last executing test programs: 7m9.321221806s ago: executing program 2 (id=7198): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000200)={{0x1}}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x9, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 7m9.104178535s ago: executing program 2 (id=7201): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000fc0)={0x0, @vsock={0x28, 0x0, 0x2710, @host}, @llc={0x1a, 0x30a, 0x4, 0x6, 0x5, 0x8d, @remote}, @nfc={0x27, 0x0, 0x3, 0x6}, 0x9, 0x0, 0x0, 0x0, 0x2400, 0x0, 0xffffffff, 0x2, 0x14cd}) 7m9.026798661s ago: executing program 2 (id=7203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) 7m8.792293116s ago: executing program 2 (id=7206): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 7m7.784650681s ago: executing program 2 (id=7218): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x208) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140), 0x4) 7m6.971110819s ago: executing program 2 (id=7225): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000580)='\x00!', 0x2}], 0x1, 0x803, 0x0) 7m6.092006284s ago: executing program 32 (id=7225): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000580)='\x00!', 0x2}], 0x1, 0x803, 0x0) 7m3.443225758s ago: executing program 3 (id=7251): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10}, {@host=0x10, 0x800}, 0x400, "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"}, 0x418, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000140)={0x0, 0xffffffffffffff60, 0x6}) 7m3.215316596s ago: executing program 3 (id=7255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7m2.902164014s ago: executing program 3 (id=7258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) 7m2.455478549s ago: executing program 3 (id=7263): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 7m0.620450895s ago: executing program 3 (id=7270): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3, 0x8, 0x2}, 0x5}) write$sndseq(r1, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 7m0.588345045s ago: executing program 3 (id=7271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) 6m59.880777891s ago: executing program 33 (id=7271): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000000)={0xa8, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f00007a4000/0x4000)=nil}) 3.268830518s ago: executing program 5 (id=11471): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0xfffffffc, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0xb77b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x401, 0x0, 0xffff, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x7, 0x3, 0x200001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000000, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x6, 0x0, 0x20000002, 0x0, 0x10000, 0xeef, 0x0, 0x0, 0x0, 0xfffffffe], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0d, 0x0, 0x10000, 0x401, 0xfffffffc, 0x4, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x800000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x10000000, 0x0, 0x2], [0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x0, 0xf7fffffe, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x23ee7eb, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xa000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.083469943s ago: executing program 5 (id=11473): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.820994406s ago: executing program 5 (id=11476): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a000100140000003b9b301f0007e680eaca760895bacf95", 0x1c) recvmmsg(r0, &(0x7f00000076c0)=[{{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002d40)=""/13, 0xd}, {0x0}], 0x2}, 0x9c}], 0x1, 0x2, 0x0) 2.413319228s ago: executing program 6 (id=11477): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464d0, &(0x7f0000000080)=r3) 2.228021949s ago: executing program 6 (id=11479): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x0, 0x5, 0x4, 0x3, 0xa, 0x1, 0x37800000, {0x0, @in6={{0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x912f}}, 0x8, 0x3, 0xa40, 0xf, 0x5}}, &(0x7f0000000300)=0xb0) 1.479702225s ago: executing program 4 (id=11488): mkdir(&(0x7f0000000840)='./file0\x00', 0x188) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x200) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 1.416684167s ago: executing program 5 (id=11490): syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) ftruncate(r0, 0x8800000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) sendfile(r1, r0, 0x0, 0x558410e9) 1.290244436s ago: executing program 6 (id=11493): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000ffdbdf652100000008000300", @ANYRES32, @ANYBLOB="1c002c80"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000090) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.289852577s ago: executing program 4 (id=11494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd2d, 0xfffffffe, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) 1.2366303s ago: executing program 1 (id=11495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000040)="0f4f8771c032030fc72adf8d00900f52df3e0f070f08267806f0f759880f01d1", 0x20}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) 1.098833678s ago: executing program 6 (id=11497): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0xfffffffb, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ff0100ffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.064748351s ago: executing program 4 (id=11498): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) 1.026988621s ago: executing program 5 (id=11499): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, r2, r3, 0x0, 0x80000003, 0x7fffffff, 0x0, 0x0, 0x5, 0xe, 0x200400, 0x31e}) 1.005707023s ago: executing program 1 (id=11500): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x191) r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) inotify_rm_watch(r0, r1) 947.26271ms ago: executing program 0 (id=11501): mkdir(&(0x7f00000022c0)='./file0\x00', 0x5) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x2) 894.353359ms ago: executing program 6 (id=11502): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 847.896829ms ago: executing program 5 (id=11503): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x22, 0x0}, 0x80000000}], 0x1c284f836fac35b, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 794.250849ms ago: executing program 1 (id=11504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000000)={{0x0, 0xeeef0000, 0xe, 0x0, 0x81, 0x4, 0xa, 0x4e, 0x0, 0x7, 0x6, 0x1}, {0x5000, 0xffff1000, 0x3, 0x5, 0x2, 0x8, 0xd, 0x3, 0x0, 0x81, 0x8, 0x1}, {0x5000, 0x0, 0x0, 0xfd, 0x2, 0x1, 0x6, 0xf, 0x8, 0x6, 0x2}, {0xffff1000, 0xd5dd0000, 0xe, 0x2, 0x1, 0x3, 0xc, 0x2, 0x1, 0x6, 0x4, 0x9}, {0x100002, 0xeeee8000, 0x9, 0x0, 0x80, 0xee, 0x0, 0x7, 0x7c, 0x0, 0xe, 0x9}, {0x3000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x1, 0x1, 0x6, 0x86, 0xb, 0x2}, {0xeeee8000, 0xe6e60000, 0xc, 0x7, 0x7, 0x3, 0x1d, 0x47, 0x30, 0x2, 0x8, 0xe1}, {0xf000, 0x2, 0xc, 0xf8, 0xfd, 0xa, 0x2, 0x4, 0x3, 0x8, 0x5, 0x4e}, {0x4, 0x7}, {0x6000, 0x5}, 0x10, 0x0, 0x0, 0x40, 0x7, 0x1000, 0xeeef0000, [0x5, 0x8001, 0x8]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x1, 0x4, 0x0, 0x4, 0x9, 0x10}, {0xcccff001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0xd000, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80}, {0xdddd1000, 0x100000, 0xa, 0x6, 0x0, 0x0, 0x2, 0x4, 0x10}, {0x8080000, 0x3000, 0x0, 0x1, 0x7f, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xff}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x1, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffc]}) 746.617918ms ago: executing program 0 (id=11505): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file1\x00', 0x2000757) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 576.981284ms ago: executing program 4 (id=11506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$hwrng(0xffffff9c, &(0x7f0000000000), 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 566.418679ms ago: executing program 6 (id=11507): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="400323"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 537.338999ms ago: executing program 1 (id=11508): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@host}, 0x0, 0x1, 0x4}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) 451.968418ms ago: executing program 0 (id=11509): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) preadv(r2, &(0x7f0000000540)=[{&(0x7f00000015c0)=""/4112, 0x1010}], 0x1, 0xf5, 0x0) 208.82882ms ago: executing program 0 (id=11510): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000001240)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 208.310387ms ago: executing program 1 (id=11511): r0 = syz_open_dev$vim2m(&(0x7f0000000540), 0x40002dea, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000100)={0x40, 0x2, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000140)=0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x404, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0x9, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x71, 0x7, 0x7, 0x3, 0x2, 0x8005, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x8000006, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x80401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8, 0x1, 0xfe000000, 0xffff, 0x2, 0x3, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x25], [0x9, 0x1bb31, 0x3, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x1, 0x101, 0x10000, 0x6, 0x8003, 0xffff, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c18, 0x0, 0x4, 0x5, 0x2, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 135.500531ms ago: executing program 4 (id=11512): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xac, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x80, 0x2, [@TCA_U32_LINK={0x8}, @TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x2, 0xffffffff, 0x69c, 0x4000000}, {0x9, 0x7, 0x40, 0x80}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0xac, 0xfffff08a, 0x8, 0x3}]}}]}}]}, 0xac}}, 0x24040084) 134.82844ms ago: executing program 0 (id=11513): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40)) 36.550085ms ago: executing program 1 (id=11514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 32.871673ms ago: executing program 4 (id=11515): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @win={{0x4, 0x6, 0x803, 0x5}, 0x6, 0x0, &(0x7f00000005c0)={{0x10, 0x4, 0x10, 0x9}, &(0x7f0000000580)={{0x316f, 0x3, 0x6, 0x3}, &(0x7f0000000540)={{0x824, 0x7038, 0x2, 0x5}}}}, 0x573, 0x0, 0x91}}) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x3f, 0x822f01) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x0) fcntl$setstatus(r1, 0x4, 0x42400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 0s ago: executing program 0 (id=11516): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000180)=0x200007ff, 0x4) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) kernel console output (not intermixed with test programs): strings: Mfr=1, Product=2, SerialNumber=3 [ 903.827405][ T5861] usb 2-1: Product: syz [ 903.834948][ T5861] usb 2-1: Manufacturer: syz [ 903.839578][ T5861] usb 2-1: SerialNumber: syz [ 903.852650][ T5861] usb 2-1: config 0 descriptor?? [ 903.869030][ T5861] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 903.889753][ T5861] usb 2-1: Detected FT-X [ 903.925633][T30045] netlink: 'syz.5.10266': attribute type 9 has an invalid length. [ 904.077906][ T5861] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 904.242762][ T10] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 904.441613][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 904.473410][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 904.484517][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 904.505249][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.515999][ T5861] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 904.546356][ T10] usb 6-1: config 0 descriptor?? [ 904.723382][ T5861] usb 2-1: USB disconnect, device number 7 [ 904.744868][ T5861] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 904.756689][ T5861] ftdi_sio 2-1:0.0: device disconnected [ 904.788889][ T10] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 905.054949][ T5861] usb 6-1: USB disconnect, device number 64 [ 905.490437][T30073] overlayfs: missing 'lowerdir' [ 905.503827][ T30] audit: type=1326 audit(1754489862.115:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30072 comm="syz.6.10278" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x0 [ 905.686964][T23817] usb 7-1: USB disconnect, device number 55 [ 905.772390][T30084] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10283'. [ 906.625400][T30125] binder: 30124:30125 ioctl c0306201 80000540 returned -22 [ 906.678280][T30128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10303'. [ 908.719300][T30194] sit0: entered promiscuous mode [ 908.736478][T30194] netlink: 'syz.5.10331': attribute type 1 has an invalid length. [ 908.761793][T30194] netlink: 1 bytes leftover after parsing attributes in process `syz.5.10331'. [ 909.131670][ T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 909.295016][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.321648][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 909.337712][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 909.360311][ T43] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 909.370323][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.389528][ T43] usb 2-1: config 0 descriptor?? [ 909.649761][T30221] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10343'. [ 909.660958][T30221] netlink: 'syz.5.10343': attribute type 7 has an invalid length. [ 909.675477][T30221] netlink: 'syz.5.10343': attribute type 8 has an invalid length. [ 909.685218][T30221] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10343'. [ 909.703250][T30221] erspan0: entered promiscuous mode [ 909.710786][T30221] erspan0: left promiscuous mode [ 909.833448][ T43] plantronics 0003:047F:FFFF.0081: reserved main item tag 0xd [ 909.871017][ T43] plantronics 0003:047F:FFFF.0081: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 910.099166][ T10] usb 2-1: USB disconnect, device number 8 [ 911.245931][T30278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10367'. [ 911.283399][T30278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10367'. [ 911.546376][T30286] ALSA: mixer_oss: invalid OSS volume '' [ 912.284512][T30323] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10387'. [ 913.272187][T30358] loop2: detected capacity change from 0 to 7 [ 913.283822][ T5865] Dev loop2: unable to read RDB block 7 [ 913.288214][T30359] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 913.289510][ T5865] loop2: unable to read partition table [ 913.289742][ T5865] loop2: partition table beyond EOD, truncated [ 913.345583][T30358] Dev loop2: unable to read RDB block 7 [ 913.367168][T30358] loop2: unable to read partition table [ 913.400882][T30358] loop2: partition table beyond EOD, truncated [ 913.419105][T30358] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 913.694851][T30370] netlink: 'syz.1.10409': attribute type 4 has an invalid length. [ 914.959717][T30397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10429'. [ 914.989813][T30397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10429'. [ 915.036957][T30397] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10429'. [ 915.064281][T30397] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10429'. [ 915.080856][T30402] tipc: Enabled bearer , priority 10 [ 915.290132][T30416] netlink: 788 bytes leftover after parsing attributes in process `syz.1.10427'. [ 915.352728][ T43] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 915.515875][ T43] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 915.536376][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.578586][ T43] usb 5-1: config 0 descriptor?? [ 915.656014][T30424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10431'. [ 915.666264][T30424] netlink: 'syz.6.10431': attribute type 20 has an invalid length. [ 915.685665][T30424] netlink: 'syz.6.10431': attribute type 21 has an invalid length. [ 916.071921][ T5946] tipc: Node number set to 4285857792 [ 916.231626][T22437] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 916.381694][T22437] usb 7-1: Using ep0 maxpacket: 8 [ 916.421023][T22437] usb 7-1: unable to get BOS descriptor or descriptor too short [ 916.436357][T22437] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 916.444191][T22437] usb 7-1: can't read configurations, error -71 [ 916.589686][ T30] audit: type=1326 audit(1754489873.195:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30435 comm="syz.1.10437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 916.622136][T30438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10436'. [ 916.623758][ T43] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 916.649328][ T30] audit: type=1326 audit(1754489873.195:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30435 comm="syz.1.10437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 916.673756][T30438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10436'. [ 916.689123][ T43] usb 5-1: USB disconnect, device number 127 [ 916.711847][T30438] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10436'. [ 916.728947][ T30] audit: type=1326 audit(1754489873.195:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30435 