last executing test programs: 18m37.760148693s ago: executing program 4 (id=11346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0xfffffffffffffee6, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x64014044}, 0x20000004) 18m37.617253115s ago: executing program 4 (id=11350): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) 18m37.471432373s ago: executing program 4 (id=11354): r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @loopback, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@dontfrag={{0x10, 0x29, 0x3e, 0x3}}], 0x10}}], 0x2, 0x80) 18m37.360870262s ago: executing program 4 (id=11357): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2001400, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 18m37.192642641s ago: executing program 4 (id=11362): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) 18m36.737564014s ago: executing program 4 (id=11371): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x8000000, 0x2, 0x1, 0x0, 0x0, 0x4}, 0x20) 18m36.418391169s ago: executing program 32 (id=11371): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x8000000, 0x2, 0x1, 0x0, 0x0, 0x4}, 0x20) 11m12.431162833s ago: executing program 3 (id=16870): r0 = socket$rxrpc(0x21, 0x2, 0x2) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) bind$rxrpc(r1, &(0x7f00000004c0)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @broadcast}}, 0x24) 11m12.157734461s ago: executing program 3 (id=16874): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) 11m11.898944547s ago: executing program 3 (id=16877): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f00003b8000/0x4000)=nil) 11m11.493688713s ago: executing program 3 (id=16883): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000080)='\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x204) 11m10.504164508s ago: executing program 3 (id=16903): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x1000000001b8, 0x2}) fcntl$lock(r0, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x9}) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x2}) 11m10.282285613s ago: executing program 3 (id=16906): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0xfffffffffffff000, 0x1000}) 11m9.787079591s ago: executing program 33 (id=16906): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0xfffffffffffff000, 0x1000}) 4m8.567627785s ago: executing program 0 (id=21733): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x5, 0xfc, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) 4m8.468145756s ago: executing program 0 (id=21734): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x1000001, 0x38011, r2, 0x2c9ab000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baa00fe00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400000080ffffb70200001700000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b705000008000000850000006900000095"], &(0x7f0000000240)='GPL\x00', 0x9, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m7.758165945s ago: executing program 0 (id=21746): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 4m7.622640797s ago: executing program 0 (id=21740): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m6.655991015s ago: executing program 0 (id=21751): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x119) openat2$dir(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x410582, 0x3b, 0x15}, 0x18) mkdirat(r0, &(0x7f00000003c0)='./bus\x00', 0x0) renameat2(r0, &(0x7f0000000300)='./bus\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x4) 4m6.272046947s ago: executing program 0 (id=21755): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4m5.793069294s ago: executing program 34 (id=21755): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 21.320929997s ago: executing program 7 (id=23847): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @time={0x80, 0x1}, 0x7, {0x2, 0xbb}, 0x3d, 0x2, 0x6}) 20.35431508s ago: executing program 7 (id=23857): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x191a, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x1, 0x11cb}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 19.284190536s ago: executing program 7 (id=23868): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 19.14997981s ago: executing program 7 (id=23870): set_mempolicy(0x3, &(0x7f00000002c0)=0x1ff, 0x5) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 19.005745383s ago: executing program 7 (id=23872): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0xd0f785e2fc518d55, "00004fbe"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "b775e7cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f0000000040)) 15.807670506s ago: executing program 7 (id=23894): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r0, 0x0, 0x0) 5.173812531s ago: executing program 2 (id=23969): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendmsg$inet6(r0, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e20, 0x5, @private0, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000001140)='`', 0x1}], 0x1}, 0x4044801) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) listen(r1, 0x6) 4.230482315s ago: executing program 2 (id=23970): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) 3.712580971s ago: executing program 2 (id=23975): r0 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x71) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) 3.536174865s ago: executing program 2 (id=23987): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000040)="062586c0d44dc999855a9d3cefd7768dfec2125480724340518100"/44, 0x2c}, {&(0x7f0000000400)="9700", 0x2}, {&(0x7f0000000100)="f466", 0x2}], 0x3) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.379327886s ago: executing program 2 (id=23979): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = epoll_create1(0x80000) r1 = socket$key(0xf, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x20000004}) epoll_pwait(r0, &(0x7f0000002500)=[{}], 0x1, 0x30, 0x0, 0x0) 2.87073243s ago: executing program 5 (id=23988): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x4, 0x70}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000008802"]) 2.558952748s ago: executing program 5 (id=23991): r0 = epoll_create1(0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x90000001}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) 2.405637338s ago: executing program 2 (id=23993): r0 = syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x80, 0x1c, {0x4, 0x7, 0xf41a, 0x9, 0xfff3, 0x4, 0x7, 0x7, 0xfff, 0x200, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.054966231s ago: executing program 5 (id=23996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1.893092515s ago: executing program 5 (id=23998): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x121400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000049"]) 1.514227545s ago: executing program 5 (id=24000): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) 1.253733487s ago: executing program 1 (id=24002): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x6c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="1400010000400000000000000000000000000000140002"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.091720257s ago: executing program 1 (id=24003): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000003040)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 865.739558ms ago: executing program 6 (id=24005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 715.127947ms ago: executing program 35 (id=23894): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r0, 0x0, 0x0) 703.143543ms ago: executing program 6 (id=24007): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) 684.142727ms ago: executing program 1 (id=24008): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0) 640.88035ms ago: executing program 5 (id=24009): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 532.87522ms ago: executing program 1 (id=24010): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 463.244324ms ago: executing program 6 (id=24011): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r0 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 372.061664ms ago: executing program 6 (id=24012): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) 367.475473ms ago: executing program 1 (id=24013): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x20) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000180)=0x1) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)=0xe3) write$dsp(r0, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 160.650236ms ago: executing program 6 (id=24014): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000180)=[0xfb], &(0x7f0000000400)=[r3, r3], &(0x7f0000000340)}) 823.428µs ago: executing program 1 (id=24015): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 6 (id=24016): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000240)="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", 0x1000}], 0x2}}], 0x1, 0x4000010) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) kernel console output (not intermixed with test programs): 1: USB disconnect, device number 57 [ 1700.035363][T22307] usb 6-1: GET_CAPABILITIES returned 0 [ 1700.041624][T22307] usbtmc 6-1:16.0: can't read capabilities [ 1700.097107][T20840] Bluetooth: hci1: command tx timeout [ 1700.261456][T11488] usb 6-1: USB disconnect, device number 106 [ 1701.156875][T22314] usb 6-1: new full-speed USB device number 107 using dummy_hcd [ 1701.318550][T22314] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.349763][T22314] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1701.385317][T22314] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1701.409153][T22314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.433627][T22314] usb 6-1: Product: syz [ 1701.447245][T22314] usb 6-1: Manufacturer: syz [ 1701.465772][T22314] usb 6-1: SerialNumber: syz [ 1701.739756][T22314] usb 6-1: 0:2 : does not exist [ 1701.770803][T22314] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1701.888725][T22314] usb 6-1: USB disconnect, device number 107 [ 1701.922737][T24636] netlink: 20 bytes leftover after parsing attributes in process `syz.6.22296'. [ 1701.991053][T24637] netlink: 20 bytes leftover after parsing attributes in process `syz.6.22296'. [ 1702.000621][T20264] udevd[20264]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1702.176903][T20840] Bluetooth: hci1: command tx timeout [ 1703.555489][T24678] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1704.404183][T24699] netlink: 44 bytes leftover after parsing attributes in process `syz.7.22323'. [ 1704.774480][T24709] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22329'. [ 1705.128216][T24682] netlink: 24 bytes leftover after parsing attributes in process `syz.5.22316'. [ 1705.228652][T24723] loop8: detected capacity change from 0 to 7 [ 1705.238985][T20264] Dev loop8: unable to read RDB block 7 [ 1705.248987][T24724] sctp: [Deprecated]: syz.7.22334 (pid 24724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1705.248987][T24724] Use struct sctp_sack_info instead [ 1705.256170][T20264] loop8: AHDI p1 p2 p3 p4 [ 1705.300002][T20264] loop8: partition table partially