T3242] process_scheduled_works+0xad1/0x1770 [ 875.385389][ T3242] worker_thread+0x8a0/0xda0 [ 875.392405][ T3242] kthread+0x711/0x8a0 [ 875.398817][ T3242] ret_from_fork+0x510/0xa50 [ 875.405834][ T3242] ret_from_fork_asm+0x1a/0x30 [ 875.413011][ T3242] } [ 875.415694][ T3242] ... key at: [] tasklist_lock+0x18/0x40 [ 875.423610][ T3242] ... acquired at: [ 875.427593][ T3242] _raw_read_lock+0x36/0x50 [ 875.432284][ T3242] send_sigio+0x101/0x370 [ 875.436796][ T3242] dnotify_handle_event+0x169/0x440 [ 875.442354][ T3242] fsnotify+0x180b/0x1ab0 [ 875.446878][ T3242] path_openat+0x1aa1/0x3dd0 [ 875.451738][ T3242] do_filp_open+0x1fa/0x410 [ 875.456509][ T3242] do_sys_openat2+0x121/0x200 [ 875.461542][ T3242] __x64_sys_openat+0x138/0x170 [ 875.466656][ T3242] do_syscall_64+0xec/0xf80 [ 875.472313][ T3242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.478437][ T3242] [ 875.480849][ T3242] -> (&f_owner->lock){....}-{3:3} { [ 875.486147][ T3242] INITIAL USE at: [ 875.490147][ T3242] lock_acquire+0x107/0x340 [ 875.496383][ T3242] _raw_write_lock_irq+0x3d/0x50 [ 875.503060][ T3242] __f_setown+0x67/0x370 [ 875.509045][ T3242] do_fcntl+0x173f/0x1a50 [ 875.515640][ T3242] __se_sys_fcntl+0xc8/0x150 [ 875.522063][ T3242] do_syscall_64+0xec/0xf80 [ 875.528502][ T3242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.536129][ T3242] INITIAL READ USE at: [ 875.540586][ T3242] lock_acquire+0x107/0x340 [ 875.547266][ T3242] _raw_read_lock_irq+0x45/0x60 [ 875.554379][ T3242] do_fcntl+0x2f9/0x1a50 [ 875.560793][ T3242] __se_sys_fcntl+0xc8/0x150 [ 875.567555][ T3242] do_syscall_64+0xec/0xf80 [ 875.574317][ T3242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.582388][ T3242] } [ 875.584962][ T3242] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 875.593998][ T3242] ... acquired at: [ 875.598246][ T3242] _raw_read_lock_irqsave+0x48/0x60 [ 875.603673][ T3242] send_sigio+0x38/0x370 [ 875.608268][ T3242] kill_fasync+0x24d/0x4d0 [ 875.613069][ T3242] lease_break_callback+0x26/0x30 [ 875.618609][ T3242] __break_lease+0x730/0x1620 [ 875.623481][ T3242] do_dentry_open+0x73a/0x1420 [ 875.628472][ T3242] vfs_open+0x3b/0x340 [ 875.632707][ T3242] path_openat+0x340e/0x3dd0 [ 875.637466][ T3242] do_filp_open+0x1fa/0x410 [ 875.642135][ T3242] do_sys_openat2+0x121/0x200 [ 875.647025][ T3242] __x64_sys_open+0x11e/0x150 [ 875.651888][ T3242] do_syscall_64+0xec/0xf80 [ 875.656577][ T3242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.662998][ T3242] [ 875.665315][ T3242] -> (&new->fa_lock){....}-{3:3} { [ 875.670458][ T3242] INITIAL USE at: [ 875.674382][ T3242] lock_acquire+0x107/0x340 [ 875.680458][ T3242] _raw_write_lock_irq+0x3d/0x50 [ 875.686951][ T3242] fasync_remove_entry+0xf1/0x1c0 [ 875.693911][ T3242] lease_modify+0x1ca/0x3c0 [ 875.700003][ T3242] locks_remove_file+0x4bf/0xea0 [ 875.706626][ T3242] __fput+0x3ab/0xa70 [ 875.712585][ T3242] task_work_run+0x1d4/0x260 [ 875.719038][ T3242] exit_to_user_mode_loop+0xef/0x4e0 [ 875.726231][ T3242] do_syscall_64+0x2c1/0xf80 [ 875.732507][ T3242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.739990][ T3242] INITIAL READ USE at: [ 875.744480][ T3242] lock_acquire+0x107/0x340 [ 875.750998][ T3242] _raw_read_lock_irqsave+0x48/0x60 [ 875.758415][ T3242] kill_fasync+0x199/0x4d0 [ 875.764844][ T3242] fuse_dev_do_write+0x208c/0x47d0 [ 875.771955][ T3242] fuse_dev_write+0x155/0x1e0 [ 875.778629][ T3242] vfs_write+0x5c9/0xb30 [ 875.784860][ T3242] ksys_write+0x145/0x250 [ 875.791180][ T3242] do_syscall_64+0xec/0xf80 [ 875.797687][ T3242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.805586][ T3242] } [ 875.808094][ T3242] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 875.816770][ T3242] ... acquired at: [ 875.820574][ T3242] _raw_read_lock_irqsave+0x48/0x60 [ 875.825959][ T3242] kill_fasync+0x199/0x4d0 [ 875.830568][ T3242] mousedev_notify_readers+0x6f1/0xc00 [ 875.836224][ T3242] mousedev_event+0x602/0x1320 [ 875.841267][ T3242] input_handle_events_default+0xd4/0x1a0 [ 875.847173][ T3242] input_pass_values+0x288/0x890 [ 875.852332][ T3242] input_event_dispose+0x330/0x6b0 [ 875.857723][ T3242] input_inject_event+0x1dd/0x340 [ 875.862934][ T3242] evdev_write+0x2fc/0x480 [ 875.867540][ T3242] vfs_write+0x27e/0xb30 [ 875.872135][ T3242] ksys_write+0x145/0x250 [ 875.876631][ T3242] do_syscall_64+0xec/0xf80 [ 875.881301][ T3242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.887369][ T3242] [ 875.889700][ T3242] [ 875.889700][ T3242] stack backtrace: [ 875.895669][ T3242] CPU: 0 UID: 0 PID: 3242 Comm: syz.3.13425 Tainted: G L syzkaller #0 PREEMPT(full) [ 875.895698][ T3242] Tainted: [L]=SOFTLOCKUP [ 875.895705][ T3242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 875.895723][ T3242] Call Trace: [ 875.895733][ T3242] [ 875.895743][ T3242] dump_stack_lvl+0xe8/0x150 [ 875.895769][ T3242] __lock_acquire+0x2a95/0x2cf0 [ 875.895794][ T3242] ? kill_fasync+0x199/0x4d0 [ 875.895818][ T3242] lock_acquire+0x107/0x340 [ 875.895833][ T3242] ? kill_fasync+0x199/0x4d0 [ 875.895861][ T3242] _raw_read_lock_irqsave+0x48/0x60 [ 875.895888][ T3242] ? kill_fasync+0x199/0x4d0 [ 875.895912][ T3242] kill_fasync+0x199/0x4d0 [ 875.895934][ T3242] ? kill_fasync+0x53/0x4d0 [ 875.895957][ T3242] mousedev_notify_readers+0x6f1/0xc00 [ 875.895987][ T3242] ? mousedev_notify_readers+0x2c/0xc00 [ 875.896013][ T3242] mousedev_event+0x602/0x1320 [ 875.896039][ T3242] input_handle_events_default+0xd4/0x1a0 [ 875.896060][ T3242] ? input_pass_values+0x8d/0x890 [ 875.896075][ T3242] input_pass_values+0x288/0x890 [ 875.896092][ T3242] ? input_handle_event+0x70c/0xf30 [ 875.896114][ T3242] input_event_dispose+0x330/0x6b0 [ 875.896137][ T3242] input_inject_event+0x1dd/0x340 [ 875.896158][ T3242] ? input_inject_event+0xb6/0x340 [ 875.896181][ T3242] evdev_write+0x2fc/0x480 [ 875.896199][ T3242] ? __pfx_evdev_write+0x10/0x10 [ 875.896216][ T3242] ? bpf_lsm_file_permission+0x9/0x20 [ 875.896234][ T3242] ? security_file_permission+0x75/0x290 [ 875.896252][ T3242] ? rw_verify_area+0x255/0x4d0 [ 875.896276][ T3242] ? __pfx_evdev_write+0x10/0x10 [ 875.896293][ T3242] vfs_write+0x27e/0xb30 [ 875.896311][ T3242] ? __pfx_vfs_write+0x10/0x10 [ 875.896326][ T3242] ? __fget_files+0x2a/0x420 [ 875.896347][ T3242] ? __fget_files+0x2a/0x420 [ 875.896366][ T3242] ? __fget_files+0x3a0/0x420 [ 875.896385][ T3242] ? __fget_files+0x2a/0x420 [ 875.896407][ T3242] ksys_write+0x145/0x250 [ 875.896423][ T3242] ? __pfx_ksys_write+0x10/0x10 [ 875.896442][ T3242] do_syscall_64+0xec/0xf80 [ 875.896459][ T3242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.896475][ T3242] ? trace_irq_disable+0x37/0x100 [ 875.896504][ T3242] ? clear_bhb_loop+0x60/0xb0 [ 875.896521][ T3242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.896543][ T3242] RIP: 0033:0x7f8c5dd8f749 [ 875.896564][ T3242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 875.896580][ T3242] RSP: 002b:00007f8c5ec8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 875.896599][ T3242] RAX: ffffffffffffffda RBX: 00007f8c5dfe5fa0 RCX: 00007f8c5dd8f749 [ 875.896613][ T3242] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 875.896624][ T3242] RBP: 00007f8c5de13f91 R08: 0000000000000000 R09: 0000000000000000 [ 875.896635][ T3242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.896646][ T3242] R13: 00007f8c5dfe6038 R14: 00007f8c5dfe5fa0 R15: 00007f8c5e10fa28 [ 875.896664][ T3242] [ 876.192565][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 876.477749][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.484147][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.195728][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 878.235838][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 879.275654][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 880.315793][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 881.355639][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 882.395827][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 883.435709][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available