comm="syz.1.10437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 916.731464][T30438] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10436'. [ 916.763894][ T30] audit: type=1326 audit(1754489873.195:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30435 comm="syz.1.10437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 916.801806][ T30] audit: type=1326 audit(1754489873.195:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30435 comm="syz.1.10437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 916.898321][ T30] audit: type=1326 audit(1754489873.505:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30435 comm="syz.1.10437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 916.953077][ T30] audit: type=1326 audit(1754489873.565:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30435 comm="syz.1.10437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 917.076700][ T30] audit: type=1326 audit(1754489873.685:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30435 comm="syz.1.10437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 917.130568][ T30] audit: type=1326 audit(1754489873.715:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30435 comm="syz.1.10437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 917.211595][ T30] audit: type=1326 audit(1754489873.715:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30435 comm="syz.1.10437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 917.501995][ T43] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 917.664252][ T43] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 917.676854][ T43] usb 5-1: config 0 has no interface number 0 [ 917.689420][ T43] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 917.702096][T22437] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 917.707884][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.718595][ T43] usb 5-1: Product: syz [ 917.731025][ T43] usb 5-1: Manufacturer: syz [ 917.740073][ T43] usb 5-1: SerialNumber: syz [ 917.759403][ T43] usb 5-1: config 0 descriptor?? [ 917.861849][T22437] usb 2-1: Using ep0 maxpacket: 16 [ 917.874838][T22437] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 917.887074][T22437] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 917.900506][T22437] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 917.911742][T22437] usb 2-1: config 0 interface 0 has no altsetting 0 [ 917.923255][T22437] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 917.932523][T22437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.940552][T22437] usb 2-1: Product: syz [ 917.945691][T22437] usb 2-1: Manufacturer: syz [ 917.950321][T22437] usb 2-1: SerialNumber: syz [ 917.961644][T22437] usb 2-1: config 0 descriptor?? [ 917.968635][T30457] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 918.001764][ T10] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 918.077526][T30473] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 918.171886][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 918.188759][ T10] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 918.191158][ T43] usb 5-1: Firmware version (0.0) predates our first public release. [ 918.198686][T30457] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 918.211946][ T43] usb 5-1: Please update to version 0.2 or newer [ 918.213617][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.237647][ T43] usb 5-1: Firmware: build [ 918.250384][ T10] usb 7-1: Product: syz [ 918.256044][T22437] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input153 [ 918.266069][ T10] usb 7-1: Manufacturer: syz [ 918.271329][ T10] usb 7-1: SerialNumber: syz [ 918.316720][ T10] usb 7-1: config 0 descriptor?? [ 918.354742][ T10] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 918.387944][ T10] usb 7-1: Detected FT232H [ 918.472602][ T43] usb 5-1: USB disconnect, device number 2 [ 918.572463][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 918.632097][ T5861] usb 2-1: USB disconnect, device number 9 [ 918.998008][ T10] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 919.205077][ T10] usb 7-1: USB disconnect, device number 58 [ 919.228351][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 919.242708][ T10] ftdi_sio 7-1:0.0: device disconnected [ 919.729370][T30504] netlink: 'syz.4.10466': attribute type 12 has an invalid length. [ 920.032058][ T5861] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 920.183863][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.195438][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.205315][ T5861] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 920.214822][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.226696][ T5861] usb 7-1: config 0 descriptor?? [ 920.395466][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 920.572042][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 920.581756][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 920.593534][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 920.603410][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 920.617905][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 920.627437][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 920.639600][ T10] usb 5-1: SerialNumber: syz [ 920.649547][T30516] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 920.885352][ T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 920.899009][ T10] usb 5-1: USB disconnect, device number 3 [ 921.049911][ T5861] hid-led 0003:27B8:01ED.0082: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0 [ 921.073663][ T5861] hid-led 0003:27B8:01ED.0082: ThingM blink(1) v1 initialized [ 921.265251][ T5861] usb 7-1: USB disconnect, device number 59 [ 921.861819][ T5947] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 922.021961][ T5947] usb 2-1: Using ep0 maxpacket: 16 [ 922.030584][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 922.046153][ T5947] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 922.055747][ T5861] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 922.063615][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.075211][ T5947] usb 2-1: config 0 descriptor?? [ 922.087280][ T5947] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input154 [ 922.221615][ T5861] usb 7-1: Using ep0 maxpacket: 8 [ 922.230419][ T5861] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 922.240157][ T5861] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.248356][ T5861] usb 7-1: Product: syz [ 922.253713][ T5861] usb 7-1: Manufacturer: syz [ 922.258338][ T5861] usb 7-1: SerialNumber: syz [ 922.266515][ T5861] usb 7-1: config 0 descriptor?? [ 922.275230][ T5861] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 922.339539][ T5219] bcm5974 2-1:0.0: could not read from device [ 922.351214][T30533] bcm5974 2-1:0.0: could not read from device [ 922.355955][ T5947] usb 2-1: USB disconnect, device number 10 [ 922.375470][ T5219] bcm5974 2-1:0.0: could not read from device [ 923.127015][T30554] loop6: detected capacity change from 0 to 63 [ 923.137244][T30554] Buffer I/O error on dev loop6, logical block 0, async page read [ 923.150854][T30554] Buffer I/O error on dev loop6, logical block 0, async page read [ 923.163750][T30554] Buffer I/O error on dev loop6, logical block 0, async page read [ 923.172681][T30554] Buffer I/O error on dev loop6, logical block 0, async page read [ 923.189787][T30554] Buffer I/O error on dev loop6, logical block 0, async page read [ 923.211932][T30554] Buffer I/O error on dev loop6, logical block 0, async page read [ 923.232684][T30554] Buffer I/O error on dev loop6, logical block 0, async page read [ 923.249942][T30554] loop6: unable to read partition table [ 923.250256][T30555] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 923.269307][T30554] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 923.293052][ T5861] gspca_sonixj: reg_w1 err -71 [ 923.307493][T30558] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 923.342153][ T5861] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 923.359969][T30555] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 923.375493][ T5861] usb 7-1: USB disconnect, device number 60 [ 923.505237][ T5234] ldm_validate_partition_table(): Disk read failed. [ 923.522621][ T5234] Dev loop6: unable to read RDB block 0 [ 923.545936][ T5234] loop6: unable to read partition table [ 925.058889][T30602] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.10507'. [ 926.331967][ T10] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 926.421856][ T5861] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 926.484363][ T30] audit: type=1326 audit(1754489883.095:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30655 comm="syz.0.10529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 926.513885][ T10] usb 7-1: config 0 has an invalid interface number: 11 but max is 0 [ 926.541170][ T10] usb 7-1: config 0 has no interface number 0 [ 926.570317][ T10] usb 7-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 926.571782][ T30] audit: type=1326 audit(1754489883.095:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30655 comm="syz.0.10529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 926.589956][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.630145][ T10] usb 7-1: Product: syz [ 926.640305][ T10] usb 7-1: Manufacturer: syz [ 926.644881][ T5861] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 926.656019][ T10] usb 7-1: SerialNumber: syz [ 926.662139][ T5861] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.670429][ T30] audit: type=1326 audit(1754489883.095:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30655 comm="syz.0.10529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 926.703042][ T10] usb 7-1: config 0 descriptor?? [ 926.704849][ T5861] usb 6-1: config 0 descriptor?? [ 926.725652][ T10] usb 7-1: Expected 3 endpoints, found: 0 [ 926.735903][ T5861] cp210x 6-1:0.0: cp210x converter detected [ 926.742025][ T30] audit: type=1326 audit(1754489883.095:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30655 comm="syz.0.10529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 926.810422][ T30] audit: type=1326 audit(1754489883.095:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30655 comm="syz.0.10529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 926.889605][T30664] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.10534'. [ 926.999687][ T30] audit: type=1326 audit(1754489883.605:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30655 comm="syz.0.10529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 927.085022][ T30] audit: type=1326 audit(1754489883.695:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30655 comm="syz.0.10529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 927.144508][ T5861] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 927.273161][ T30] audit: type=1326 audit(1754489883.845:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30655 comm="syz.0.10529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=276 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 927.316366][ T30] audit: type=1326 audit(1754489883.845:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30655 comm="syz.0.10529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 927.367072][ T5861] usb 6-1: cp210x converter now attached to ttyUSB0 [ 927.378078][ T30] audit: type=1326 audit(1754489883.845:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30655 comm="syz.0.10529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 927.431616][ T5947] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 927.594081][ T5957] usb 6-1: USB disconnect, device number 65 [ 927.603473][ T5957] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 927.630070][ T5947] usb 2-1: unable to get BOS descriptor or descriptor too short [ 927.643127][ T5957] cp210x 6-1:0.0: device disconnected [ 927.659046][ T5947] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 927.681040][ T5947] usb 2-1: can't read configurations, error -71 [ 928.308226][T30705] syzkaller1: entered promiscuous mode [ 928.317381][T30705] syzkaller1: entered allmulticast mode [ 928.383686][T22437] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 928.568937][T22437] usb 5-1: config 0 has an invalid interface number: 154 but max is 0 [ 928.598317][T22437] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 928.629041][T22437] usb 5-1: config 0 has no interface number 0 [ 928.649907][T22437] usb 5-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=1f.e0 [ 928.679610][T22437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.700300][T22437] usb 5-1: config 0 descriptor?? [ 928.715343][T30717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10557'. [ 928.737651][T22437] qmi_wwan 5-1:0.154: bogus CDC Union: master=0, slave=0 [ 928.797207][T22437] qmi_wwan 5-1:0.154: probe with driver qmi_wwan failed with error -22 [ 928.871861][ T5947] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 928.932087][ T5957] usb 5-1: USB disconnect, device number 4 [ 929.029182][T22437] usb 7-1: USB disconnect, device number 61 [ 929.057362][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 929.069537][T30723] loop4: detected capacity change from 0 to 7 [ 929.101964][T30723] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 929.105446][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 929.107633][T30723] loop4: p1 size 2037579776 extends beyond EOD, [ 929.146119][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 929.181618][T30723] truncated [ 929.203416][T30723] loop4: p2 start 4294901760 is beyond EOD, truncated [ 929.232201][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 929.245492][T30723] loop4: p3 start 4294836224 is beyond EOD, truncated [ 929.257163][T30723] loop4: p4 size 327680 extends beyond EOD, truncated [ 929.265047][ T5947] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 929.276419][T30723] loop4: p5 size 8323072 extends beyond EOD, truncated [ 929.287190][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.311395][T30723] loop4: p6 start 8192 is beyond EOD, truncated [ 929.337707][ T5947] usb 2-1: config 0 descriptor?? [ 929.790096][ T5947] plantronics 0003:047F:FFFF.0083: ignoring exceeding usage max [ 929.872828][ T5947] plantronics 0003:047F:FFFF.0083: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 929.942844][ T5865] udevd[5865]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 929.984788][T22437] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 930.198680][T22437] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 930.228652][T22437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 930.248058][T22437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 930.259757][T22437] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 930.289937][T22437] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 930.303896][T22437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.319979][T22437] usb 5-1: config 0 descriptor?? [ 930.403537][T30750] loop6: detected capacity change from 0 to 63 [ 930.410741][T30750] buffer_io_error: 21 callbacks suppressed [ 930.410796][T30750] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.427730][T30750] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.435859][T30750] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.444087][T30750] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.452675][T30750] Buffer I/O error on dev loop6, logical block 0, async page read [ 930.461270][T30750] loop6: unable to read partition table [ 930.465561][T30751] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 930.473804][T30750] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 930.484570][T30751] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 930.497854][T30751] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 930.509618][T30751] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 930.519514][T30751] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 930.745921][T22437] plantronics 0003:047F:FFFF.0084: ignoring exceeding usage max [ 930.787655][T22437] plantronics 0003:047F:FFFF.0084: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 931.126145][ T5947] usb 5-1: USB disconnect, device number 5 [ 931.431897][T22437] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 931.508922][T30769] netlink: 172 bytes leftover after parsing attributes in process `syz.5.10580'. [ 931.576811][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.585384][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.611723][T22437] usb 7-1: Using ep0 maxpacket: 32 [ 931.618686][T22437] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 931.629198][T22437] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.640831][T22437] usb 7-1: config 0 descriptor?? [ 931.866749][T22437] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 931.894266][ T5861] usb 2-1: USB disconnect, device number 13 [ 931.916068][T22437] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 931.935347][T22437] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 931.953804][T22437] usb 7-1: media controller created [ 932.012617][T22437] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 932.070029][T22437] az6027: usb out operation failed. (-71) [ 932.080543][T22437] az6027: usb out operation failed. (-71) [ 932.090911][T22437] stb0899_attach: Driver disabled by Kconfig [ 932.120538][T30785] loop8: detected capacity change from 0 to 7 [ 932.123556][T22437] az6027: no front-end attached [ 932.123556][T22437] [ 932.145369][T30785] Dev loop8: unable to read RDB block 7 [ 932.151909][T22437] az6027: usb out operation failed. (-71) [ 932.157850][T22437] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 932.164656][T30785] loop8: unable to read partition table [ 932.170875][T30785] loop8: partition table beyond EOD, truncated [ 932.177956][T22437] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input156 [ 932.196703][T30785] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 932.211139][T22437] dvb-usb: schedule remote query interval to 400 msecs. [ 932.230228][T22437] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 932.260411][T22437] usb 7-1: USB disconnect, device number 62 [ 932.268812][ T5865] Dev loop8: unable to read RDB block 7 [ 932.288154][ T5865] loop8: unable to read partition table [ 932.306965][ T5865] loop8: partition table beyond EOD, truncated [ 932.339557][T30786] Dev loop8: unable to read RDB block 7 [ 932.348502][T30786] loop8: unable to read partition table [ 932.365809][T30786] loop8: partition table beyond EOD, truncated [ 932.381733][T30786] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 932.433879][T22437] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 932.774053][T30792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10590'. [ 933.024173][T30796] vivid-003: disconnect [ 933.041048][T30796] vivid-003: reconnect [ 933.217096][ T30] audit: type=1326 audit(1754489889.815:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30801 comm="syz.0.10595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 933.339402][ T30] audit: type=1326 audit(1754489889.815:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30801 comm="syz.0.10595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 933.466162][ T30] audit: type=1326 audit(1754489889.815:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30801 comm="syz.0.10595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 933.561552][ T30] audit: type=1326 audit(1754489889.815:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30801 comm="syz.0.10595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 933.562644][T30810] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10599'. [ 933.618513][ T30] audit: type=1326 audit(1754489889.815:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30801 comm="syz.0.10595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 933.675189][ T30] audit: type=1326 audit(1754489889.825:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30801 comm="syz.0.10595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 933.732965][ T30] audit: type=1326 audit(1754489889.825:2389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30801 comm="syz.0.10595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 933.799200][ T30] audit: type=1326 audit(1754489889.825:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30801 comm="syz.0.10595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 933.880414][ T30] audit: type=1326 audit(1754489889.825:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30801 comm="syz.0.10595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 933.935848][T30817] tun0: tun_chr_ioctl cmd 1074025675 [ 933.941180][T30817] tun0: persist enabled [ 933.956599][ T30] audit: type=1326 audit(1754489889.825:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30801 comm="syz.0.10595" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 934.001729][T30817] tun0: tun_chr_ioctl cmd 1074025675 [ 934.007469][T30817] tun0: persist enabled [ 934.612737][ T10] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 934.782924][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 934.804022][ T10] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 934.843628][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.891113][ T10] usb 7-1: Product: syz [ 934.927446][ T10] usb 7-1: Manufacturer: syz [ 934.932331][ T5861] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 934.954319][ T10] usb 7-1: SerialNumber: syz [ 934.977252][ T10] usb 7-1: config 0 descriptor?? [ 935.094914][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 935.114828][ T5861] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 935.128216][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.136896][ T5861] usb 5-1: Product: syz [ 935.141104][ T5861] usb 5-1: Manufacturer: syz [ 935.147401][ T5861] usb 5-1: SerialNumber: syz [ 935.164345][ T5861] usb 5-1: config 0 descriptor?? [ 935.176616][ T5861] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 935.206857][ T10] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 935.501891][ T5957] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 935.641697][ T43] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 935.652217][ T5957] usb 2-1: Using ep0 maxpacket: 8 [ 935.661586][ T5957] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 935.670722][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.678909][ T5957] usb 2-1: Product: syz [ 935.683445][ T5957] usb 2-1: Manufacturer: syz [ 935.688058][ T5957] usb 2-1: SerialNumber: syz [ 935.696560][ T5957] usb 2-1: config 0 descriptor?? [ 935.706029][ T5957] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 935.805749][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.819146][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.829585][ T43] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 935.841944][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.857047][ T43] usb 6-1: config 0 descriptor?? [ 936.030096][ T10] usb write operation failed. (-71) [ 936.043418][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 936.058869][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 936.065887][ T10] usb 7-1: media controller created [ 936.077790][ T10] usb read operation failed. (-71) [ 936.085168][ T10] usb write operation failed. (-71) [ 936.096209][ T10] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 936.108578][ T10] usb 7-1: USB disconnect, device number 63 [ 936.181006][ T5861] gspca_stk1135: reg_w 0x7 err -71 [ 936.188395][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 936.197559][ T5861] gspca_stk1135: Sensor write failed [ 936.203291][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 936.209659][ T5861] gspca_stk1135: Sensor write failed [ 936.215347][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 936.223019][ T5861] gspca_stk1135: Sensor read failed [ 936.228264][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 936.235117][ T5861] gspca_stk1135: Sensor read failed [ 936.240433][ T5861] gspca_stk1135: Detected sensor type unknown (0x0) [ 936.247208][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 936.253791][ T5861] gspca_stk1135: Sensor read failed [ 936.259042][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 936.267119][ T5861] gspca_stk1135: Sensor read failed [ 936.276710][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 936.283214][ T5861] gspca_stk1135: Sensor write failed [ 936.292092][ T5861] gspca_stk1135: serial bus timeout: status=0x00 [ 936.298927][ T43] pyra 0003:1E7D:2CF6.0085: unknown main item tag 0x0 [ 936.306005][ T5861] gspca_stk1135: Sensor write failed [ 936.311453][ T5861] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 936.319569][ T43] pyra 0003:1E7D:2CF6.0085: unknown main item tag 0x0 [ 936.331986][ T5861] usb 5-1: USB disconnect, device number 6 [ 936.342506][ T43] pyra 0003:1E7D:2CF6.0085: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 936.702183][ T43] pyra 0003:1E7D:2CF6.0085: couldn't init struct pyra_device [ 936.731941][ T43] pyra 0003:1E7D:2CF6.0085: couldn't install mouse [ 936.739461][ T5957] gspca_sonixj: reg_w1 err -71 [ 936.774648][ T43] pyra 0003:1E7D:2CF6.0085: probe with driver pyra failed with error -71 [ 936.792194][ T5957] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 936.823117][ T5957] usb 2-1: USB disconnect, device number 14 [ 936.833502][ T43] usb 6-1: USB disconnect, device number 66 [ 938.331789][T23817] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 938.481739][T23817] usb 6-1: Using ep0 maxpacket: 32 [ 938.489511][T23817] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 938.499044][T23817] usb 6-1: config 0 has no interface number 0 [ 938.505592][T23817] usb 6-1: config 0 interface 12 has no altsetting 0 [ 938.515351][T23817] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 938.524964][T23817] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.534023][T23817] usb 6-1: Product: syz [ 938.538316][T23817] usb 6-1: Manufacturer: syz [ 938.544787][T23817] usb 6-1: SerialNumber: syz [ 938.561046][T23817] usb 6-1: config 0 descriptor?? [ 938.571749][T23817] f81534 6-1:0.12: required endpoints missing [ 938.798388][T22437] usb 6-1: USB disconnect, device number 67 [ 938.921675][T23817] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 938.931937][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 939.085853][T23817] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 939.101651][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 939.103979][T23817] usb 5-1: config 0 has no interface number 0 [ 939.114245][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 939.120282][T23817] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 939.131648][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 939.141542][T23817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.151563][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 939.157518][T23817] usb 5-1: Product: syz [ 939.162410][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 939.176012][T23817] usb 5-1: Manufacturer: syz [ 939.176035][T23817] usb 5-1: SerialNumber: syz [ 939.197187][T23817] usb 5-1: config 0 descriptor?? [ 939.210335][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 939.230353][T23817] usb 5-1: Expected 3 endpoints, found: 0 [ 939.234028][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 939.262746][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.521026][ T10] usb 2-1: usb_control_msg returned -32 [ 939.530602][ T10] usbtmc 2-1:16.0: can't read capabilities [ 939.589026][T30937] netlink: 104 bytes leftover after parsing attributes in process `syz.6.10654'. [ 939.956398][T30947] usbtmc 2-1:16.0: control status returned 0 [ 940.110764][T30952] loop7: detected capacity change from 0 to 6 [ 940.119010][T30952] Dev loop7: unable to read RDB block 6 [ 940.125201][T30952] loop7: unable to read partition table [ 940.131189][T30952] loop7: partition table beyond EOD, truncated [ 940.139832][T30952] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 940.158323][T22437] usb 2-1: USB disconnect, device number 15 [ 940.354096][T30958] netlink: 'syz.6.10662': attribute type 12 has an invalid length. [ 940.363327][T30958] netlink: 'syz.6.10662': attribute type 29 has an invalid length. [ 940.371347][T30958] netlink: 148 bytes leftover after parsing attributes in process `syz.6.10662'. [ 940.381852][T30958] netlink: 59 bytes leftover after parsing attributes in process `syz.6.10662'. [ 941.638640][T23817] usb 5-1: USB disconnect, device number 7 [ 942.061951][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 942.248799][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 942.277288][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 942.289688][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 942.312189][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 942.320504][ T10] usb 2-1: Product: syz [ 942.325195][ T10] usb 2-1: Manufacturer: syz [ 942.329815][ T10] usb 2-1: SerialNumber: syz [ 942.341308][ T10] usb 2-1: config 0 descriptor?? [ 942.358061][ T10] usb 2-1: selecting invalid altsetting 0 [ 942.596225][ T5957] usb 2-1: USB disconnect, device number 16 [ 943.925792][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 943.925809][ T30] audit: type=1326 audit(1754489900.535:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31053 comm="syz.6.10704" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70be539 code=0x0 [ 944.105263][T31064] syzkaller1: entered promiscuous mode [ 944.110777][T31064] syzkaller1: entered allmulticast mode [ 944.511283][T31079] binder: 31078:31079 ioctl c0306201 800003c0 returned -14 [ 944.703960][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 944.726135][T31089] geneve2: entered promiscuous mode [ 944.736018][T31089] geneve2: entered allmulticast mode [ 944.744662][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 944.766467][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 944.809917][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 944.829373][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 944.896216][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.921944][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.959516][ T43] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 944.974190][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.989492][ T43] usb 5-1: config 0 descriptor?? [ 945.101938][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 945.281751][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 945.289144][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 945.301603][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 945.310659][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.329396][ T10] usb 2-1: config 0 descriptor?? [ 945.428400][ T43] playstation 0003:054C:0DF2.0086: unknown main item tag 0x0 [ 945.440465][ T43] playstation 0003:054C:0DF2.0086: unknown main item tag 0x0 [ 945.458778][ T43] playstation 0003:054C:0DF2.0086: unknown main item tag 0x0 [ 945.468866][ T43] playstation 0003:054C:0DF2.0086: unknown main item tag 0x0 [ 945.486331][ T43] playstation 0003:054C:0DF2.0086: unknown main item tag 0x0 [ 945.508915][ T43] playstation 0003:054C:0DF2.0086: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 945.563902][ T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 945.803977][ T10] usb 2-1: USB disconnect, device number 17 [ 946.043444][ T43] playstation 0003:054C:0DF2.0086: Failed to retrieve feature with reportID 5: -71 [ 946.065419][ T43] playstation 0003:054C:0DF2.0086: Failed to retrieve DualSense calibration info: -71 [ 946.081826][ T43] playstation 0003:054C:0DF2.0086: Failed to get calibration data from DualSense [ 946.092183][ T43] playstation 0003:054C:0DF2.0086: Failed to create dualsense. [ 946.103642][ T43] playstation 0003:054C:0DF2.0086: probe with driver playstation failed with error -71 [ 946.150609][ T43] usb 5-1: USB disconnect, device number 8 [ 946.277973][T31124] input: syz1 as /devices/virtual/input/input157 [ 946.496947][T31133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10736'. [ 946.779264][T31148] syzkaller1: entered promiscuous mode [ 946.785689][T31148] syzkaller1: entered allmulticast mode [ 947.641762][ T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 947.815974][ T10] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 947.828145][ T10] usb 2-1: config 0 has no interface number 0 [ 947.848389][ T10] usb 2-1: config 0 interface 255 has no altsetting 0 [ 947.861118][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 947.869059][T31175] netlink: 'syz.6.10756': attribute type 10 has an invalid length. [ 947.880963][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.898934][T31175] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.903349][ T10] usb 2-1: config 0 descriptor?? [ 947.906384][T31175] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.923961][ T10] cp210x 2-1:0.255: cp210x converter detected [ 947.964253][T31175] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.971525][T31175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.979154][T31175] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.986487][T31175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.020727][T31175] bridge0: entered promiscuous mode [ 948.066083][T31175] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 948.337793][ T10] cp210x 2-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 948.563443][ T10] cp210x 2-1:0.255: GPIO initialisation failed: -19 [ 948.591936][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 948.799895][ T10] usb 2-1: USB disconnect, device number 18 [ 948.827751][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 948.849719][ T10] cp210x 2-1:0.255: device disconnected [ 949.710962][T31222] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10776'. [ 949.757509][T31222] netlink: 43 bytes leftover after parsing attributes in process `syz.4.10776'. [ 949.816146][T31222] netlink: 'syz.4.10776': attribute type 6 has an invalid length. [ 949.843827][T31222] netlink: 'syz.4.10776': attribute type 5 has an invalid length. [ 949.881824][T31222] netlink: 43 bytes leftover after parsing attributes in process `syz.4.10776'. [ 950.075449][T31235] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.10782'. [ 951.404991][T31272] syzkaller1: entered promiscuous mode [ 951.410507][T31272] syzkaller1: entered allmulticast mode [ 951.911621][T23817] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 951.934588][ T10] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 952.053522][ T24] kworker/1:0 (24) used greatest stack depth: 14760 bytes left [ 952.074333][T23817] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 952.091642][T23817] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 952.117818][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 