beyond EOD, truncated [ 1705.331489][T20264] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1705.359008][T20264] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1705.369803][T24726] input: syz0 as /devices/virtual/input/input191 [ 1705.385343][T20264] loop8: p3 size 4160749567 extends beyond EOD, truncated [ 1705.476081][T24723] Dev loop8: unable to read RDB block 7 [ 1705.501715][T24723] loop8: AHDI p1 p2 p3 p4 [ 1705.506226][T24723] loop8: partition table partially beyond EOD, truncated [ 1705.553390][T24723] loop8: p1 start 1601398130 is beyond EOD, truncated [ 1705.588317][T24730] loop6: detected capacity change from 0 to 524287999 [ 1705.606849][T24723] loop8: p2 start 1702059890 is beyond EOD, truncated [ 1705.634159][T24723] loop8: p3 size 4160749567 extends beyond EOD, truncated [ 1705.888606][ T30] kauditd_printk_skb: 164 callbacks suppressed [ 1705.888626][ T30] audit: type=1326 audit(1750145202.614:7871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24734 comm="syz.5.22338" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62539 code=0x0 [ 1705.927693][T20264] udevd[20264]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 1706.015836][T20264] udevd[20264]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 1706.609341][T24750] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 1706.609341][T24750] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 1706.609341][T24750] ~^>Ƥr&Dq.;쀯<2AU,1) r0 ' [ 1707.106798][T22314] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1707.344785][T22314] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1707.358994][T22314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1707.373734][T22314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1707.387553][T22314] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1707.401412][T22314] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1707.412945][T22314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.434952][T22314] usb 6-1: config 0 descriptor?? [ 1707.446444][T24752] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1707.946918][T22314] plantronics 0003:047F:FFFF.011D: reserved main item tag 0xd [ 1707.967932][T22314] plantronics 0003:047F:FFFF.011D: No inputs registered, leaving [ 1708.021722][T24770] loop2: detected capacity change from 0 to 7 [ 1708.037976][T22314] plantronics 0003:047F:FFFF.011D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1708.077512][T24770] Dev loop2: unable to read RDB block 7 [ 1708.107908][T24770] loop2: unable to read partition table [ 1708.159850][T24770] loop2: partition table beyond EOD, truncated [ 1708.172852][T24770] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1708.240623][ T8100] usb 6-1: USB disconnect, device number 108 [ 1708.292931][T24771] fido_id[24771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1708.583828][T24783] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.22356'. [ 1709.172211][ T30] audit: type=1326 audit(1750145205.904:7872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24790 comm="syz.6.22359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1709.237883][ T30] audit: type=1326 audit(1750145205.904:7873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24790 comm="syz.6.22359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1709.301945][ T30] audit: type=1326 audit(1750145205.904:7874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24790 comm="syz.6.22359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1709.448462][ T30] audit: type=1326 audit(1750145205.904:7875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24790 comm="syz.6.22359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1709.607473][ T30] audit: type=1326 audit(1750145205.904:7876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24790 comm="syz.6.22359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1709.695507][ T30] audit: type=1326 audit(1750145205.904:7877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24790 comm="syz.6.22359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1709.766839][ T30] audit: type=1326 audit(1750145205.904:7878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24790 comm="syz.6.22359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1709.826754][ T30] audit: type=1326 audit(1750145205.904:7879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24790 comm="syz.6.22359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1709.886800][ T30] audit: type=1326 audit(1750145205.904:7880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24790 comm="syz.6.22359" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1709.917699][T22314] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1710.097737][T22314] usb 3-1: Using ep0 maxpacket: 8 [ 1710.104587][T22314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1710.116263][T22314] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1710.139547][T22314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.165343][T22314] usb 3-1: config 0 descriptor?? [ 1710.399778][T22314] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1710.751458][T24834] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22378'. [ 1710.845468][T22314] usb 3-1: USB disconnect, device number 52 [ 1712.498275][ T30] kauditd_printk_skb: 103 callbacks suppressed [ 1712.498294][ T30] audit: type=1326 audit(1750145209.224:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24842 comm="syz.1.22381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1712.654525][ T30] audit: type=1326 audit(1750145209.224:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24842 comm="syz.1.22381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1712.737443][ T30] audit: type=1326 audit(1750145209.224:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24842 comm="syz.1.22381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1712.836189][ T30] audit: type=1326 audit(1750145209.224:7987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24842 comm="syz.1.22381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1712.916054][ T30] audit: type=1326 audit(1750145209.224:7988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24842 comm="syz.1.22381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1713.051790][ T30] audit: type=1326 audit(1750145209.224:7989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24842 comm="syz.1.22381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1713.174184][ T30] audit: type=1326 audit(1750145209.224:7990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24842 comm="syz.1.22381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1713.276820][ T30] audit: type=1326 audit(1750145209.224:7991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24842 comm="syz.1.22381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1713.366387][ T30] audit: type=1326 audit(1750145209.224:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24842 comm="syz.1.22381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1713.465960][ T30] audit: type=1326 audit(1750145209.224:7993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24842 comm="syz.1.22381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1713.607222][T11488] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1713.629793][T24882] input: syz1 as /devices/virtual/input/input193 [ 1713.800051][T11488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.819559][T11488] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1713.845165][T11488] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1713.862159][T11488] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1713.872734][T11488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.887447][T11488] usb 6-1: config 0 descriptor?? [ 1714.206162][T24894] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.22405'. [ 1714.333903][T11488] plantronics 0003:047F:FFFF.011E: No inputs registered, leaving [ 1714.377577][T11488] plantronics 0003:047F:FFFF.011E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1714.601428][T11488] usb 6-1: USB disconnect, device number 109 [ 1715.091527][T22316] hid-generic 0000:0000:0000.011F: unknown main item tag 0x0 [ 1715.127420][T22316] hid-generic 0000:0000:0000.011F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1716.523118][T24945] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 1716.567187][T24945] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 1716.688976][T24949] loop2: detected capacity change from 0 to 7 [ 1716.699589][T24949] Dev loop2: unable to read RDB block 7 [ 1716.706832][T24949] loop2: unable to read partition table [ 1716.712856][T24949] loop2: partition table beyond EOD, truncated [ 1716.719889][T24949] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1717.034703][T24958] netlink: 28 bytes leftover after parsing attributes in process `syz.5.22432'. [ 1717.044342][T24958] netlink: 'syz.5.22432': attribute type 7 has an invalid length. [ 1717.053386][T24958] netlink: 'syz.5.22432': attribute type 8 has an invalid length. [ 1717.062324][T24958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22432'. [ 1717.144480][T24960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1717.827972][T24979] input: syz1 as /devices/virtual/input/input194 [ 1718.409482][T25000] tun0: tun_chr_ioctl cmd 1074025675 [ 1718.431998][T25000] tun0: persist enabled [ 1718.453112][T25000] tun0: tun_chr_ioctl cmd 1074025675 [ 1718.483270][T25000] tun0: persist disabled [ 1719.587744][T22316] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1719.783997][T22316] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1719.799969][T22316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1719.815359][T22316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1719.826054][T22316] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1719.845659][T22316] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1719.862987][T22316] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1719.875480][T22316] usb 3-1: Manufacturer: syz [ 1719.890317][T22316] usb 3-1: config 0 descriptor?? [ 1720.237359][T22316] rc_core: IR keymap rc-hauppauge not found [ 1720.248585][T22316] Registered IR keymap rc-empty [ 1720.260347][T22316] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1720.287121][T22316] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1720.341318][T22316] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1720.393099][T22316] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input195 [ 1720.435011][T22316] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1720.477855][T22316] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1720.521524][T22316] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1720.557465][T22316] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1720.607665][T22316] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1720.638030][T22316] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1720.664717][T22316] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1720.706936][T22316] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1720.757906][T22316] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1720.786976][T22316] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1720.819879][T22316] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1720.839117][T22316] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1720.865111][T22316] usb 3-1: USB disconnect, device number 53 [ 1721.469071][T25079] loop8: detected capacity change from 0 to 7 [ 1721.490587][T25079] Dev loop8: unable to read RDB block 7 [ 1721.496257][T25079] loop8: unable to read partition table [ 1721.526615][T25079] loop8: partition table beyond EOD, truncated [ 1721.540120][T25079] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 1721.540120][T25079] ) failed (rc=-5) [ 1721.817657][T22316] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1721.984629][T22316] usb 3-1: Using ep0 maxpacket: 8 [ 1721.996603][T22316] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1722.019072][T22316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.066519][T22316] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1722.095037][T22316] pvrusb2: ********** [ 1722.116828][T22316] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1722.158168][T22316] pvrusb2: Important functionality might not be entirely working. [ 1722.190301][T22316] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1722.223709][T22316] pvrusb2: ********** [ 1722.264645][ T2347] pvrusb2: Invalid write control endpoint [ 1722.479364][ T2347] pvrusb2: Invalid write control endpoint [ 1722.507069][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1722.516426][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1722.568738][T22316] usb 3-1: USB disconnect, device number 54 [ 1722.582839][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1722.610993][ T2347] pvrusb2: Device being rendered inoperable [ 1722.650962][ T2347] cx25840 3-0044: Unable to detect h/w, assuming cx23887 [ 1722.692620][ T2347] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1722.731749][ T2347] pvrusb2: Attached sub-driver cx25840 [ 1722.750730][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1722.777239][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1723.266854][T22307] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1723.431835][T22307] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.481549][T22307] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1723.500120][T22307] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1723.511241][T22307] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1723.519694][T22307] usb 6-1: SerialNumber: syz [ 1723.801794][T22307] usb 6-1: 0:2 : does not exist [ 1723.926828][T22307] usb 6-1: USB disconnect, device number 110 [ 1724.040876][T20264] udevd[20264]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1725.451077][ T30] kauditd_printk_skb: 108 callbacks suppressed [ 1725.451095][ T30] audit: type=1326 audit(1750145222.184:8102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25210 comm="syz.7.22525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1725.536611][ T30] audit: type=1326 audit(1750145222.234:8103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25210 comm="syz.7.22525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1725.637443][ T30] audit: type=1326 audit(1750145222.234:8104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25210 comm="syz.7.22525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1725.660969][ T30] audit: type=1326 audit(1750145222.234:8105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25210 comm="syz.7.22525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1725.722989][ T30] audit: type=1326 audit(1750145222.234:8106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25210 comm="syz.7.22525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1725.745284][ T8100] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1725.758112][ T30] audit: type=1326 audit(1750145222.234:8107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25210 comm="syz.7.22525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1725.789897][ T30] audit: type=1326 audit(1750145222.234:8108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25210 comm="syz.7.22525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1725.824978][ T30] audit: type=1326 audit(1750145222.244:8109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25210 comm="syz.7.22525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1725.852518][ T30] audit: type=1326 audit(1750145222.244:8110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25210 comm="syz.7.22525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1725.885815][ T30] audit: type=1326 audit(1750145222.244:8111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25210 comm="syz.7.22525" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1725.897099][ T8100] usb 3-1: Using ep0 maxpacket: 16 [ 1725.952574][ T8100] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1725.962846][ T8100] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1725.977147][T22316] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1726.055623][ T8100] usb 3-1: Product: syz [ 1726.071657][ T8100] usb 3-1: Manufacturer: syz [ 1726.087426][ T8100] usb 3-1: SerialNumber: syz [ 1726.116525][ T8100] usb 3-1: config 0 descriptor?? [ 1726.132263][T22316] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1726.143225][T22316] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1726.163528][T25222] batadv_slave_1: entered promiscuous mode [ 1726.179299][T22316] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1726.188766][T22316] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1726.192730][T25221] batadv_slave_1: left promiscuous mode [ 1726.248768][T22316] usb 7-1: Product: syz [ 1726.264317][T22316] usb 7-1: Manufacturer: syz [ 1726.276805][T22316] usb 7-1: SerialNumber: syz [ 1726.293452][T22316] usb 7-1: config 0 descriptor?? [ 1726.316414][T22316] usb 7-1: selecting invalid altsetting 0 [ 1726.593976][T22316] usb 7-1: USB disconnect, device number 58 [ 1727.051633][T25237] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1727.393370][T22314] usb 3-1: USB disconnect, device number 55 [ 1727.778025][T22316] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1727.957787][T22316] usb 7-1: Using ep0 maxpacket: 16 [ 1727.973519][T22316] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1727.997128][T22316] usb 7-1: config 0 has no interface number 0 [ 1728.021170][T22316] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1728.042113][T22316] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1728.073778][T22316] usb 7-1: config 0 interface 41 has no altsetting 0 [ 1728.094473][T22316] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1728.117383][T22316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.141050][T22316] usb 7-1: Product: syz [ 1728.145288][T22316] usb 7-1: Manufacturer: syz [ 1728.166507][T22316] usb 7-1: SerialNumber: syz [ 1728.227705][T22316] usb 7-1: config 0 descriptor?? [ 1728.234325][T25253] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1728.257671][T25253] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1728.487690][T25253] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1728.516943][T25253] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1728.943417][T22316] Error reading MAC address [ 1728.960769][T25253] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1728.978615][T25253] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1729.206266][T22316] sr9700 7-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1729.244745][T22316] usb 7-1: USB disconnect, device number 59 [ 1730.095883][T25290] input: syz1 as /devices/virtual/input/input196 [ 1730.262507][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.269319][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.755429][T25299] tun0: tun_chr_ioctl cmd 1074025675 [ 1730.766174][T25299] tun0: persist enabled [ 1730.772399][T25299] tun0: tun_chr_ioctl cmd 1074025675 [ 1730.845884][T25299] tun0: persist enabled [ 1731.111874][ T30] kauditd_printk_skb: 275 callbacks suppressed [ 1731.111892][ T30] audit: type=1326 audit(1750145227.844:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25287 comm="syz.2.22559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1731.149088][T25308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22567'. [ 1731.226930][ T30] audit: type=1326 audit(1750145227.874:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25287 comm="syz.2.22559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1731.297418][ T30] audit: type=1326 audit(1750145227.874:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25287 comm="syz.2.22559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1731.364901][ T30] audit: type=1326 audit(1750145227.874:8390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25287 comm="syz.2.22559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1731.408763][ T30] audit: type=1326 audit(1750145227.874:8391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25287 comm="syz.2.22559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1731.443113][ T30] audit: type=1326 audit(1750145227.874:8392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25287 comm="syz.2.22559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1731.476374][ T30] audit: type=1326 audit(1750145227.874:8393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25287 comm="syz.2.22559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1731.501384][T25315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22570'. [ 1731.518935][T25315] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22570'. [ 1731.541853][ T30] audit: type=1326 audit(1750145227.894:8394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25287 comm="syz.2.22559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1731.575734][ T30] audit: type=1326 audit(1750145227.894:8395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25287 comm="syz.2.22559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1731.653194][ T30] audit: type=1326 audit(1750145227.894:8396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25287 comm="syz.2.22559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1731.886103][T25322] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22572'. [ 1733.274815][T22316] hid-generic 0000:0003:0000.0120: unknown main item tag 0x0 [ 1733.317353][T22316] hid-generic 0000:0003:0000.0120: unknown main item tag 0x0 [ 1733.343381][T22316] hid-generic 0000:0003:0000.0120: hidraw0: HID v4000.00 Device [syz0] on syz1 [ 1734.496165][T25399] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22605'. [ 1735.197079][ T8100] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1735.275468][T25414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22612'. [ 1735.348404][ T8100] usb 3-1: Using ep0 maxpacket: 8 [ 1735.362951][ T8100] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1735.374164][ T8100] usb 3-1: config 0 has no interface number 0 [ 1735.385427][ T8100] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1735.400730][ T8100] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1735.412159][ T8100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.441073][ T8100] usb 3-1: config 0 descriptor?? [ 1735.481444][ T8100] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1736.753140][T20443] usb 3-1: USB disconnect, device number 56 [ 1736.887443][T22316] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1737.036837][T22316] usb 6-1: Using ep0 maxpacket: 8 [ 1737.047406][T22316] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1737.055636][T22316] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1737.065656][T22316] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1737.077667][T22316] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1737.088275][T22316] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1737.101320][T22316] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1737.111109][T22316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.333441][T22316] usb 6-1: usb_control_msg returned -32 [ 1737.339925][T22316] usbtmc 6-1:16.0: can't read capabilities [ 1737.461392][T25445] loop6: detected capacity change from 0 to 524287999 [ 1737.568332][T25447] input: syz0 as /devices/virtual/input/input197 [ 1737.759279][T25448] usbtmc 6-1:16.0: usb_bulk_msg returned -71 [ 1737.843051][T25452] syzkaller1: entered promiscuous mode [ 1737.851134][T25452] syzkaller1: entered allmulticast mode [ 1737.948181][T22316] usb 6-1: USB disconnect, device number 111 [ 1738.264301][T25467] team0: entered promiscuous mode [ 1738.271423][T25467] team_slave_0: entered promiscuous mode [ 1738.283000][T25467] team_slave_1: entered promiscuous mode [ 1738.291270][T25467] team0: Cannot enslave team device to itself [ 1739.718007][T25495] loop8: detected capacity change from 0 to 7 [ 1739.735626][T25495] Dev loop8: unable to read RDB block 7 [ 1739.781677][T25495] loop8: AHDI p1 p3 p4 [ 1739.785910][T25495] loop8: partition table partially beyond EOD, truncated [ 1739.836899][T25495] loop8: p1 start 975770946 is beyond EOD, truncated [ 1739.844144][T25495] loop8: p3 start 6514546 is beyond EOD, truncated [ 1740.649896][T22316] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1740.827783][T22316] usb 6-1: Using ep0 maxpacket: 8 [ 1740.836425][T22316] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1740.844358][T22316] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1740.878151][T22316] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1740.914210][T22316] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1740.935687][T22316] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1740.968876][T22316] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1740.987556][T22316] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1741.030071][T22316] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1741.068064][T22316] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1741.117040][T22316] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1741.160101][T22316] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1741.176804][T22316] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1741.203989][T22316] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1741.262853][T22316] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1741.297121][T22316] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1741.343089][T22316] usb 6-1: string descriptor 0 read error: -22 [ 1741.363930][T22316] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1741.404616][T22316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.444937][T25541] netlink: 'syz.7.22667': attribute type 10 has an invalid length. [ 1741.536984][T22316] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1741.878103][T25554] tipc: Enabled bearer , priority 20 [ 1741.880662][T22314] usb 6-1: USB disconnect, device number 112 [ 1743.617589][T25605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22695'. [ 1746.087439][T22316] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1746.249746][T22316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1746.261444][T22316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1746.272392][T22316] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1746.281748][T22316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.294219][T22316] usb 3-1: config 0 descriptor?? [ 1746.520149][T22316] usbhid 3-1:0.0: can't add hid device: -71 [ 1746.526247][T22316] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1746.550491][T22316] usb 3-1: USB disconnect, device number 57 [ 1747.614477][T25696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22731'. [ 1747.636872][T25696] netlink: 'syz.2.22731': attribute type 21 has an invalid length. [ 1747.815748][T25705] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1748.197206][T20443] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1748.398378][T20443] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.419090][T20443] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1748.443064][T20443] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1748.452796][T20443] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1748.473865][T20443] usb 7-1: SerialNumber: syz [ 1748.703144][T20443] usb 7-1: 0:2 : does not exist [ 1748.741689][T20443] usb 7-1: USB disconnect, device number 60 [ 1750.007366][T20443] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 1750.168867][T20443] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1750.181869][T20443] usb 3-1: config 0 has no interface number 0 [ 1750.188150][T20443] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1750.199848][T20443] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1750.210829][T20443] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1750.219913][T20443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.231011][T20443] usb 3-1: config 0 descriptor?? [ 1750.237512][T25755] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1750.253603][T20443] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1750.499414][T25762] netlink: 35 bytes leftover after parsing attributes in process `syz.6.22760'. [ 1750.509182][T25762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22760'. [ 1750.523093][T22316] usb 3-1: USB disconnect, device number 58 [ 1750.529172][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1750.616266][T25764] input: syz1 as /devices/virtual/input/input198 [ 1751.338411][T25786] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:2 [ 1751.899583][T22314] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1751.946468][T25807] vxcan1: tx address claim with different name [ 1752.083568][T22314] usb 6-1: Using ep0 maxpacket: 8 [ 1752.089698][T25813] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22782'. [ 1752.110295][T22314] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1752.132059][T22314] usb 6-1: config 0 has no interface number 0 [ 1752.140097][T25813] netlink: 452 bytes leftover after parsing attributes in process `syz.7.22782'. [ 1752.149581][T22314] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1752.161626][T25813] netlink: 452 bytes leftover after parsing attributes in process `syz.7.22782'. [ 1752.171364][T22314] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1752.183358][T22314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.202104][T22314] usb 6-1: config 0 descriptor?? [ 1752.222250][T22314] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1752.726877][T20443] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1752.876978][T20443] usb 7-1: Using ep0 maxpacket: 32 [ 1752.888275][T20443] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1752.896134][ T30] kauditd_printk_skb: 393 callbacks suppressed [ 1752.896173][ T30] audit: type=1326 audit(1750145249.624:8790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25810 comm="syz.2.22781" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7fc00000 [ 1752.896390][T20443] usb 7-1: config 0 has no interface number 0 [ 1752.938661][T20443] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1752.951140][T20443] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1752.960953][T20443] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1752.994969][T20443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.017170][T20443] usb 7-1: Product: syz [ 1753.021435][T20443] usb 7-1: Manufacturer: syz [ 1753.026054][T20443] usb 7-1: SerialNumber: syz [ 1753.035518][T20443] usb 7-1: config 0 descriptor?? [ 1753.460172][ T8100] usb 6-1: USB disconnect, device number 113 [ 1753.660446][T20443] appletouch 7-1:0.85: Geyser mode initialized. [ 1753.670332][T20443] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input199 [ 1753.948668][T20443] usb 7-1: USB disconnect, device number 61 [ 1753.985824][T20443] appletouch 7-1:0.85: input: appletouch disconnected [ 1754.173842][T25843] input: syz1 as /devices/virtual/input/input200 [ 1754.379668][T25846] sctp: [Deprecated]: syz.2.22796 (pid 25846) Use of int in maxseg socket option. [ 1754.379668][T25846] Use struct sctp_assoc_value instead [ 1755.717131][T22314] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 1755.900935][T22314] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.936940][T22314] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1755.963014][T22314] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1755.993026][T22314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1756.082909][T22314] usb 6-1: SerialNumber: syz [ 1756.370904][T22314] usb 6-1: 0:2 : does not exist [ 1756.485175][T25898] netlink: 'syz.7.22813': attribute type 1 has an invalid length. [ 1756.510966][T22314] usb 6-1: USB disconnect, device number 114 [ 1756.603571][T20264] udevd[20264]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1759.339765][ T30] audit: type=1326 audit(1750145256.074:8791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.2.22836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1759.415842][ T30] audit: type=1326 audit(1750145256.074:8792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.2.22836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1759.497383][ T30] audit: type=1326 audit(1750145256.074:8793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.2.22836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1759.516362][T25987] input: syz1 as /devices/virtual/input/input201 [ 1759.593173][ T30] audit: type=1326 audit(1750145256.074:8794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.2.22836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1759.597457][T25987] input: failed to attach handler leds to device input201, error: -6 [ 1759.733239][ T30] audit: type=1326 audit(1750145256.074:8795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.2.22836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1759.849721][ T30] audit: type=1326 audit(1750145256.074:8796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.2.22836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1759.965790][ T30] audit: type=1326 audit(1750145256.074:8797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.2.22836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1760.016720][ T30] audit: type=1326 audit(1750145256.074:8798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.2.22836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1760.101909][ T30] audit: type=1326 audit(1750145256.074:8799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.2.22836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1760.132587][ T30] audit: type=1326 audit(1750145256.074:8800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25946 comm="syz.2.22836" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1760.187970][T25996] netlink: 788 bytes leftover after parsing attributes in process `syz.5.22855'. [ 1760.752750][T26011] netlink: 'syz.5.22862': attribute type 9 has an invalid length. [ 1760.808790][T26015] netlink: 'syz.5.22862': attribute type 9 has an invalid length. [ 1761.087198][T26021] netlink: 156 bytes leftover after parsing attributes in process `syz.5.22866'. [ 1762.191231][T26052] overlayfs: missing 'lowerdir' [ 1763.067385][T20443] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1763.248569][T20443] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1763.282461][T20443] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1763.297239][T20443] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.309469][T20443] usb 7-1: Product: syz [ 1763.313681][T20443] usb 7-1: Manufacturer: syz [ 1763.341154][T20443] usb 7-1: SerialNumber: syz [ 1764.217079][ T8100] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1764.276974][T11488] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1764.367191][ T8100] usb 3-1: Using ep0 maxpacket: 8 [ 1764.375823][ T8100] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.386332][ T8100] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1764.395514][ T8100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.404148][T20443] cdc_ncm 7-1:1.0: bind() failure [ 1764.416243][ T8100] usb 3-1: config 0 descriptor?? [ 1764.423901][T20443] cdc_ncm 7-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1764.432491][T11488] usb 6-1: Using ep0 maxpacket: 8 [ 1764.438650][T20443] cdc_mbim 7-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1764.449435][ T8100] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1764.459363][T11488] usb 6-1: config 0 has no interfaces? [ 1764.465022][T20443] usbtest 7-1:1.1: probe with driver usbtest failed with error -71 [ 1764.477983][T20443] usb 7-1: USB disconnect, device number 62 [ 1764.486460][T11488] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1764.501248][T11488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.512894][T11488] usb 6-1: Product: syz [ 1764.518201][T11488] usb 6-1: Manufacturer: syz [ 1764.522953][T11488] usb 6-1: SerialNumber: syz [ 1764.541301][T11488] usb 6-1: config 0 descriptor?? [ 1764.776066][T20443] usb 6-1: USB disconnect, device number 115 [ 1765.458463][ T8100] gspca_vc032x: reg_r err -71 [ 1765.463287][ T8100] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1765.492671][ T8100] usb 3-1: USB disconnect, device number 59 [ 1765.590782][ T30] kauditd_printk_skb: 373 callbacks suppressed [ 1765.590802][ T30] audit: type=1326 audit(1750145262.324:9174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26112 comm="syz.5.22905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 1765.625139][ T30] audit: type=1326 audit(1750145262.324:9175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26112 comm="syz.5.22905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 1765.657891][ T30] audit: type=1326 audit(1750145262.324:9176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26112 comm="syz.5.22905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=139 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 1765.694745][ T30] audit: type=1326 audit(1750145262.324:9177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26112 comm="syz.5.22905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 1765.719988][ T30] audit: type=1326 audit(1750145262.324:9178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26112 comm="syz.5.22905" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 1766.045046][T26125] syzkaller1: entered promiscuous mode [ 1766.092532][T26125] syzkaller1: entered allmulticast mode [ 1766.606906][ T30] audit: type=1326 audit(1750145263.334:9179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26140 comm="syz.5.22920" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62539 code=0x0 [ 1767.806885][ T8100] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1767.956772][T22307] usb 7-1: new low-speed USB device number 63 using dummy_hcd [ 1767.997372][ T8100] usb 6-1: Using ep0 maxpacket: 32 [ 1768.022334][ T8100] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1768.045663][ T8100] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1768.056365][ T8100] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1768.065943][ T8100] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.085709][ T8100] usb 6-1: config 0 descriptor?? [ 1768.098456][ T8100] hub 6-1:0.0: USB hub found [ 1768.143176][T22307] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1768.167210][T22307] usb 7-1: config 179 has no interface number 0 [ 1768.176902][T22307] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1768.206938][T22307] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1768.228713][T22307] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1768.243330][T22307] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1768.258827][T22307] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1768.272795][T22307] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1768.306355][ T8100] hub 6-1:0.0: 2 ports detected [ 1768.323825][T22307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1768.352695][T26180] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1768.371540][T26180] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1768.393358][T26200] futex_wake_op: syz.7.22943 tries to shift op by 32; fix this program [ 1768.423721][T26202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22944'. [ 1768.482380][T26202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22944'. [ 1768.750512][T22314] usb 7-1: USB disconnect, device number 63 [ 1768.750537][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1768.765737][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1768.886399][T26208] batadv0: entered promiscuous mode [ 1768.901851][T26208] macsec1: entered promiscuous mode [ 1768.913021][T26208] macsec1: entered allmulticast mode [ 1768.918761][T26208] batadv0: entered allmulticast mode [ 1768.929465][T26208] batadv0: left allmulticast mode [ 1768.935354][T26208] batadv0: left promiscuous mode [ 1769.392765][ T8100] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 1769.413469][ T8100] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 1769.452088][ T8100] usbhid 6-1:0.0: can't add hid device: -32 [ 1769.475826][ T8100] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 1769.519220][T26230] loop6: detected capacity change from 0 to 63 [ 1769.581587][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.594703][T26230] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.605680][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.617609][T26230] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.629076][T26230] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.642630][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.651646][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.658697][T22314] usb 6-1: USB disconnect, device number 116 [ 1769.661832][T23302] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.675840][T26230] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.781909][T20264] Buffer I/O error on dev loop6, logical block 0, async page read [ 1769.797020][ T8100] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1769.997340][ T8100] usb 3-1: Using ep0 maxpacket: 16 [ 1770.006208][ T8100] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1770.025984][ T8100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.041514][ T8100] usb 3-1: config 0 descriptor?? [ 1770.053632][ T8100] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1770.444344][T26254] macsec2: entered promiscuous mode [ 1770.467472][T26254] batadv_slave_1: entered promiscuous mode [ 1770.507577][T26254] macsec2: entered allmulticast mode [ 1770.512947][T26254] batadv_slave_1: entered allmulticast mode [ 1771.089791][ T8100] gspca_sonixj: reg_w1 err -71 [ 1771.117017][ T8100] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1771.154254][ T8100] usb 3-1: USB disconnect, device number 60 [ 1771.923051][T26291] syzkaller1: entered promiscuous mode [ 1771.935191][T26291] syzkaller1: entered allmulticast mode [ 1772.036956][T26294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22984'. [ 1772.056588][T26294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22984'. [ 1773.849866][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1773.893852][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1773.907729][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1773.937533][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1773.946107][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1774.007378][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1774.028799][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1774.036257][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1774.062886][T26353] loop6: detected capacity change from 0 to 63 [ 1774.082058][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1774.118617][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1774.156441][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1774.195426][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1774.220059][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1774.256833][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1774.305955][T22315] hid-generic 00A0:0008:0003.0121: unknown main item tag 0x0 [ 1774.346394][T22315] hid-generic 00A0:0008:0003.0121: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1774.967489][T22314] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1775.082271][T26376] loop8: detected capacity change from 0 to 7 [ 1775.094896][T26376] Dev loop8: unable to read RDB block 7 [ 1775.101133][T26376] loop8: unable to read partition table [ 1775.115973][T26376] loop8: partition table beyond EOD, truncated [ 1775.127377][T22314] usb 3-1: Using ep0 maxpacket: 8 [ 1775.138478][T22314] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1775.147502][T22314] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1775.162517][T26376] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1775.183722][T26380] vlan2: entered allmulticast mode [ 1775.189709][T22314] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1775.214399][T26380] bond0: entered allmulticast mode [ 1775.222981][T22314] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1775.244332][T26380] bond_slave_0: entered allmulticast mode [ 1775.251220][T26380] bond_slave_1: entered allmulticast mode [ 1775.257297][T22314] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1775.282649][T22314] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1775.307462][T22314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.575752][T22314] usb 