952.118056][T23817] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 952.136013][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 952.136272][T23817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.157030][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 952.182909][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 952.205496][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 952.235736][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 952.250221][ T10] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 952.254855][T31301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10812'. [ 952.259565][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.274947][T31301] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10812'. [ 952.276651][ T10] usb 6-1: Product: syz [ 952.293205][ T10] usb 6-1: Manufacturer: syz [ 952.297895][ T10] usb 6-1: SerialNumber: syz [ 952.312678][ T10] usb 6-1: config 0 descriptor?? [ 952.380187][T23817] usb 5-1: usb_control_msg returned -32 [ 952.390270][T23817] usbtmc 5-1:16.0: can't read capabilities [ 952.712079][T23817] usb 7-1: new full-speed USB device number 64 using dummy_hcd [ 952.725351][ T10] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 952.734388][ T10] input input158: Device does not respond to id packet M [ 952.750856][ T10] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 952.770304][ T10] input input158: Device does not respond to id packet P [ 952.809632][T31310] pim6reg1: entered promiscuous mode [ 952.817511][T31310] pim6reg1: entered allmulticast mode [ 952.864945][T23817] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 952.875191][T23817] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 952.888872][T23817] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 952.898355][T23817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.979502][ T10] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 952.989864][ T10] input input158: Device does not respond to id packet N [ 952.997709][ T10] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 953.007302][ T10] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 953.017874][ T10] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 953.027596][ T10] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 953.037614][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input158 [ 953.061417][ T10] usb 6-1: USB disconnect, device number 68 [ 953.126262][T23817] usb 7-1: GET_CAPABILITIES returned 0 [ 953.133805][T23817] usbtmc 7-1:16.0: can't read capabilities [ 953.334662][ T10] usb 7-1: USB disconnect, device number 64 [ 954.112023][T31334] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 954.440019][T31344] cifs: Unknown parameter 'fd' [ 954.687676][ T10] usb 5-1: USB disconnect, device number 9 [ 955.250506][T31368] netlink: 'syz.4.10839': attribute type 10 has an invalid length. [ 956.852751][T31410] Context (ID=0x0) not attached to queue pair (handle=0x1:0xfffffffa) [ 956.938203][T31413] VFS: Mount too revealing [ 957.549726][T31436] netlink: 116 bytes leftover after parsing attributes in process `syz.1.10870'. [ 958.367210][T31463] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 958.502596][T31466] loop8: detected capacity change from 0 to 8 [ 958.532627][T31466] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 958.540199][T31466] loop8: p1 start 1953705584 is beyond EOD, truncated [ 958.605746][T31466] loop8: p2 start 700027685 is beyond EOD, truncated [ 958.671610][T31466] loop8: p3 start 31919608 is beyond EOD, truncated [ 958.695831][T31466] loop8: p4 start 4201384960 is beyond EOD, truncated [ 958.732265][T31466] loop8: p5 start 2842431134 is beyond EOD, truncated [ 958.749469][T31466] loop8: p6 start 1584160440 is beyond EOD, truncated [ 958.757025][T31466] loop8: p7 start 2589729944 is beyond EOD, truncated [ 958.771394][T31466] loop8: p8 start 1229243498 is beyond EOD, truncated [ 958.779177][T31466] loop8: p9 start 1043497832 is beyond EOD, truncated [ 958.809322][T31466] loop8: p10 start 883525942 is beyond EOD, truncated [ 958.816466][T31466] loop8: p11 start 2065041852 is beyond EOD, truncated [ 958.830600][T31466] loop8: p12 start 3320555364 is beyond EOD, truncated [ 958.961677][T23817] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 958.961890][ T10] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 959.142152][T23817] usb 5-1: Using ep0 maxpacket: 16 [ 959.180230][T23817] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.197612][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 959.205428][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 959.222061][T23817] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.237228][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 959.251829][T23817] usb 5-1: config 0 interface 0 has no altsetting 0 [ 959.271755][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 959.275564][T23817] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 959.307169][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 959.311912][T23817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.343946][T23817] usb 5-1: config 0 descriptor?? [ 959.372904][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 959.401610][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.643080][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 959.654955][ T10] usbtmc 7-1:16.0: can't read capabilities [ 959.890353][T23817] usb 7-1: USB disconnect, device number 65 [ 960.077834][ T10] usb 5-1: USB disconnect, device number 10 [ 960.811844][ T10] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 960.973077][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 960.994733][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 961.014104][ T10] usb 7-1: config 0 has no interface number 0 [ 961.027884][ T10] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 961.057981][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.078905][ T10] usb 7-1: Product: syz [ 961.088404][ T10] usb 7-1: Manufacturer: syz [ 961.096846][ T10] usb 7-1: SerialNumber: syz [ 961.117704][ T10] usb 7-1: config 0 descriptor?? [ 961.146540][ T10] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 962.038783][T31544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10914'. [ 962.127315][T31546] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.10915'. [ 962.152024][ T10] gspca_spca1528: reg_w err -71 [ 962.169872][ T10] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 962.197214][ T10] usb 7-1: USB disconnect, device number 66 [ 962.745438][T22435] hid-generic 00A0:0008:0003.0088: unknown main item tag 0x0 [ 962.771896][T22435] hid-generic 00A0:0008:0003.0088: unknown main item tag 0x0 [ 962.794052][T22435] hid-generic 00A0:0008:0003.0088: unknown main item tag 0x0 [ 962.821669][T22435] hid-generic 00A0:0008:0003.0088: unknown main item tag 0x0 [ 962.847060][T22435] hid-generic 00A0:0008:0003.0088: unknown main item tag 0x0 [ 962.864545][T22435] hid-generic 00A0:0008:0003.0088: unknown main item tag 0x0 [ 962.887692][T22435] hid-generic 00A0:0008:0003.0088: unknown main item tag 0x0 [ 962.911630][T22435] hid-generic 00A0:0008:0003.0088: unknown main item tag 0x0 [ 962.929490][T22435] hid-generic 00A0:0008:0003.0088: unknown main item tag 0x0 [ 962.938035][T22435] hid-generic 00A0:0008:0003.0088: unknown main item tag 0x0 [ 962.979842][T22435] hid-generic 00A0:0008:0003.0088: hidraw0: HID v0.05 Device [syz1] on syz0 [ 963.188321][T31578] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.10929'. [ 963.969040][T31604] vxcan1: tx address claim with different name [ 964.052249][ T5947] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 964.120046][T31608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10943'. [ 964.221774][ T5947] usb 6-1: Using ep0 maxpacket: 16 [ 964.233380][ T5947] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.246842][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 964.258239][ T5947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 964.268069][ T5947] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 964.278469][ T5947] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 964.293672][ T5947] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 964.308550][ T5947] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 964.319090][ T5947] usb 6-1: Manufacturer: syz [ 964.332503][ T5947] usb 6-1: config 0 descriptor?? [ 964.546747][T31617] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.554269][T31617] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.672327][ T5947] rc_core: IR keymap rc-hauppauge not found [ 964.679952][ T5947] Registered IR keymap rc-empty [ 964.690295][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.731829][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.772951][ T5947] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 964.804377][ T5947] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input161 [ 964.822710][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.833999][ C1] mceusb 6-1:0.0: long-range (0x14) receiver active [ 964.842247][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.881994][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.901866][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.923944][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.952445][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 964.982045][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 965.001882][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 965.049113][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 965.092560][ T5947] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 965.113981][ T5947] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 965.124461][ T5947] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x14 active) [ 965.145910][T31617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 965.160810][ T5947] usb 6-1: USB disconnect, device number 69 [ 965.213626][T31617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.476851][T31642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10950'. [ 965.835140][T31617] batman_adv: batadv0: Interface deactivated: macvtap1 [ 965.984967][T22943] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.001788][T22943] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.021085][T22943] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 966.204602][T22943] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.249205][T22943] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.268442][T22943] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 966.284502][T22943] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.332021][T22943] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.340944][T22943] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 966.406636][ T1164] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 966.453410][ T1164] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.480503][ T1164] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 966.866306][T31683] bridge0: entered allmulticast mode [ 967.201666][T22435] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 967.402080][T22435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.413213][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 967.495446][T22435] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.537907][T22435] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 967.551354][T22435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.609625][T22435] usb 2-1: config 0 descriptor?? [ 968.057161][T22435] hid_parser_main: 5 callbacks suppressed [ 968.057185][T22435] arvo 0003:1E7D:30D4.0089: unknown main item tag 0x0 [ 968.095332][T22435] arvo 0003:1E7D:30D4.0089: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 968.223190][ T5861] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 968.256197][T22435] arvo 0003:1E7D:30D4.0089: couldn't init struct arvo_device [ 968.294595][T22435] arvo 0003:1E7D:30D4.0089: couldn't install keyboard [ 968.328008][T22435] arvo 0003:1E7D:30D4.0089: probe with driver arvo failed with error -71 [ 968.368172][T22435] usb 2-1: USB disconnect, device number 19 [ 968.402227][ T5861] usb 6-1: Using ep0 maxpacket: 8 [ 968.417553][ T5861] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 968.456657][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.475892][ T5861] usb 6-1: Product: syz [ 968.480130][ T5861] usb 6-1: Manufacturer: syz [ 968.511624][ T5861] usb 6-1: SerialNumber: syz [ 968.525947][ T5861] usb 6-1: config 0 descriptor?? [ 968.772956][ T5861] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 969.452096][ T5957] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 969.563417][ T5861] gspca_sunplus: reg_w_riv err -71 [ 969.568656][ T5861] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 969.604576][ T5861] usb 6-1: USB disconnect, device number 70 [ 969.643068][ T5957] usb 7-1: Using ep0 maxpacket: 8 [ 969.650834][ T5957] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 969.665882][ T5957] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 969.690536][ T5957] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 969.711369][ T5957] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.747763][ T5957] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 969.775242][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.832910][T31758] Invalid logical block size (-3) [ 970.027521][ T5957] usb 7-1: GET_CAPABILITIES returned 0 [ 970.044857][ T5957] usbtmc 7-1:16.0: can't read capabilities [ 970.131727][ T5851] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 970.138873][T31769] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 970.274840][T22435] usb 7-1: USB disconnect, device number 67 [ 970.518572][T31784] kvm: apic: phys broadcast and lowest prio [ 970.976019][ T5957] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 971.071797][ T5933] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 971.154157][ T5957] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.165379][ T5957] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 971.178292][ T5957] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 971.200171][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 971.213143][ T5957] usb 2-1: SerialNumber: syz [ 971.221720][T22435] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 971.243078][ T5933] usb 6-1: Using ep0 maxpacket: 16 [ 971.249909][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.261864][ T5933] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 971.270931][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.289937][ T5933] usb 6-1: config 0 descriptor?? [ 971.384122][T22435] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.421669][T22435] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 971.451451][ T5957] usb 2-1: 0:2 : does not exist [ 971.469909][T22435] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 971.478837][ T5957] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 971.485424][T22435] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 971.498741][T22435] usb 7-1: SerialNumber: syz [ 971.537400][T22435] cdc_acm 7-1:1.0: skipping garbage [ 971.555843][ T5957] usb 2-1: USB disconnect, device number 20 [ 971.564873][T22435] cdc_acm 7-1:1.0: skipping garbage [ 971.575987][T22435] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 971.585664][T22435] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 971.594101][T22435] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 971.629773][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.717037][ T5933] mcp2221 0003:04D8:00DD.008A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 971.771159][ T5946] usb 7-1: USB disconnect, device number 68 [ 971.925203][ T5957] usb 6-1: USB disconnect, device number 71 [ 972.579729][T31844] netlink: 35 bytes leftover after parsing attributes in process `syz.5.11038'. [ 972.601089][T31844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11038'. [ 972.846106][ T30] audit: type=1326 audit(1754489929.455:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31854 comm="syz.6.11043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 972.940784][ T30] audit: type=1326 audit(1754489929.485:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31854 comm="syz.6.11043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 972.964906][ T30] audit: type=1326 audit(1754489929.515:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31854 comm="syz.6.11043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 972.993610][ T30] audit: type=1326 audit(1754489929.515:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31854 comm="syz.6.11043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 973.024368][ T30] audit: type=1326 audit(1754489929.515:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31854 comm="syz.6.11043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 973.054066][ T30] audit: type=1326 audit(1754489929.515:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31854 comm="syz.6.11043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 973.150461][ T30] audit: type=1326 audit(1754489929.515:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31854 comm="syz.6.11043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 973.197013][ T30] audit: type=1326 audit(1754489929.525:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31854 comm="syz.6.11043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 