3-1: usb_control_msg returned -32 [ 1775.592353][T22314] usbtmc 3-1:16.0: can't read capabilities [ 1775.953974][T26400] mac80211_hwsim hwsim19 syzkaller1: entered promiscuous mode [ 1775.970638][T26400] mac80211_hwsim hwsim19 syzkaller1: entered allmulticast mode [ 1776.183474][T22314] usb 3-1: USB disconnect, device number 61 [ 1776.507620][T22315] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1776.659436][T22315] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1776.676335][T22315] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1776.688340][T22315] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1776.699581][T22315] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1776.715116][T22315] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1776.724717][T22315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.748577][T22315] usb 7-1: config 0 descriptor?? [ 1777.171713][T22315] plantronics 0003:047F:FFFF.0122: ignoring exceeding usage max [ 1777.204162][T22315] plantronics 0003:047F:FFFF.0122: No inputs registered, leaving [ 1777.244410][T22315] plantronics 0003:047F:FFFF.0122: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1777.246798][T26424] netlink: 'syz.5.23041': attribute type 30 has an invalid length. [ 1777.276055][T26424] netlink: 20 bytes leftover after parsing attributes in process `syz.5.23041'. [ 1777.295244][T26424] bond0: option arp_missed_max: invalid value (0) [ 1777.311588][T26424] bond0: option arp_missed_max: allowed values 1 - 255 [ 1779.092645][T26467] syzkaller1: entered promiscuous mode [ 1779.116761][T26467] syzkaller1: entered allmulticast mode [ 1779.611671][T20443] usb 7-1: USB disconnect, device number 64 [ 1779.702191][T26488] vlan3: entered allmulticast mode [ 1779.735748][T26488] bond0: entered allmulticast mode [ 1779.746041][T26488] bond_slave_0: entered allmulticast mode [ 1779.777752][T26488] bond_slave_1: entered allmulticast mode [ 1779.804538][ T30] audit: type=1326 audit(1750145276.534:9180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26480 comm="syz.5.23065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 1779.855042][ T30] audit: type=1326 audit(1750145276.564:9181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26480 comm="syz.5.23065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f62558 code=0x7ffc0000 [ 1779.881606][ T30] audit: type=1326 audit(1750145276.564:9182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26480 comm="syz.5.23065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f62558 code=0x7ffc0000 [ 1779.949985][T26494] input: syz0 as /devices/virtual/input/input203 [ 1779.989273][ T30] audit: type=1326 audit(1750145276.564:9183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26480 comm="syz.5.23065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f62558 code=0x7ffc0000 [ 1780.060383][ T30] audit: type=1326 audit(1750145276.564:9184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26480 comm="syz.5.23065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f62558 code=0x7ffc0000 [ 1780.125737][ T30] audit: type=1326 audit(1750145276.564:9185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26480 comm="syz.5.23065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f62558 code=0x7ffc0000 [ 1780.183634][ T30] audit: type=1326 audit(1750145276.564:9186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26480 comm="syz.5.23065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f62558 code=0x7ffc0000 [ 1780.208996][ T30] audit: type=1326 audit(1750145276.564:9187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26480 comm="syz.5.23065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f62558 code=0x7ffc0000 [ 1780.272740][ T30] audit: type=1326 audit(1750145276.564:9188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26480 comm="syz.5.23065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f62539 code=0x7ffc0000 [ 1780.367399][ T30] audit: type=1326 audit(1750145276.564:9189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26480 comm="syz.5.23065" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f62558 code=0x7ffc0000 [ 1781.079087][T26523] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1781.243499][T11488] usb 7-1: new low-speed USB device number 65 using dummy_hcd [ 1781.440536][T11488] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1781.453970][T11488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1781.476042][T11488] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1781.496802][T11488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1781.539088][T11488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1781.568886][T11488] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1781.577076][T11488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1781.617171][T11488] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1781.653760][T11488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1781.684204][T11488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1781.719060][T11488] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1781.734836][T11488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1781.776404][T11488] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1781.818869][T11488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1781.841608][T11488] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1781.875689][T11488] usb 7-1: string descriptor 0 read error: -22 [ 1781.892098][T11488] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1781.923028][T11488] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.997162][T11488] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1782.673555][T26562] block device autoloading is deprecated and will be removed. [ 1782.775229][T26566] loop8: detected capacity change from 0 to 8 [ 1782.815195][T26566] Dev loop8: unable to read RDB block 8 [ 1782.848775][T26566] loop8: unable to read partition table [ 1782.854734][T26566] loop8: partition table beyond EOD, truncated [ 1782.900105][T26566] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1783.714096][T26589] mac80211_hwsim hwsim19 syzkaller1: left promiscuous mode [ 1783.722335][T22315] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1783.735547][T26589] mac80211_hwsim hwsim19 syzkaller1: left allmulticast mode [ 1783.882897][T22315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1783.902846][T22315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.924709][T22315] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1783.945939][T22315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.974630][T22315] usb 3-1: config 0 descriptor?? [ 1783.997586][T22315] hub 3-1:0.0: USB hub found [ 1784.205536][T22315] hub 3-1:0.0: 1 port detected [ 1784.633757][T22315] usb 3-1: USB disconnect, device number 62 [ 1786.103098][T11488] usb 7-1: USB disconnect, device number 65 [ 1786.897839][ T8100] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1786.950290][T26682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.23150'. [ 1786.967227][T26682] netlink: 'syz.1.23150': attribute type 7 has an invalid length. [ 1786.985396][T26682] netlink: 'syz.1.23150': attribute type 8 has an invalid length. [ 1787.014706][T26682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23150'. [ 1787.056395][T26682] gretap0: entered promiscuous mode [ 1787.068557][T26682] batadv_slave_1: entered promiscuous mode [ 1787.107843][ T8100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.120195][T26682] gretap0: left promiscuous mode [ 1787.133548][ T8100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.153850][T26682] batadv_slave_1: left promiscuous mode [ 1787.171251][ T8100] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1787.214087][ T8100] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1787.255523][ T8100] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.274127][ T8100] usb 7-1: config 0 descriptor?? [ 1787.723173][ T8100] plantronics 0003:047F:FFFF.0123: No inputs registered, leaving [ 1787.753298][ T8100] plantronics 0003:047F:FFFF.0123: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1788.039562][T26718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.23164'. [ 1788.070901][ T8100] usb 7-1: USB disconnect, device number 66 [ 1788.649029][T22315] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1788.751114][T26741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23174'. [ 1788.806778][T22315] usb 6-1: Using ep0 maxpacket: 8 [ 1788.819979][T22315] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1788.830229][T22315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.839276][T22315] usb 6-1: Product: syz [ 1788.843746][T22315] usb 6-1: Manufacturer: syz [ 1788.848524][T22315] usb 6-1: SerialNumber: syz [ 1788.859826][T22315] usb 6-1: config 0 descriptor?? [ 1788.878865][T22315] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1789.879669][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 1789.879697][ T30] audit: type=1326 audit(1750145286.614:9267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.23183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1789.915196][T22315] gspca_sonixj: reg_w1 err -71 [ 1789.956918][T22315] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1789.996812][T22315] usb 6-1: USB disconnect, device number 117 [ 1790.017364][ T30] audit: type=1326 audit(1750145286.614:9268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.23183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1790.118158][ T30] audit: type=1326 audit(1750145286.614:9269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.23183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1790.209037][ T30] audit: type=1326 audit(1750145286.614:9270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.23183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1790.311983][ T30] audit: type=1326 audit(1750145286.614:9271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.23183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1790.502931][ T30] audit: type=1326 audit(1750145286.614:9272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.23183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1790.584855][ T30] audit: type=1326 audit(1750145286.614:9273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.23183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1790.691896][ T30] audit: type=1326 audit(1750145286.614:9274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.23183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1790.854365][ T30] audit: type=1326 audit(1750145286.644:9275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.23183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1790.919666][ T30] audit: type=1326 audit(1750145286.644:9276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26764 comm="syz.6.23183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1791.712469][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.719100][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.928175][T26809] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1793.233904][T22315] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1793.327618][T26856] binder: 