973.318577][ T30] audit: type=1326 audit(1754489929.525:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31854 comm="syz.6.11043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 973.342212][T31862] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11046'. [ 973.382648][T31862] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11046'. [ 973.439707][T31862] netlink: 104 bytes leftover after parsing attributes in process `syz.5.11046'. [ 973.487748][ T30] audit: type=1326 audit(1754489929.525:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31854 comm="syz.6.11043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 973.531732][ T5946] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 973.730806][ T5946] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 973.759121][ T5946] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.815918][ T5946] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 973.853922][ T5946] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 973.925308][ T5946] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 973.942469][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.974509][ T5946] usb 2-1: Product: syz [ 973.978718][ T5946] usb 2-1: Manufacturer: syz [ 974.001694][ T5946] usb 2-1: SerialNumber: syz [ 974.049885][ T5946] cdc_mbim 2-1:1.0: skipping garbage [ 974.055586][T31876] loop8: detected capacity change from 0 to 8 [ 974.076196][T31876] Dev loop8: unable to read RDB block 8 [ 974.083848][T31876] loop8: unable to read partition table [ 974.089926][T31876] loop8: partition table beyond EOD, truncated [ 974.096817][T31876] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 974.122000][ T5861] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 974.165339][T31880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11055'. [ 974.249292][T31861] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 974.292945][ T5861] usb 5-1: Using ep0 maxpacket: 32 [ 974.307357][T31874] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.11052'. [ 974.331327][ T5861] usb 5-1: unable to get BOS descriptor or descriptor too short [ 974.352832][ T5861] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 974.364510][ T5861] usb 5-1: can't read configurations, error -71 [ 974.880830][T31861] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 975.142106][ T5946] cdc_mbim 2-1:1.0: bind() failure [ 975.188128][ T5946] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 975.235872][ T5946] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 975.249165][ T5946] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 975.276837][ T5946] usb 2-1: USB disconnect, device number 21 [ 975.356762][T31911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11070'. [ 975.373233][T31911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11070'. [ 975.392416][ T5957] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 975.431598][ T5861] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 975.565434][ T5957] usb 7-1: Using ep0 maxpacket: 16 [ 975.586703][ T5957] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.597853][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 975.613522][ T5861] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 975.629916][ T5957] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 975.639585][ T5861] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.655271][ T5957] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.672124][ T5861] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 975.699277][ T5957] usb 7-1: config 0 descriptor?? [ 975.708404][ T5861] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 975.737224][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.746673][ T5861] usb 5-1: Product: syz [ 975.751011][ T5861] usb 5-1: Manufacturer: syz [ 975.763213][ T5861] usb 5-1: SerialNumber: syz [ 975.981786][ T5946] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 976.154076][ T5946] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 976.170050][ T5957] mcp2221 0003:04D8:00DD.008B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 976.171719][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.196858][ T5861] usb 5-1: 0:2 : does not exist [ 976.228956][ T5946] usb 6-1: config 0 descriptor?? [ 976.237808][ T5946] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 976.623262][T31620] usb 7-1: USB disconnect, device number 69 [ 976.823992][ T5861] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 976.908939][ T5861] usb 5-1: USB disconnect, device number 12 [ 977.069019][ T5946] gspca_sunplus: reg_w_riv err -71 [ 977.076067][ T5946] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 977.105032][ T5946] usb 6-1: USB disconnect, device number 72 [ 977.402128][T22435] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 977.571319][T22435] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.613111][T22435] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 977.657794][T22435] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 977.681904][T22435] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 977.696537][T22435] usb 2-1: SerialNumber: syz [ 977.715890][T22435] cdc_acm 2-1:1.0: skipping garbage [ 977.730610][T22435] cdc_acm 2-1:1.0: skipping garbage [ 977.736637][T22435] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 977.751687][T22435] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 977.764055][T22435] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 978.446457][ T36] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.447913][T22435] usb 2-1: USB disconnect, device number 22 [ 978.498125][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.524699][ T36] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 978.574416][ T1164] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.610525][ T1164] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.636860][ T1164] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 978.656675][T22945] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.683917][T22945] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.704105][T22945] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 978.737853][T22945] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.777261][T22945] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.809665][T22945] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 979.732358][T31628] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 979.858150][T32034] syzkaller1: entered promiscuous mode [ 979.863970][T32034] syzkaller1: entered allmulticast mode [ 979.923543][T31628] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 979.964691][T31628] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 980.009369][T31628] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 980.044890][T31628] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 980.108975][T31628] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 980.157727][T31628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.192152][T31628] usb 7-1: config 0 descriptor?? [ 980.199550][T32020] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 980.310740][T32039] bond0: entered promiscuous mode [ 980.323680][T32039] bond_slave_0: entered promiscuous mode [ 980.339966][T32039] bond_slave_1: entered promiscuous mode [ 980.356843][T32039] batadv0: entered promiscuous mode [ 980.375759][T32039] debugfs: 'hsr1' already exists in 'hsr' [ 980.382148][T32039] Cannot create hsr debugfs directory [ 980.388112][T32039] hsr1: entered allmulticast mode [ 980.393626][T32039] bond0: entered allmulticast mode [ 980.399113][T32039] bond_slave_0: entered allmulticast mode [ 980.405754][T32039] bond_slave_1: entered allmulticast mode [ 980.417470][T32039] batadv0: entered allmulticast mode [ 980.423838][T32039] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 980.440036][T32039] bond0: left promiscuous mode [ 980.445059][T32039] bond_slave_0: left promiscuous mode [ 980.450688][T32039] bond_slave_1: left promiscuous mode [ 980.487699][T32039] batadv0: left promiscuous mode [ 980.664182][T31628] plantronics 0003:047F:FFFF.008C: reserved main item tag 0xd [ 980.710956][T31628] plantronics 0003:047F:FFFF.008C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 980.964672][T31628] usb 7-1: USB disconnect, device number 70 [ 981.531874][T31622] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 981.724035][T31622] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 981.745822][T31622] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 981.765408][T31622] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 981.777660][T31622] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 981.789987][T31622] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 981.805013][T31622] usb 2-1: config 0 interface 0 has no altsetting 0 [ 981.815893][T31622] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 981.825529][T31622] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 981.834848][T31622] usb 2-1: Product: syz [ 981.854333][T31622] usb 2-1: Manufacturer: syz [ 981.858986][T31622] usb 2-1: SerialNumber: syz [ 981.913714][T31622] usb 2-1: config 0 descriptor?? [ 981.922256][T32057] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 981.934506][T31622] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 981.982164][T31622] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 982.169063][T22435] usb 2-1: USB disconnect, device number 23 [ 982.202392][T22435] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 982.362253][T31622] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 982.535496][T31622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.549085][T31622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.560223][T31622] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 982.586409][T31622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.601285][T31622] usb 6-1: config 0 descriptor?? [ 982.877657][T32099] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.885205][T32099] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.065646][T31622] cm6533_jd 0003:0D8C:0022.008D: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 983.324087][T31622] usb 6-1: USB disconnect, device number 73 [ 983.372243][T31620] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 983.546232][T31620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 983.551838][T32099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.572394][T31620] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 983.579986][T32099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.584958][T31620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.608321][T31620] usb 2-1: config 0 descriptor?? [ 983.751980][T31622] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 983.920285][T31622] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.936700][T31622] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 983.962357][T31622] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 983.981621][T31622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.992860][T31622] usb 5-1: Product: syz [ 983.997094][T31622] usb 5-1: Manufacturer: syz [ 984.003124][T31622] usb 5-1: SerialNumber: syz [ 984.069595][T31620] keytouch 0003:0926:3333.008E: fixing up Keytouch IEC report descriptor [ 984.096596][T31620] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.008E/input/input163 [ 984.201361][T31620] keytouch 0003:0926:3333.008E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 984.226853][T31622] usb 5-1: 0:2 : does not exist [ 984.270544][T31622] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 984.273110][T31620] usb 2-1: USB disconnect, device number 24 [ 984.362383][T32099] gretap0: left allmulticast mode [ 984.372176][T31622] usb 5-1: USB disconnect, device number 13 [ 984.506628][T32121] fido_id[32121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 984.510481][ T5865] udevd[5865]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 984.547085][T32123] veth0_to_hsr: entered allmulticast mode [ 984.620811][ T36] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.652436][ T36] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 984.686162][T32123] veth0_to_hsr: left allmulticast mode [ 984.692284][ T36] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.732566][ T36] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 984.781844][T22943] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.811265][T22943] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 984.861559][T22943] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.870513][T22943] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 985.291676][T31620] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 985.454811][T31620] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 985.470738][T31620] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 985.486149][T31620] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.511140][T31620] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 985.527244][T31620] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.536953][T31620] usb 6-1: Product: syz [ 985.541215][T31620] usb 6-1: Manufacturer: syz [ 985.550375][T31620] usb 6-1: SerialNumber: syz [ 985.555510][T31621] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 985.721576][T31621] usb 5-1: Using ep0 maxpacket: 32 [ 985.728499][T31621] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 985.737086][T31621] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 985.745775][T31621] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 985.755063][T31621] usb 5-1: config 1 has no interface number 0 [ 985.761205][T31621] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 985.772520][T31621] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 985.789932][T31621] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 985.800462][T31621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.808948][T31620] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 74 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 985.831582][T31621] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 985.844729][T31622] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 986.008834][T31622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.011810][T31620] usb 6-1: USB disconnect, device number 74 [ 986.021010][T31622] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.040406][T31622] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 986.049010][T31621] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 986.055889][T31622] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 986.070484][T31622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.080779][T31620] usblp0: removed [ 986.083314][T31622] usb 2-1: config 0 descriptor?? [ 986.492231][T31620] usb 5-1: USB disconnect, device number 14 [ 986.501724][T31620] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 986.528840][T31622] plantronics 0003:047F:FFFF.008F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 986.627493][T32162] loop2: detected capacity change from 0 to 7 [ 986.635606][T32162] Dev loop2: unable to read RDB block 7 [ 986.641224][T32162] loop2: AHDI p1 p2 p3 [ 986.645541][T32162] loop2: partition table partially beyond EOD, truncated [ 986.653125][T32162] loop2: p1 start 1601398130 is beyond EOD, truncated [ 986.659993][T32162] loop2: p2 start 1702059890 is beyond EOD, truncated [ 986.848663][T31622] usb 2-1: USB disconnect, device number 25 [ 986.930436][T32166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11164'. [ 986.987898][T32166] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 987.146836][T32172] netlink: 348 bytes leftover after parsing attributes in process `syz.4.11167'. [ 987.576407][ T30] kauditd_printk_skb: 328 callbacks suppressed [ 987.576423][ T30] audit: type=1326 audit(1754489944.185:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.6.11175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 987.607630][T32185] syzkaller1: entered promiscuous mode [ 987.614424][ T30] audit: type=1326 audit(1754489944.215:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.6.11175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 987.619771][T32185] syzkaller1: entered allmulticast mode [ 987.655467][ T30] audit: type=1326 audit(1754489944.215:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.6.11175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 987.699887][ T30] audit: type=1326 audit(1754489944.215:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.6.11175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 987.725980][ T30] audit: type=1326 audit(1754489944.215:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.6.11175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 987.762575][ T30] audit: type=1326 audit(1754489944.215:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.6.11175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 987.785795][ T30] audit: type=1326 audit(1754489944.215:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.6.11175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 987.809257][ T30] audit: type=1326 audit(1754489944.225:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.6.11175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 987.844442][ T30] audit: type=1326 audit(1754489944.225:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.6.11175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 987.875203][ T30] audit: type=1326 audit(1754489944.225:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32188 comm="syz.6.11175" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 987.940826][T32197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11178'. [ 987.953627][T32197] netlink: 'syz.0.11178': attribute type 1 has an invalid length. [ 987.962480][T32197] netlink: 'syz.0.11178': attribute type 2 has an invalid length. [ 987.974847][T32115] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 988.153459][T32115] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.173393][T32115] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 988.194877][T32115] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 988.222844][T32115] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 988.241993][T32115] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.253848][T32115] usb 7-1: config 0 descriptor?? [ 988.743400][T32115] plantronics 0003:047F:FFFF.0090: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 988.998995][T32229] syzkaller1: entered promiscuous mode [ 989.007372][T32229] syzkaller1: entered allmulticast mode [ 989.063993][T32115] usb 7-1: USB disconnect, device number 71 [ 989.210487][T32234] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11192'. [ 989.841426][T32257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11202'. [ 989.856245][T32257] netlink: 'syz.6.11202': attribute type 1 has an invalid length. [ 989.876405][T32257] netlink: 'syz.6.11202': attribute type 2 has an invalid length. [ 990.263088][T32270] netlink: 80 bytes leftover after parsing attributes in process `syz.1.11207'. [ 990.562110][T32115] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 990.757852][T32115] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.793778][T32115] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 990.822714][T32115] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 990.838572][T32115] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 990.864165][T32115] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 990.907262][T32115] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.952491][T32115] usb 7-1: config 0 descriptor?? [ 991.368193][T32115] plantronics 0003:047F:FFFF.0091: ignoring exceeding usage max [ 991.412970][T32115] plantronics 0003:047F:FFFF.0091: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 991.464033][T32311] unknown channel width for channel at 909000KHz? [ 992.323318][T32115] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 992.487334][T32115] usb 6-1: Using ep0 maxpacket: 8 [ 992.498930][T32115] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 992.525838][T32115] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 992.550438][T32115] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 992.560962][T32351] syzkaller1: entered promiscuous mode [ 992.567215][T32351] syzkaller1: entered allmulticast mode [ 992.572898][T32115] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 992.572929][T32115] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.573000][T32115] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 992.573022][T32115] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.650937][T32355] macsec1: entered promiscuous mode [ 992.656543][T32355] ip6gretap0: entered promiscuous mode [ 992.663590][T32355] macsec1: entered allmulticast mode [ 992.668905][T32355] ip6gretap0: entered allmulticast mode [ 992.832341][T32115] usb 6-1: GET_CAPABILITIES returned 0 [ 992.837882][T32115] usbtmc 6-1:16.0: can't read capabilities [ 993.028407][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.036086][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.070336][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 993.070353][ T30] audit: type=1800 audit(1754489949.665:2906): pid=32370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.11252" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 993.163743][T31622] usb 6-1: USB disconnect, device number 75 [ 993.493460][T31621] usb 7-1: USB disconnect, device number 72 [ 993.532134][T32388] netlink: 'syz.6.11258': attribute type 1 has an invalid length. [ 993.540011][T32388] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.11258'. [ 993.844432][T31620] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 994.018578][T31620] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 994.047663][T31620] usb 5-1: config 8 has no interface number 0 [ 994.054391][T31620] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 994.088373][T31620] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 994.130141][T31620] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 994.150957][T31620] usb 5-1: config 8 interface 177 has no altsetting 0 [ 994.169130][T31620] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 994.193265][T31620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.259131][T32390] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 994.487295][T31620] usb 5-1: string descriptor 0 read error: -71 [ 994.515207][T31620] ir_toy 5-1:8.177: required endpoints not found [ 994.526709][T31620] usb 5-1: USB disconnect, device number 15 [ 994.857190][T32438] kvm: user requested TSC rate below hardware speed [ 995.763852][T31622] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 995.926986][T31622] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.948686][T31622] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 995.975085][T31622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.004338][T31622] usb 6-1: config 0 descriptor?? [ 996.298417][ T30] audit: type=1326 audit(1754489952.905:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.6.11306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 996.345179][T32497] input: syz0 as /devices/virtual/input/input164 [ 996.347249][ T30] audit: type=1326 audit(1754489952.905:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.6.11306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 996.422693][ T30] audit: type=1326 audit(1754489952.905:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.6.11306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 996.431406][T31622] keytouch 0003:0926:3333.0092: fixing up Keytouch IEC report descriptor [ 996.445061][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.486158][ T30] audit: type=1326 audit(1754489952.905:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.6.11306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 996.526325][ T30] audit: type=1326 audit(1754489952.905:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.6.11306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 996.547066][T31622] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0092/input/input165 [ 996.607652][ T30] audit: type=1326 audit(1754489952.905:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.6.11306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 996.629928][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.647794][ T30] audit: type=1326 audit(1754489952.905:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.6.11306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 996.670947][ T30] audit: type=1326 audit(1754489952.905:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.6.11306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 996.693159][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.706521][ T30] audit: type=1326 audit(1754489952.905:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32494 comm="syz.6.11306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=335 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 996.728878][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.776740][T31620] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 996.779094][T31622] keytouch 0003:0926:3333.0092: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 996.819308][T31622] usb 6-1: USB disconnect, device number 76 [ 996.971339][T32511] fido_id[32511]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 997.005291][T31620] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 997.028095][T31620] usb 2-1: config 0 has no interface number 0 [ 997.047571][T32514] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 997.066643][T31620] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 997.095560][T31620] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 997.128114][T31620] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 997.165931][T31620] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 997.189073][T31620] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 997.203707][T31620] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 997.231639][T31620] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 997.240856][T31620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.285271][T31620] usb 2-1: config 0 descriptor?? [ 997.300730][T32501] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 997.313612][T32501] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 997.332591][T31620] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 997.535475][T32526] input: syz0 as /devices/virtual/input/input166 [ 997.549522][T31620] usb 2-1: USB disconnect, device number 26 [ 997.555952][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 997.612981][T31620] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 997.901815][T31621] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 998.104690][T31621] usb 7-1: Using ep0 maxpacket: 8 [ 998.123642][T31621] usb 7-1: config 0 has no interfaces? [ 998.152082][T31621] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 998.178780][T31621] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.196316][T31621] usb 7-1: Product: syz [ 998.207113][T31621] usb 7-1: Manufacturer: syz [ 998.217478][T31621] usb 7-1: SerialNumber: syz [ 998.236392][T31621] usb 7-1: config 0 descriptor?? [ 998.476349][T31622] usb 7-1: USB disconnect, device number 73 [ 998.542699][T31621] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 998.671660][ T5861] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 998.720101][T31621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.731587][T31621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.742427][T31621] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 998.756023][T31621] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 998.765407][T31621] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.781663][T31621] usb 5-1: config 0 descriptor?? [ 998.821974][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 998.829195][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.839475][ T5861] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 998.850321][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.868828][ T5861] usb 2-1: config 0 descriptor?? [ 999.129497][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 999.129515][ T30] audit: type=1326 audit(1754489955.735:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.6.11339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 999.215383][ T30] audit: type=1326 audit(1754489955.735:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.6.11339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 999.220561][T31621] acrux 0003:1A34:0802.0093: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.4-1/input0 [ 999.308765][T31621] acrux 0003:1A34:0802.0093: no inputs found [ 999.315777][ T5861] cypress 0003:04B4:0001.0094: unknown main item tag 0x0 [ 999.315816][ T5861] cypress 0003:04B4:0001.0094: unknown main item tag 0x0 [ 999.315845][ T5861] cypress 0003:04B4:0001.0094: unknown main item tag 0x0 [ 999.315871][ T5861] cypress 0003:04B4:0001.0094: unknown main item tag 0x0 [ 999.315898][ T5861] cypress 0003:04B4:0001.0094: unknown main item tag 0x0 [ 999.315924][ T5861] cypress 0003:04B4:0001.0094: unknown main item tag 0x0 [ 999.315950][ T5861] cypress 0003:04B4:0001.0094: unknown main item tag 0x0 [ 999.367792][ T5861] cypress 0003:04B4:0001.0094: hidraw1: USB HID v10.03 Device [HID 04b4:0001] on usb-dummy_hcd.1-1/input0 [ 999.380861][ T30] audit: type=1326 audit(1754489955.735:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.6.11339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 999.471596][ T30] audit: type=1326 audit(1754489955.735:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.6.11339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 999.548414][ T5861] usb 2-1: USB disconnect, device number 27 [ 999.651617][ T30] audit: type=1326 audit(1754489955.735:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.6.11339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 999.692245][T31621] acrux 0003:1A34:0802.0093: Failed to enable force feedback support, error: -19 [ 999.778115][ T30] audit: type=1326 audit(1754489955.735:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.6.11339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 999.808765][T32578] fido_id[32578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 999.852463][T31621] usb 5-1: USB disconnect, device number 16 [ 999.884664][T32582] input: syz0 as /devices/virtual/input/input167 [ 999.959782][ T30] audit: type=1326 audit(1754489955.735:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.6.11339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 1000.027217][ T30] audit: type=1326 audit(1754489955.735:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.6.11339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 1000.181781][ T30] audit: type=1326 audit(1754489955.735:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.6.11339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 1000.220598][ T30] audit: type=1326 audit(1754489955.735:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.6.11339" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 1000.242900][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.251283][T32589] openvswitch: netlink: IPv4 tun info is not correct [ 1000.862121][ T5861] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1001.011706][ T5861] usb 2-1: Using ep0 maxpacket: 8 [ 1001.018195][ T5861] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1001.037298][ T5861] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.076058][ T5861] usb 2-1: config 179 has no interface number 0 [ 1001.101294][ T5861] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1001.117600][ T5861] usb 2-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 1001.148123][ T5861] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1001.172149][ T5861] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1001.195150][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.198619][T32615] batadv_slave_0: entered allmulticast mode [ 1001.261517][T32615] batadv_slave_0: left allmulticast mode [ 1001.595846][T32630] input: syz0 as /devices/virtual/input/input168 [ 1001.791802][T31619] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1001.840680][T31621] usb 2-1: USB disconnect, device number 28 [ 1001.952462][T31619] usb 5-1: Using ep0 maxpacket: 16 [ 1001.971060][T31619] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1001.982928][T31619] usb 5-1: config 0 has no interface number 0 [ 1001.989160][T31619] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1002.014748][T31619] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1002.027887][T31619] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1002.048600][T31619] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1002.061534][T31619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.069612][T31619] usb 5-1: Product: syz [ 1002.078700][T31619] usb 5-1: Manufacturer: syz [ 1002.083480][T31619] usb 5-1: SerialNumber: syz [ 1002.090716][T31619] usb 5-1: config 0 descriptor?? [ 1002.096717][T32628] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1002.106211][T32628] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1002.155112][T32652] netlink: 'syz.5.11372': attribute type 2 has an invalid length. [ 1002.182952][T32652] þ: entered promiscuous mode [ 1002.322325][T32628] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1002.329623][T32628] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1002.708458][T32659] input: syz0 as /devices/virtual/input/input169 [ 1003.147912][T31619] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1003.169817][T31619] usb 5-1: USB disconnect, device number 17 [ 1003.371890][ T5861] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1003.412096][T31622] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1003.546634][ T5861] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1003.577601][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1003.591698][T31622] usb 2-1: Using ep0 maxpacket: 8 [ 1003.611877][T31622] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.631969][ T5861] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1003.634010][T32686] pim6reg1: entered promiscuous mode [ 1003.656192][T32688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11389'. [ 1003.659279][T31622] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1003.671594][T32686] pim6reg1: entered allmulticast mode [ 1003.675489][ T5861] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1003.711577][T31622] usb 2-1: config 1 has no interface number 0 [ 1003.717729][T31622] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1003.743278][ T5861] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1003.761660][ T5861] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.783952][T31622] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 1003.809397][T31622] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.819424][ T5861] usb 7-1: config 0 descriptor?? [ 1003.839724][T31622] usb 2-1: Product: syz [ 1003.868888][T31622] usb 2-1: Manufacturer: syz [ 1003.874827][T31622] usb 2-1: SerialNumber: syz [ 1003.901408][T31622] usb 2-1: selecting invalid altsetting 1 [ 1004.315733][T31622] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS [ 1004.336282][ T5861] plantronics 0003:047F:FFFF.0095: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1004.359308][T31622] cdc_ncm 2-1:1.1: bind() failure [ 1004.395170][T31622] usb 2-1: USB disconnect, device number 29 [ 1004.657043][T31619] usb 7-1: USB disconnect, device number 74 [ 1004.836994][T32721] loop9: detected capacity change from 0 to 7 [ 1004.838791][T32723] binder: 32722:32723 ioctl c0306201 800003c0 returned -14 [ 1004.856658][T32721] Dev loop9: unable to read RDB block 7 [ 1004.871930][T32721] loop9: unable to read partition table [ 1004.881795][T32721] loop9: partition table beyond EOD, truncated [ 1004.898357][T32721] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1005.819797][T32758] syzkaller1: entered promiscuous mode [ 1005.826355][T32758] syzkaller1: entered allmulticast mode [ 1005.898387][T32761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11419'. [ 1006.202011][T31621] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1006.362571][T31621] usb 7-1: Using ep0 maxpacket: 32 [ 1006.375295][T31621] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1006.390658][T31621] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.399200][T31621] usb 7-1: Product: syz [ 1006.414468][T31621] usb 7-1: Manufacturer: syz [ 1006.419119][T31621] usb 7-1: SerialNumber: syz [ 1006.451190][T31621] usb 7-1: config 0 descriptor?? [ 1006.478034][T31621] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1006.893294][ T30] kauditd_printk_skb: 780 callbacks suppressed [ 1006.893311][ T30] audit: type=1326 audit(1754489963.505:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=332 comm="syz.5.11437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 1006.943145][ T30] audit: type=1326 audit(1754489963.545:3708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=332 comm="syz.5.11437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 1006.988796][ T30] audit: type=1326 audit(1754489963.545:3709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=332 comm="syz.5.11437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=395 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 1007.017604][ T30] audit: type=1326 audit(1754489963.545:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=332 comm="syz.5.11437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 1007.057102][ T30] audit: type=1326 audit(1754489963.545:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=332 comm="syz.5.11437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=397 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 1007.080586][ T30] audit: type=1800 audit(1754489963.555:3712): pid=333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.11437" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1007.101753][ T30] audit: type=1326 audit(1754489963.555:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=332 comm="syz.5.11437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 1007.157146][ T30] audit: type=1326 audit(1754489963.555:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=332 comm="syz.5.11437" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35539 code=0x7ffc0000 [ 1007.541667][ T5861] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1007.550101][T31621] gspca_ov534_9: reg_w failed -71 [ 1007.701857][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 1007.718550][ T5861] usb 5-1: config 0 has no interfaces? [ 1007.729082][ T5861] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1007.749678][ T5861] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1007.759793][ T5861] usb 5-1: Manufacturer: syz [ 1007.770789][ T5861] usb 5-1: config 0 descriptor?? [ 1008.218519][ T341] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11441'. [ 1008.257833][ T5861] usb 5-1: USB disconnect, device number 18 [ 1008.283492][ T361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11449'. [ 1008.318341][ T361] netlink: 277 bytes leftover after parsing attributes in process `syz.6.11449'. [ 1008.327705][ T361] netlink: 277 bytes leftover after parsing attributes in process `syz.6.11449'. [ 1008.411763][T31621] gspca_ov534_9: Unknown sensor 0000 [ 1008.411854][T31621] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 1008.445197][T31621] usb 7-1: USB disconnect, device number 75 [ 1008.912241][T31621] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 1008.952919][ T30] audit: type=1326 audit(1754489965.565:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=376 comm="syz.0.11457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7fc00000 [ 1008.998850][ T30] audit: type=1326 audit(1754489965.595:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=374 comm="syz.1.11456" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1009.067452][ T383] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1009.082585][T31621] usb 7-1: Using ep0 maxpacket: 8 [ 1009.090375][T31621] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1009.101229][T31621] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1009.111755][ T5861] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1009.134355][T31621] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1009.150221][T31621] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1009.160505][T31621] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1009.196068][T31621] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1009.218121][T31621] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.311973][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 1009.318944][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.330399][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1009.347183][ T5861] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1009.362720][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.379162][ T5861] usb 5-1: config 0 descriptor?? [ 1009.448325][T31621] usb 7-1: GET_CAPABILITIES returned 0 [ 1009.454261][T31620] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1009.476537][T31621] usbtmc 7-1:16.0: can't read capabilities [ 1009.522826][ T392] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.11463'. [ 1009.643986][T31620] usb 2-1: Using ep0 maxpacket: 32 [ 1009.666633][T31620] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1009.675095][T31620] usb 2-1: config 0 has no interface number 0 [ 1009.681206][T31620] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1009.727897][T31620] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1009.739051][T31619] usb 7-1: USB disconnect, device number 76 [ 1009.778331][T31620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.810754][T31620] usb 2-1: Product: syz [ 1009.819012][T31620] usb 2-1: Manufacturer: syz [ 1009.828760][ T5861] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 1009.831237][T31620] usb 2-1: SerialNumber: syz [ 1009.854153][T31620] usb 2-1: config 0 descriptor?? [ 1009.857232][ T5861] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 1009.869889][T31620] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1009.881821][ T5861] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 1009.910205][ T5861] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 1009.911158][T31620] em28xx 2-1:0.132: Video interface 132 found: [ 1009.930875][ T5861] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 1009.947890][ T5861] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 1009.957547][ T5861] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 1009.970939][ T5861] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 1009.979404][ T5861] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 1010.003066][ T5861] microsoft 0003:045E:07DA.0096: unknown main item tag 0x0 [ 1010.041950][ T5861] HID 045e:07da: Invalid code 65791 type 1 [ 1010.058347][ T5861] HID 045e:07da: Invalid code 768 type 1 [ 1010.084082][ T5861] HID 045e:07da: Invalid code 769 type 1 [ 1010.102335][ T5861] HID 045e:07da: Invalid code 770 type 1 [ 1010.124434][ T5861] HID 045e:07da: Invalid code 771 type 1 [ 1010.130124][ T5861] HID 045e:07da: Invalid code 772 type 1 [ 1010.161084][ T5861] HID 045e:07da: Invalid code 773 type 1 [ 1010.178412][ T5861] HID 045e:07da: Invalid code 774 type 1 [ 1010.201946][ T5861] HID 045e:07da: Invalid code 775 type 1 [ 1010.218877][ T5861] HID 045e:07da: Invalid code 776 type 1 [ 1010.288630][ T5861] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0096/input/input172 [ 1010.305581][T31620] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1010.420142][ T5861] microsoft 0003:045E:07DA.0096: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1010.728617][T31620] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1010.757307][T31620] em28xx 2-1:0.132: board has no eeprom [ 1010.827913][ T5861] usb 5-1: USB disconnect, device number 19 [ 1010.864597][T31620] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1010.874480][T31620] em28xx 2-1:0.132: analog set to bulk mode. [ 1010.880862][T31619] em28xx 2-1:0.132: Registering V4L2 extension [ 1010.910770][T31620] usb 2-1: USB disconnect, device number 30 [ 1010.952026][T31620] em28xx 2-1:0.132: Disconnecting em28xx [ 1011.240218][T31619] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1011.270652][T31619] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1011.279306][T31619] em28xx 2-1:0.132: No AC97 audio processor [ 1011.307013][T31619] usb 2-1: Decoder not found [ 1011.316536][T31619] em28xx 2-1:0.132: failed to create media graph [ 1011.325769][T31619] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1011.346358][T31619] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1011.355531][T31620] em28xx 2-1:0.132: Closing input extension [ 1011.381349][T31620] em28xx 2-1:0.132: Freeing device [ 1011.634791][ T451] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.11483'. [ 1012.147547][ T471] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.11493'. [ 1012.453164][ T30] kauditd_printk_skb: 130 callbacks suppressed [ 1012.453183][ T30] audit: type=1326 audit(1754489969.065:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=483 comm="syz.1.11500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1012.555405][ T30] audit: type=1326 audit(1754489969.095:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=483 comm="syz.1.11500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1012.577425][ C1] vkms_vblank_simulate: vblank timer overrun [ 1012.644067][ T30] audit: type=1326 audit(1754489969.095:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=483 comm="syz.1.11500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1012.712391][ T30] audit: type=1326 audit(1754489969.095:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=483 comm="syz.1.11500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1012.741394][ T30] audit: type=1326 audit(1754489969.095:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=483 comm="syz.1.11500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1012.895173][ T30] audit: type=1326 audit(1754489969.105:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=483 comm="syz.1.11500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1012.958364][ T30] audit: type=1326 audit(1754489969.105:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=483 comm="syz.1.11500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1013.022138][ T30] audit: type=1326 audit(1754489969.105:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=483 comm="syz.1.11500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1013.044230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.057609][ T30] audit: type=1326 audit(1754489969.105:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=483 comm="syz.1.11500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1013.086958][ T30] audit: type=1326 audit(1754489969.105:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=483 comm="syz.1.11500" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e539 code=0x7ffc0000 [ 1013.109133][ C1] vkms_vblank_simulate: vblank timer overrun [ 1013.181594][T31620] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1013.370598][T31620] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1013.390277][T31620] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.420438][T31620] usb 7-1: Product: syz [ 1013.424897][T31620] usb 7-1: Manufacturer: syz [ 1013.429508][T31620] usb 7-1: SerialNumber: syz [ 1013.446453][T31620] usb 7-1: config 0 descriptor?? [ 1013.449718][ T519] [ 1013.453810][ T519] ===================================================== [ 1013.460742][ T519] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1013.463016][T31620] ch341 7-1:0.0: ch341-uart converter detected [ 1013.468207][ T519] 6.16.0-syzkaller-11852-g479058002c32 #0 Not tainted [ 1013.468223][ T519] ----------------------------------------------------- [ 1013.468231][ T519] syz.4.11515/519 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1013.468251][ T519] ffff8880750b4f30 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1013.505276][ T519] [ 1013.505276][ T519] and this task is already holding: [ 1013.512687][ T519] ffff88802972a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1013.522386][ T519] which would create a new lock dependency: [ 1013.528320][ T519] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1013.536277][ T519] [ 1013.536277][ T519] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1013.545728][ T519] (&dev->event_lock#2){..-.}-{3:3} [ 1013.545770][ T519] [ 1013.545770][ T519] ... which became SOFTIRQ-irq-safe at: [ 1013.558754][ T519] lock_acquire+0x120/0x360 [ 1013.563377][ T519] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1013.568674][ T519] input_event+0x76/0xe0 [ 1013.573023][ T519] hidinput_hid_event+0x12d7/0x1c90 [ 1013.578323][ T519] hid_process_event+0x4be/0x620 [ 1013.583382][ T519] hid_report_raw_event+0xe91/0x16d0 [ 1013.588945][ T519] hid_input_report+0x43e/0x520 [ 1013.593904][ T519] hid_irq_in+0x47e/0x6d0 [ 1013.598331][ T519] __usb_hcd_giveback_urb+0x417/0x690 [ 1013.603803][ T519] dummy_timer+0x862/0x4550 [ 1013.608405][ T519] __hrtimer_run_queues+0x52c/0xc60 [ 1013.613707][ T519] hrtimer_run_softirq+0x187/0x2b0 [ 1013.618920][ T519] handle_softirqs+0x283/0x870 [ 1013.623869][ T519] __irq_exit_rcu+0xca/0x1f0 [ 1013.628589][ T519] irq_exit_rcu+0x9/0x30 [ 1013.632932][ T519] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1013.638669][ T519] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1013.644862][ T519] unwind_next_frame+0x15d/0x2390 [ 1013.649997][ T519] arch_stack_walk+0x11c/0x150 [ 1013.655036][ T519] stack_trace_save+0x9c/0xe0 [ 1013.659800][ T519] kasan_save_track+0x3e/0x80 [ 1013.664556][ T519] __kasan_kmalloc+0x93/0xb0 [ 1013.669233][ T519] __kmalloc_cache_noprof+0x230/0x3d0 [ 1013.674698][ T519] kobject_uevent_env+0x27c/0x8c0 [ 1013.679819][ T519] really_probe+0x745/0x9e0 [ 1013.684401][ T519] __driver_probe_device+0x18c/0x2f0 [ 1013.689873][ T519] driver_probe_device+0x4f/0x430 [ 1013.694970][ T519] __device_attach_driver+0x2ce/0x530 [ 1013.700423][ T519] bus_for_each_drv+0x251/0x2e0 [ 1013.705444][ T519] __device_attach+0x2b8/0x400 [ 1013.710286][ T519] bus_probe_device+0x185/0x260 [ 1013.715212][ T519] device_add+0x7b6/0xb50 [ 1013.719620][ T519] hid_add_device+0x398/0x540 [ 1013.724426][ T519] usbhid_probe+0xe13/0x12a0 [ 1013.729092][ T519] usb_probe_interface+0x668/0xc30 [ 1013.734275][ T519] really_probe+0x26a/0x9e0 [ 1013.738850][ T519] __driver_probe_device+0x18c/0x2f0 [ 1013.744237][ T519] driver_probe_device+0x4f/0x430 [ 1013.749378][ T519] __device_attach_driver+0x2ce/0x530 [ 1013.754820][ T519] bus_for_each_drv+0x251/0x2e0 [ 1013.759746][ T519] __device_attach+0x2b8/0x400 [ 1013.764592][ T519] bus_probe_device+0x185/0x260 [ 1013.769517][ T519] device_add+0x7b6/0xb50 [ 1013.774277][ T519] usb_set_configuration+0x1a87/0x20e0 [ 1013.779806][ T519] usb_generic_driver_probe+0x8d/0x150 [ 1013.785349][ T519] usb_probe_device+0x1c1/0x390 [ 1013.790303][ T519] really_probe+0x26a/0x9e0 [ 1013.794909][ T519] __driver_probe_device+0x18c/0x2f0 [ 1013.800274][ T519] driver_probe_device+0x4f/0x430 [ 1013.805408][ T519] __device_attach_driver+0x2ce/0x530 [ 1013.810881][ T519] bus_for_each_drv+0x251/0x2e0 [ 1013.815818][ T519] __device_attach+0x2b8/0x400 [ 1013.820742][ T519] bus_probe_device+0x185/0x260 [ 1013.825776][ T519] device_add+0x7b6/0xb50 [ 1013.830188][ T519] usb_new_device+0xa39/0x16f0 [ 1013.835035][ T519] hub_event+0x2958/0x4a20 [ 1013.839527][ T519] process_scheduled_works+0xade/0x17b0 [ 1013.845142][ T519] worker_thread+0x8a0/0xda0 [ 1013.849801][ T519] kthread+0x70e/0x8a0 [ 1013.853945][ T519] ret_from_fork+0x3fc/0x770 [ 1013.858611][ T519] ret_from_fork_asm+0x1a/0x30 [ 1013.863554][ T519] [ 1013.863554][ T519] to a SOFTIRQ-irq-unsafe lock: [ 1013.871097][ T519] (tasklist_lock){.+.+}-{3:3} [ 1013.871123][ T519] [ 1013.871123][ T519] ... which became SOFTIRQ-irq-unsafe at: [ 1013.883724][ T519] ... [ 1013.883732][ T519] lock_acquire+0x120/0x360 [ 1013.890877][ T519] _raw_read_lock+0x36/0x50 [ 1013.895479][ T519] __do_wait+0xde/0x740 [ 1013.899728][ T519] do_wait+0x1f8/0x520 [ 1013.903885][ T519] kernel_wait+0xab/0x170 [ 1013.908297][ T519] call_usermodehelper_exec_work+0xbe/0x230 [ 1013.914272][ T519] process_scheduled_works+0xade/0x17b0 [ 1013.919894][ T519] worker_thread+0x8a0/0xda0 [ 1013.924567][ T519] kthread+0x70e/0x8a0 [ 1013.928733][ T519] ret_from_fork+0x3fc/0x770 [ 1013.933406][ T519] ret_from_fork_asm+0x1a/0x30 [ 1013.938260][ T519] [ 1013.938260][ T519] other info that might help us debug this: [ 1013.938260][ T519] [ 1013.948575][ T519] Chain exists of: [ 1013.948575][ T519] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 1013.948575][ T519] [ 1013.961608][ T519] Possible interrupt unsafe locking scenario: [ 1013.961608][ T519] [ 1013.969933][ T519] CPU0 CPU1 [ 1013.975276][ T519] ---- ---- [ 1013.980623][ T519] lock(tasklist_lock); [ 1013.984884][ T519] local_irq_disable(); [ 1013.991620][ T519] lock(&dev->event_lock#2); [ 1013.998810][ T519] lock(&new->fa_lock); [ 1014.005556][ T519] [ 1014.009169][ T519] lock(&dev->event_lock#2); [ 1014.014097][ T519] [ 1014.014097][ T519] *** DEADLOCK *** [ 1014.014097][ T519] [ 1014.022329][ T519] 6 locks held by syz.4.11515/519: [ 1014.027454][ T519] #0: ffff88802972c118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1014.036594][ T519] #1: ffff88802972a230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1014.046680][ T519] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1014.056420][ T519] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1014.066022][ T519] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 1014.076102][ T519] #5: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1014.085163][ T519] [ 1014.085163][ T519] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1014.095548][ T519] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1014.101214][ T519] IN-SOFTIRQ-W at: [ 1014.105181][ T519] lock_acquire+0x120/0x360 [ 1014.111358][ T519] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1014.118193][ T519] input_event+0x76/0xe0 [ 1014.124072][ T519] hidinput_hid_event+0x12d7/0x1c90 [ 1014.130909][ T519] hid_process_event+0x4be/0x620 [ 1014.137488][ T519] hid_report_raw_event+0xe91/0x16d0 [ 1014.144419][ T519] hid_input_report+0x43e/0x520 [ 1014.150943][ T519] hid_irq_in+0x47e/0x6d0 [ 1014.156924][ T519] __usb_hcd_giveback_urb+0x417/0x690 [ 1014.163938][ T519] dummy_timer+0x862/0x4550 [ 1014.170089][ T519] __hrtimer_run_queues+0x52c/0xc60 [ 1014.177046][ T519] hrtimer_run_softirq+0x187/0x2b0 [ 1014.183818][ T519] handle_softirqs+0x283/0x870 [ 1014.190248][ T519] __irq_exit_rcu+0xca/0x1f0 [ 1014.196511][ T519] irq_exit_rcu+0x9/0x30 [ 1014.202425][ T519] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1014.209712][ T519] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1014.217362][ T519] unwind_next_frame+0x15d/0x2390 [ 1014.224124][ T519] arch_stack_walk+0x11c/0x150 [ 1014.230647][ T519] stack_trace_save+0x9c/0xe0 [ 1014.236998][ T519] kasan_save_track+0x3e/0x80 [ 1014.243379][ T519] __kasan_kmalloc+0x93/0xb0 [ 1014.249713][ T519] __kmalloc_cache_noprof+0x230/0x3d0 [ 1014.256755][ T519] kobject_uevent_env+0x27c/0x8c0 [ 1014.263444][ T519] really_probe+0x745/0x9e0 [ 1014.269604][ T519] __driver_probe_device+0x18c/0x2f0 [ 1014.276553][ T519] driver_probe_device+0x4f/0x430 [ 1014.283336][ T519] __device_attach_driver+0x2ce/0x530 [ 1014.290374][ T519] bus_for_each_drv+0x251/0x2e0 [ 1014.296885][ T519] __device_attach+0x2b8/0x400 [ 1014.303394][ T519] bus_probe_device+0x185/0x260 [ 1014.310003][ T519] device_add+0x7b6/0xb50 [ 1014.315995][ T519] hid_add_device+0x398/0x540 [ 1014.322414][ T519] usbhid_probe+0xe13/0x12a0 [ 1014.328660][ T519] usb_probe_interface+0x668/0xc30 [ 1014.335407][ T519] really_probe+0x26a/0x9e0 [ 1014.341546][ T519] __driver_probe_device+0x18c/0x2f0 [ 1014.348471][ T519] driver_probe_device+0x4f/0x430 [ 1014.355167][ T519] __device_attach_driver+0x2ce/0x530 [ 1014.362269][ T519] bus_for_each_drv+0x251/0x2e0 [ 1014.368863][ T519] __device_attach+0x2b8/0x400 [ 1014.375269][ T519] bus_probe_device+0x185/0x260 [ 1014.381779][ T519] device_add+0x7b6/0xb50 [ 1014.387805][ T519] usb_set_configuration+0x1a87/0x20e0 [ 1014.395212][ T519] usb_generic_driver_probe+0x8d/0x150 [ 1014.402332][ T519] usb_probe_device+0x1c1/0x390 [ 1014.408913][ T519] really_probe+0x26a/0x9e0 [ 1014.415053][ T519] __driver_probe_device+0x18c/0x2f0 [ 1014.421984][ T519] driver_probe_device+0x4f/0x430 [ 1014.428643][ T519] __device_attach_driver+0x2ce/0x530 [ 1014.435648][ T519] bus_for_each_drv+0x251/0x2e0 [ 1014.442143][ T519] __device_attach+0x2b8/0x400 [ 1014.448570][ T519] bus_probe_device+0x185/0x260 [ 1014.455065][ T519] device_add+0x7b6/0xb50 [ 1014.461048][ T519] usb_new_device+0xa39/0x16f0 [ 1014.467548][ T519] hub_event+0x2958/0x4a20 [ 1014.474030][ T519] process_scheduled_works+0xade/0x17b0 [ 1014.481211][ T519] worker_thread+0x8a0/0xda0 [ 1014.487527][ T519] kthread+0x70e/0x8a0 [ 1014.493228][ T519] ret_from_fork+0x3fc/0x770 [ 1014.499454][ T519] ret_from_fork_asm+0x1a/0x30 [ 1014.505945][ T519] INITIAL USE at: [ 1014.509918][ T519] lock_acquire+0x120/0x360 [ 1014.515993][ T519] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1014.522769][ T519] input_inject_event+0xa5/0x340 [ 1014.529321][ T519] kbd_led_trigger_activate+0xbc/0x100 [ 1014.536333][ T519] led_trigger_set+0x52d/0x950 [ 1014.542659][ T519] led_trigger_set_default+0x260/0x2a0 [ 1014.549683][ T519] led_classdev_register_ext+0x73d/0x930 [ 1014.556907][ T519] input_leds_connect+0x517/0x790 [ 1014.563491][ T519] input_register_device+0xd0e/0x1140 [ 1014.570414][ T519] atkbd_connect+0x72e/0xa00 [ 1014.576560][ T519] serio_driver_probe+0x82/0xd0 [ 1014.582968][ T519] really_probe+0x26a/0x9e0 [ 1014.589027][ T519] __driver_probe_device+0x18c/0x2f0 [ 1014.595867][ T519] driver_probe_device+0x4f/0x430 [ 1014.602438][ T519] __driver_attach+0x452/0x700 [ 1014.608767][ T519] bus_for_each_dev+0x230/0x2b0 [ 1014.615169][ T519] serio_handle_event+0x1f9/0x8d0 [ 1014.621755][ T519] process_scheduled_works+0xade/0x17b0 [ 1014.628883][ T519] worker_thread+0x8a0/0xda0 [ 1014.635035][ T519] kthread+0x70e/0x8a0 [ 1014.640658][ T519] ret_from_fork+0x3fc/0x770 [ 1014.646801][ T519] ret_from_fork_asm+0x1a/0x30 [ 1014.653205][ T519] } [ 1014.655699][ T519] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1014.664708][ T519] [ 1014.664708][ T519] the dependencies between the lock to be acquired [ 1014.664717][ T519] and SOFTIRQ-irq-unsafe lock: [ 1014.678224][ T519] -> (tasklist_lock){.+.+}-{3:3} { [ 1014.683528][ T519] HARDIRQ-ON-R at: [ 1014.687673][ T519] lock_acquire+0x120/0x360 [ 1014.694168][ T519] _raw_read_lock+0x36/0x50 [ 1014.700677][ T519] __do_wait+0xde/0x740 [ 1014.706821][ T519] do_wait+0x1f8/0x520 [ 1014.712886][ T519] kernel_wait+0xab/0x170 [ 1014.719216][ T519] call_usermodehelper_exec_work+0xbe/0x230 [ 1014.727170][ T519] process_scheduled_works+0xade/0x17b0 [ 1014.734789][ T519] worker_thread+0x8a0/0xda0 [ 1014.741453][ T519] kthread+0x70e/0x8a0 [ 1014.747508][ T519] ret_from_fork+0x3fc/0x770 [ 1014.754192][ T519] ret_from_fork_asm+0x1a/0x30 [ 1014.760960][ T519] SOFTIRQ-ON-R at: [ 1014.765118][ T519] lock_acquire+0x120/0x360 [ 1014.771640][ T519] _raw_read_lock+0x36/0x50 [ 1014.778139][ T519] __do_wait+0xde/0x740 [ 1014.784297][ T519] do_wait+0x1f8/0x520 [ 1014.790352][ T519] kernel_wait+0xab/0x170 [ 1014.796668][ T519] call_usermodehelper_exec_work+0xbe/0x230 [ 1014.804551][ T519] process_scheduled_works+0xade/0x17b0 [ 1014.812170][ T519] worker_thread+0x8a0/0xda0 [ 1014.818777][ T519] kthread+0x70e/0x8a0 [ 1014.825015][ T519] ret_from_fork+0x3fc/0x770 [ 1014.831589][ T519] ret_from_fork_asm+0x1a/0x30 [ 1014.838345][ T519] INITIAL USE at: [ 1014.842406][ T519] lock_acquire+0x120/0x360 [ 1014.848815][ T519] _raw_write_lock_irq+0xa2/0xf0 [ 1014.855649][ T519] copy_process+0x224f/0x3c00 [ 1014.862220][ T519] kernel_clone+0x21e/0x840 [ 1014.868625][ T519] user_mode_thread+0xdd/0x140 [ 1014.875283][ T519] rest_init+0x23/0x300 [ 1014.881341][ T519] start_kernel+0x3a9/0x410 [ 1014.887750][ T519] x86_64_start_reservations+0x24/0x30 [ 1014.895143][ T519] x86_64_start_kernel+0x143/0x1c0 [ 1014.902186][ T519] common_startup_64+0x13e/0x147 [ 1014.909127][ T519] INITIAL READ USE at: [ 1014.913625][ T519] lock_acquire+0x120/0x360 [ 1014.920480][ T519] _raw_read_lock+0x36/0x50 [ 1014.927385][ T519] __do_wait+0xde/0x740 [ 1014.933890][ T519] do_wait+0x1f8/0x520 [ 1014.940310][ T519] kernel_wait+0xab/0x170 [ 1014.946999][ T519] call_usermodehelper_exec_work+0xbe/0x230 [ 1014.955271][ T519] process_scheduled_works+0xade/0x17b0 [ 1014.963183][ T519] worker_thread+0x8a0/0xda0 [ 1014.970295][ T519] kthread+0x70e/0x8a0 [ 1014.976697][ T519] ret_from_fork+0x3fc/0x770 [ 1014.983628][ T519] ret_from_fork_asm+0x1a/0x30 [ 1014.990748][ T519] } [ 1014.993419][ T519] ... key at: [] tasklist_lock+0x18/0x40 [ 1015.001328][ T519] ... acquired at: [ 1015.005319][ T519] lock_acquire+0x120/0x360 [ 1015.010088][ T519] _raw_read_lock+0x36/0x50 [ 1015.014752][ T519] send_sigurg+0x12b/0x420 [ 1015.019327][ T519] sk_send_sigurg+0x6c/0x2e0 [ 1015.024078][ T519] queue_oob+0x420/0x4f0 [ 1015.028483][ T519] unix_stream_sendmsg+0xc3f/0xdf0 [ 1015.033750][ T519] __sock_sendmsg+0x219/0x270 [ 1015.038582][ T519] ____sys_sendmsg+0x52d/0x830 [ 1015.043518][ T519] ___sys_sendmsg+0x21f/0x2a0 [ 1015.048355][ T519] __sys_sendmmsg+0x28e/0x430 [ 1015.053211][ T519] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1015.058920][ T519] __do_fast_syscall_32+0xb6/0x2b0 [ 1015.064196][ T519] do_fast_syscall_32+0x34/0x80 [ 1015.069211][ T519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1015.075694][ T519] [ 1015.078002][ T519] -> (&f_owner->lock){....}-{3:3} { [ 1015.083291][ T519] INITIAL USE at: [ 1015.087250][ T519] lock_acquire+0x120/0x360 [ 1015.093563][ T519] _raw_write_lock_irq+0xa2/0xf0 [ 1015.100338][ T519] __f_setown+0x67/0x370 [ 1015.106303][ T519] fcntl_dirnotify+0x3fa/0x6a0 [ 1015.112879][ T519] do_fcntl+0x6d0/0x1910 [ 1015.118852][ T519] do_compat_fcntl64+0x477/0x720 [ 1015.125517][ T519] __do_fast_syscall_32+0xb6/0x2b0 [ 1015.132361][ T519] do_fast_syscall_32+0x34/0x80 [ 1015.138954][ T519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1015.147013][ T519] INITIAL READ USE at: [ 1015.151418][ T519] lock_acquire+0x120/0x360 [ 1015.158089][ T519] _raw_read_lock_irqsave+0xaf/0x100 [ 1015.165625][ T519] send_sigio+0x38/0x370 [ 1015.172040][ T519] dnotify_handle_event+0x169/0x440 [ 1015.179488][ T519] fsnotify+0x1814/0x1a80 [ 1015.185977][ T519] fsnotify_access+0x22b/0x2a0 [ 1015.192909][ T519] iterate_dir+0x3ea/0x570 [ 1015.199481][ T519] __ia32_compat_sys_getdents+0x133/0x290 [ 1015.207373][ T519] __do_fast_syscall_32+0xb6/0x2b0 [ 1015.214731][ T519] do_fast_syscall_32+0x34/0x80 [ 1015.221752][ T519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1015.230689][ T519] } [ 1015.233263][ T519] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1015.242196][ T519] ... acquired at: [ 1015.246075][ T519] lock_acquire+0x120/0x360 [ 1015.250750][ T519] _raw_read_lock_irqsave+0xaf/0x100 [ 1015.256193][ T519] send_sigio+0x38/0x370 [ 1015.260596][ T519] kill_fasync+0x24d/0x4d0 [ 1015.265169][ T519] sock_wake_async+0x137/0x160 [ 1015.270178][ T519] sk_wake_async+0x184/0x280 [ 1015.275014][ T519] unix_release_sock+0x768/0xd30 [ 1015.280120][ T519] unix_release+0x92/0xd0 [ 1015.284611][ T519] sock_close+0xc3/0x240 [ 1015.289008][ T519] __fput+0x44c/0xa70 [ 1015.293150][ T519] task_work_run+0x1d4/0x260 [ 1015.297901][ T519] exit_to_user_mode_loop+0xec/0x110 [ 1015.303363][ T519] __do_fast_syscall_32+0x1f4/0x2b0 [ 1015.308843][ T519] do_fast_syscall_32+0x34/0x80 [ 1015.313867][ T519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1015.320357][ T519] [ 1015.322665][ T519] -> (&new->fa_lock){....}-{3:3} { [ 1015.327785][ T519] INITIAL USE at: [ 1015.331661][ T519] lock_acquire+0x120/0x360 [ 1015.337714][ T519] _raw_write_lock_irq+0xa2/0xf0 [ 1015.344231][ T519] fasync_remove_entry+0xf1/0x1c0 [ 1015.350801][ T519] sock_fasync+0x85/0xf0 [ 1015.356597][ T519] __fput+0x8a2/0xa70 [ 1015.362137][ T519] task_work_run+0x1d4/0x260 [ 1015.368276][ T519] exit_to_user_mode_loop+0xec/0x110 [ 1015.375123][ T519] __do_fast_syscall_32+0x1f4/0x2b0 [ 1015.381872][ T519] do_fast_syscall_32+0x34/0x80 [ 1015.388274][ T519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1015.396153][ T519] INITIAL READ USE at: [ 1015.400476][ T519] lock_acquire+0x120/0x360 [ 1015.406968][ T519] _raw_read_lock_irqsave+0xaf/0x100 [ 1015.414255][ T519] kill_fasync+0x199/0x4d0 [ 1015.420704][ T519] sock_wake_async+0x137/0x160 [ 1015.427467][ T519] sk_wake_async+0x184/0x280 [ 1015.434137][ T519] mptcp_destroy_common+0x152/0x320 [ 1015.441434][ T519] mptcp_disconnect+0x23d/0x700 [ 1015.448275][ T519] inet_shutdown+0x1c4/0x390 [ 1015.454937][ T519] __ia32_sys_shutdown+0x13f/0x1a0 [ 1015.462037][ T519] __do_fast_syscall_32+0xb6/0x2b0 [ 1015.469136][ T519] do_fast_syscall_32+0x34/0x80 [ 1015.475966][ T519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1015.484280][ T519] } [ 1015.486767][ T519] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1015.495429][ T519] ... acquired at: [ 1015.499237][ T519] lock_acquire+0x120/0x360 [ 1015.503910][ T519] _raw_read_lock_irqsave+0xaf/0x100 [ 1015.509381][ T519] kill_fasync+0x199/0x4d0 [ 1015.513954][ T519] mousedev_notify_readers+0x6f1/0xc00 [ 1015.519572][ T519] mousedev_event+0x602/0x1320 [ 1015.524495][ T519] input_handle_events_default+0xd1/0x1a0 [ 1015.530375][ T519] input_pass_values+0x288/0x890 [ 1015.535473][ T519] input_event_dispose+0x330/0x6b0 [ 1015.540750][ T519] input_inject_event+0x1dd/0x340 [ 1015.545944][ T519] evdev_write+0x2fc/0x480 [ 1015.550626][ T519] vfs_write+0x27e/0xa90 [ 1015.555036][ T519] ksys_write+0x145/0x250 [ 1015.559527][ T519] __do_fast_syscall_32+0xb6/0x2b0 [ 1015.564803][ T519] do_fast_syscall_32+0x34/0x80 [ 1015.569818][ T519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1015.576305][ T519] [ 1015.578615][ T519] [ 1015.578615][ T519] stack backtrace: [ 1015.584490][ T519] CPU: 1 UID: 0 PID: 519 Comm: syz.4.11515 Not tainted 6.16.0-syzkaller-11852-g479058002c32 #0 PREEMPT(full) [ 1015.584508][ T519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1015.584518][ T519] Call Trace: [ 1015.584526][ T519] [ 1015.584534][ T519] dump_stack_lvl+0x189/0x250 [ 1015.584554][ T519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1015.584570][ T519] ? __pfx__printk+0x10/0x10 [ 1015.584596][ T519] validate_chain+0x1f05/0x2140 [ 1015.584618][ T519] __lock_acquire+0xab9/0xd20 [ 1015.584639][ T519] ? kill_fasync+0x199/0x4d0 [ 1015.584655][ T519] lock_acquire+0x120/0x360 [ 1015.584673][ T519] ? kill_fasync+0x199/0x4d0 [ 1015.584692][ T519] _raw_read_lock_irqsave+0xaf/0x100 [ 1015.584709][ T519] ? kill_fasync+0x199/0x4d0 [ 1015.584728][ T519] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1015.584746][ T519] kill_fasync+0x199/0x4d0 [ 1015.584761][ T519] ? kill_fasync+0x53/0x4d0 [ 1015.584777][ T519] mousedev_notify_readers+0x6f1/0xc00 [ 1015.584796][ T519] ? mousedev_notify_readers+0x2c/0xc00 [ 1015.584814][ T519] mousedev_event+0x602/0x1320 [ 1015.584831][ T519] input_handle_events_default+0xd1/0x1a0 [ 1015.584853][ T519] ? input_pass_values+0x8d/0x890 [ 1015.584871][ T519] input_pass_values+0x288/0x890 [ 1015.584890][ T519] ? input_handle_event+0x70c/0xf30 [ 1015.584904][ T519] input_event_dispose+0x330/0x6b0 [ 1015.584919][ T519] input_inject_event+0x1dd/0x340 [ 1015.584932][ T519] ? input_inject_event+0xb6/0x340 [ 1015.584946][ T519] evdev_write+0x2fc/0x480 [ 1015.584965][ T519] ? __pfx_evdev_write+0x10/0x10 [ 1015.584982][ T519] ? bpf_lsm_file_permission+0x9/0x20 [ 1015.585003][ T519] ? security_file_permission+0x75/0x290 [ 1015.585020][ T519] ? rw_verify_area+0x255/0x4d0 [ 1015.585037][ T519] ? __lock_acquire+0xab9/0xd20 [ 1015.585056][ T519] ? __pfx_evdev_write+0x10/0x10 [ 1015.585073][ T519] vfs_write+0x27e/0xa90 [ 1015.585093][ T519] ? __pfx_vfs_write+0x10/0x10 [ 1015.585110][ T519] ? __fget_files+0x2a/0x420 [ 1015.585135][ T519] ? __fget_files+0x2a/0x420 [ 1015.585154][ T519] ? __fget_files+0x3a0/0x420 [ 1015.585173][ T519] ? __fget_files+0x2a/0x420 [ 1015.585195][ T519] ksys_write+0x145/0x250 [ 1015.585213][ T519] ? __pfx_ksys_write+0x10/0x10 [ 1015.585232][ T519] ? lockdep_hardirqs_on+0x9c/0x150 [ 1015.585249][ T519] __do_fast_syscall_32+0xb6/0x2b0 [ 1015.585273][ T519] do_fast_syscall_32+0x34/0x80 [ 1015.585291][ T519] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1015.585319][ T519] RIP: 0023:0xf7f68539 [ 1015.585333][ T519] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1015.585346][ T519] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1015.585362][ T519] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1015.585372][ T519] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 1015.585381][ T519] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1015.585391][ T519] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1015.585403][ T519] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1015.585417][ T519] [ 1015.895822][ C1] vkms_vblank_simulate: vblank timer overrun [ 1015.910227][T31620] usb 7-1: failed to receive control message: -110 [ 1015.916988][T31620] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 1016.039529][T31620] usb 7-1: USB disconnect, device number 77 [ 1016.046555][T31620] ch341 7-1:0.0: device disconnected