26855:26856 ioctl c0306201 80000480 returned -14 [ 1793.385025][T26858] vlan2: entered allmulticast mode [ 1793.400410][T22315] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.422330][T22315] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1793.462836][T22315] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1793.505105][T22315] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1793.524584][T22315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.572985][T22315] usb 7-1: config 0 descriptor?? [ 1794.024761][T22315] plantronics 0003:047F:FFFF.0124: No inputs registered, leaving [ 1794.065094][T22315] plantronics 0003:047F:FFFF.0124: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1794.768292][T26892] loop2: detected capacity change from 0 to 7 [ 1794.776249][T20264] Dev loop2: unable to read RDB block 7 [ 1794.782154][T20264] loop2: AHDI p2 p3 [ 1794.786200][T20264] loop2: partition table partially beyond EOD, truncated [ 1794.803563][T20264] loop2: p3 start 335544320 is beyond EOD, truncated [ 1794.820013][T26892] Dev loop2: unable to read RDB block 7 [ 1794.825760][T26892] loop2: AHDI p2 p3 [ 1794.837404][T26892] loop2: partition table partially beyond EOD, truncated [ 1794.851955][T26892] loop2: p3 start 335544320 is beyond EOD, truncated [ 1795.106568][T26899] ipvlan2: entered promiscuous mode [ 1796.201180][ T8100] usb 7-1: USB disconnect, device number 67 [ 1796.695818][T26930] unknown channel width for channel at 909000KHz? [ 1798.455469][ T30] kauditd_printk_skb: 86 callbacks suppressed [ 1798.455486][ T30] audit: type=1326 audit(1750145295.184:9363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26979 comm="syz.7.23274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1798.484122][ C0] vkms_vblank_simulate: vblank timer overrun [ 1798.498195][ T30] audit: type=1326 audit(1750145295.234:9364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26979 comm="syz.7.23274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1798.520385][ C0] vkms_vblank_simulate: vblank timer overrun [ 1798.600237][ T30] audit: type=1326 audit(1750145295.274:9365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26979 comm="syz.7.23274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1798.631548][T26985] binder: 26982:26985 ioctl c018620c 80000100 returned -1 [ 1798.666934][ T30] audit: type=1326 audit(1750145295.294:9366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26979 comm="syz.7.23274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1798.692213][ T30] audit: type=1326 audit(1750145295.294:9367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26979 comm="syz.7.23274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1798.718223][ T30] audit: type=1326 audit(1750145295.294:9368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26979 comm="syz.7.23274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1798.744810][ T30] audit: type=1326 audit(1750145295.294:9369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26979 comm="syz.7.23274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1798.775167][ T30] audit: type=1326 audit(1750145295.294:9370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26979 comm="syz.7.23274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1798.803852][ T30] audit: type=1326 audit(1750145295.294:9371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26979 comm="syz.7.23274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1798.839624][ T30] audit: type=1326 audit(1750145295.294:9372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26979 comm="syz.7.23274" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1798.897619][T22314] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1798.936164][T26989] netlink: 24 bytes leftover after parsing attributes in process `syz.7.23278'. [ 1799.059057][T22314] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1799.080802][T22314] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1799.097515][T22314] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1799.117464][T22314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.325225][T26998] mac80211_hwsim hwsim19 syzkaller1: entered promiscuous mode [ 1799.339340][T22314] usb 3-1: GET_CAPABILITIES returned 0 [ 1799.344905][T22314] usbtmc 3-1:16.0: can't read capabilities [ 1799.367831][T26998] mac80211_hwsim hwsim19 syzkaller1: entered allmulticast mode [ 1799.496199][ T8100] hid-generic 0000:0000:0000.0125: unknown main item tag 0x7 [ 1799.514779][ T8100] hid-generic 0000:0000:0000.0125: ignoring exceeding usage max [ 1799.528106][ T8100] hid-generic 0000:0000:0000.0125: unknown main item tag 0x0 [ 1799.549420][ T8100] hid-generic 0000:0000:0000.0125: unknown main item tag 0x6 [ 1799.555903][T22314] usb 3-1: USB disconnect, device number 63 [ 1799.581309][ T8100] hid-generic 0000:0000:0000.0125: reserved main item tag 0xd [ 1799.617882][ T8100] hid-generic 0000:0000:0000.0125: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1799.809808][T27005] fido_id[27005]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1800.662976][ T12] tipc: Subscription rejected, illegal request [ 1800.867115][T20443] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1801.047306][T20443] usb 6-1: Using ep0 maxpacket: 32 [ 1801.062110][T20443] usb 6-1: config 1 has an invalid interface number: 242 but max is 0 [ 1801.071025][T20443] usb 6-1: config 1 has no interface number 0 [ 1801.088770][T20443] usb 6-1: config 1 interface 242 has no altsetting 0 [ 1801.107884][T20443] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1801.119987][T20443] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.135883][T20443] usb 6-1: Product: syz [ 1801.141096][T20443] usb 6-1: Manufacturer: syz [ 1801.145836][T20443] usb 6-1: SerialNumber: syz [ 1801.539089][T27048] syzkaller1: entered promiscuous mode [ 1801.556942][T27048] syzkaller1: entered allmulticast mode [ 1802.240864][T20443] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1802.277340][T20443] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1802.319565][T20443] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1802.428436][T20443] aqc111 6-1:1.242 eth9: register 'aqc111' at usb-dummy_hcd.5-1, Aquantia AQtion USB to 5GbE Controller, 4e:4b:21:44:3b:d8 [ 1802.482302][T20443] usb 6-1: USB disconnect, device number 118 [ 1802.519083][T20443] aqc111 6-1:1.242 eth9: unregister 'aqc111' usb-dummy_hcd.5-1, Aquantia AQtion USB to 5GbE Controller [ 1802.669888][T20443] aqc111 6-1:1.242 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1802.718894][T20443] aqc111 6-1:1.242 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1802.773965][T20443] aqc111 6-1:1.242 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1804.327545][T20443] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1804.489440][T20443] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1804.512857][T20443] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1804.527630][T20443] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1804.544670][T20443] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1804.559043][T20443] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1804.568419][T20443] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.590952][T20443] usb 7-1: config 0 descriptor?? [ 1805.008801][T20443] plantronics 0003:047F:FFFF.0126: No inputs registered, leaving [ 1805.053174][T20443] plantronics 0003:047F:FFFF.0126: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1805.176372][ T30] kauditd_printk_skb: 80 callbacks suppressed [ 1805.176391][ T30] audit: type=1326 audit(1750145301.904:9453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.7.23337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1805.313379][ T30] audit: type=1326 audit(1750145301.904:9454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.7.23337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1805.376907][ T30] audit: type=1326 audit(1750145301.904:9455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.7.23337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1805.418213][ T8100] usb 7-1: USB disconnect, device number 68 [ 1805.462437][T27116] netlink: 'syz.5.23333': attribute type 4 has an invalid length. [ 1805.492346][ T30] audit: type=1326 audit(1750145301.904:9456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.7.23337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1805.605776][ T30] audit: type=1326 audit(1750145301.944:9457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.7.23337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1805.700648][ T30] audit: type=1326 audit(1750145301.954:9458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.7.23337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1805.724944][ T30] audit: type=1326 audit(1750145301.954:9459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.7.23337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1805.753456][ T30] audit: type=1326 audit(1750145301.954:9460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.7.23337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1805.857377][ T30] audit: type=1326 audit(1750145301.954:9461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.7.23337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 1806.004467][ T30] audit: type=1326 audit(1750145301.954:9462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27124 comm="syz.7.23337" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 1806.489547][T27152] input: syz1 as /devices/virtual/input/input206 [ 1806.496051][T27153] tipc: Started in network mode [ 1806.507295][T27153] tipc: Node identity ff55, cluster identity 4711 [ 1806.531136][T27152] input: failed to attach handler leds to device input206, error: -6 [ 1806.549057][T27153] tipc: Enabling of bearer rejected, failed to enable media [ 1807.053729][T27176] netlink: 140 bytes leftover after parsing attributes in process `syz.2.23357'. [ 1807.066181][T27176] netlink: 140 bytes leftover after parsing attributes in process `syz.2.23357'. [ 1807.077793][T20443] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1807.279635][T20443] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1807.289227][T20443] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.311469][T20443] usb 6-1: config 0 descriptor?? [ 1807.329287][T20443] cp210x 6-1:0.0: cp210x converter detected [ 1807.671658][T27192] netlink: 'syz.2.23361': attribute type 4 has an invalid length. [ 1807.737543][T20443] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1807.966622][T20443] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1808.177709][T22314] usb 6-1: USB disconnect, device number 119 [ 1808.192353][T22314] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1808.267449][T22314] cp210x 6-1:0.0: device disconnected [ 1808.477799][T27210] kvm: kvm [27208]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x79a38c48ff000000 [ 1809.273427][T11488] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1809.454227][T11488] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1809.475143][T11488] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1809.495398][T11488] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1809.538377][T11488] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1809.556710][T11488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.591184][T11488] usb 7-1: config 0 descriptor?? [ 1809.898316][T27251] openvswitch: netlink: IPv4 tun info is not correct [ 1810.030958][T11488] plantronics 0003:047F:FFFF.0127: No inputs registered, leaving [ 1810.093547][T11488] plantronics 0003:047F:FFFF.0127: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1810.294968][T27263] netlink: 'syz.2.23393': attribute type 12 has an invalid length. [ 1810.313242][T27263] netlink: 'syz.2.23393': attribute type 29 has an invalid length. [ 1810.329463][T27263] netlink: 148 bytes leftover after parsing attributes in process `syz.2.23393'. [ 1810.342637][T27263] netlink: 59 bytes leftover after parsing attributes in process `syz.2.23393'. [ 1810.355237][T11488] usb 7-1: USB disconnect, device number 69 [ 1810.467179][T22318] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1810.639916][T22318] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1810.665841][T22318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1810.686101][T22318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1810.706433][T22318] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1810.721603][T27275] netlink: 8 bytes leftover after parsing attributes in process `syz.7.23399'. [ 1810.731741][T22318] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1810.745016][T27275] netlink: 'syz.7.23399': attribute type 1 has an invalid length. [ 1810.753498][T22318] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.762233][T27275] netlink: 'syz.7.23399': attribute type 2 has an invalid length. [ 1810.781000][T22318] usb 6-1: config 0 descriptor?? [ 1811.233680][T22318] plantronics 0003:047F:FFFF.0128: No inputs registered, leaving [ 1811.274245][T22318] plantronics 0003:047F:FFFF.0128: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1811.964379][T27304] netlink: 44 bytes leftover after parsing attributes in process `syz.2.23410'. [ 1812.059201][T27306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.23412'. [ 1812.068751][T27306] netlink: 'syz.2.23412': attribute type 7 has an invalid length. [ 1812.076582][T27306] netlink: 'syz.2.23412': attribute type 8 has an invalid length. [ 1812.085331][T27306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23412'. [ 1812.186895][ T8100] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1812.346999][ T8100] usb 7-1: Using ep0 maxpacket: 32 [ 1812.360886][ T8100] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1812.376715][ T8100] usb 7-1: config 0 has no interface number 0 [ 1812.382914][ T8100] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1812.428910][ T8100] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1812.447236][ T8100] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1812.455344][ T8100] usb 7-1: Product: syz [ 1812.459611][ T8100] usb 7-1: Manufacturer: syz [ 1812.464226][ T8100] usb 7-1: SerialNumber: syz [ 1812.480065][ T8100] usb 7-1: config 0 descriptor?? [ 1812.501616][ T8100] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1812.512300][ T8100] em28xx 7-1:0.132: Video interface 132 found: [ 1812.902973][ T8100] em28xx 7-1:0.132: chip ID is em28178 [ 1813.356375][T22318] usb 6-1: USB disconnect, device number 120 [ 1813.427970][T27328] loop2: detected capacity change from 0 to 7 [ 1813.440710][T23740] Dev loop2: unable to read RDB block 7 [ 1813.449177][T23740] loop2: unable to read partition table [ 1813.455267][T23740] loop2: partition table beyond EOD, truncated [ 1813.486967][T27328] Dev loop2: unable to read RDB block 7 [ 1813.492819][T27328] loop2: unable to read partition table [ 1813.501554][T27328] loop2: partition table beyond EOD, truncated [ 1813.510221][ T8100] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1813.528797][ T8100] em28xx 7-1:0.132: board has no eeprom [ 1813.536227][T27328] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1813.609237][ T8100] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1813.635454][ T8100] em28xx 7-1:0.132: analog set to bulk mode. [ 1813.655726][T11488] em28xx 7-1:0.132: Registering V4L2 extension [ 1813.679847][ T8100] usb 7-1: USB disconnect, device number 70 [ 1813.713398][ T8100] em28xx 7-1:0.132: Disconnecting em28xx [ 1813.798032][T22315] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1813.946310][T11488] usb 7-1: Decoder not found [ 1813.966909][T22315] usb 3-1: Using ep0 maxpacket: 16 [ 1813.967455][T11488] em28xx 7-1:0.132: failed to create media graph [ 1813.981201][T22315] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.986737][T11488] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1814.003896][T22315] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1814.028939][T11488] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1814.032739][T22315] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1814.040561][ T8100] em28xx 7-1:0.132: Closing input extension [ 1814.057312][T22315] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1814.080858][T22315] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1814.090867][ T8100] em28xx 7-1:0.132: Freeing device [ 1814.106846][T22315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1814.138335][T22315] usb 3-1: SerialNumber: syz [ 1814.161799][T22315] hub 3-1:1.0: bad descriptor, ignoring hub [ 1814.189094][T22315] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1814.219245][T22315] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1814.366973][T22314] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1814.548850][T22314] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1814.568329][T22314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1814.597346][T22314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1814.626772][T22314] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1814.650904][T27326] raw-gadget.1 gadget.2: fail, usb_ep_set_wedge returned -11 [ 1814.654677][T22314] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1814.697337][T22314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.767591][ T8100] usb 3-1: USB disconnect, device number 64 [ 1814.800424][T22314] usb 6-1: config 0 descriptor?? [ 1814.968764][T27363] syzkaller1: entered promiscuous mode [ 1814.974546][T27363] syzkaller1: entered allmulticast mode [ 1815.234261][T22314] plantronics 0003:047F:FFFF.0129: unknown main item tag 0x0 [ 1815.258360][T22314] plantronics 0003:047F:FFFF.0129: No inputs registered, leaving [ 1815.300730][T22314] plantronics 0003:047F:FFFF.0129: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1815.366061][T27372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.23439'. [ 1815.527422][ T8100] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1815.527617][T27377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23440'. [ 1815.601351][T22314] usb 6-1: USB disconnect, device number 121 [ 1815.676897][ T8100] usb 7-1: Using ep0 maxpacket: 16 [ 1815.698132][ T8100] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1815.712181][ T8100] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.721486][ T8100] usb 7-1: Product: syz [ 1815.725753][ T8100] usb 7-1: Manufacturer: syz [ 1815.731256][ T8100] usb 7-1: SerialNumber: syz [ 1815.739725][ T8100] usb 7-1: config 0 descriptor?? [ 1816.155379][ T8100] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1816.185982][ T8100] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1816.208701][ T8100] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1816.227209][ T8100] usb 7-1: media controller created [ 1816.253627][ T8100] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1816.366213][ T8100] zl10353_read_register: readreg error (reg=127, ret==0) [ 1816.387224][ T8100] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1816.399718][ T8100] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1816.412504][ T8100] usb 7-1: USB disconnect, device number 71 [ 1816.501745][ T8100] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1817.522579][T27416] syz.6.23459 (27416): drop_caches: 2 [ 1818.338674][T27437] syzkaller1: entered promiscuous mode [ 1818.344686][T27437] syzkaller1: entered allmulticast mode [ 1818.431626][T27414] syz.6.23459 (27414): drop_caches: 2 [ 1819.377675][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1819.918092][T22314] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1820.067750][T22316] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1820.089351][T22314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.105652][T22314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.122310][T22314] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1820.136182][T22314] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1820.145674][T22314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.166492][T22314] usb 6-1: config 0 descriptor?? [ 1820.265832][T22316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.283252][T22316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.293819][T22316] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1820.307468][T22316] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1820.317867][T22316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.335486][T22316] usb 3-1: config 0 descriptor?? [ 1820.612987][T22314] plantronics 0003:047F:FFFF.012A: reserved main item tag 0xd [ 1820.635586][T22314] plantronics 0003:047F:FFFF.012A: No inputs registered, leaving [ 1820.681974][T22314] plantronics 0003:047F:FFFF.012A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1820.797332][T22316] plantronics 0003:047F:FFFF.012B: No inputs registered, leaving [ 1820.852813][T22316] plantronics 0003:047F:FFFF.012B: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1820.922001][T22316] usb 6-1: USB disconnect, device number 122 [ 1821.030203][T22314] usb 3-1: USB disconnect, device number 65 [ 1821.202895][T27496] fido_id[27496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1821.207309][T27493] fido_id[27493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1821.797454][T22318] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1821.959280][T22318] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.978661][T22318] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1821.996700][T22318] usb 6-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 1822.004858][T22318] usb 6-1: Manufacturer: syz [ 1822.017569][T22318] usb 6-1: SerialNumber: syz [ 1822.030188][T22318] usb 6-1: config 0 descriptor?? [ 1822.087317][T20443] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1822.247577][T20443] usb 3-1: Using ep0 maxpacket: 32 [ 1822.257276][T22318] usb 6-1: USB disconnect, device number 123 [ 1822.259163][T20443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.317284][T20443] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1822.343526][T20443] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1822.357078][T20443] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.396134][T20443] usb 3-1: config 0 descriptor?? [ 1822.865009][T20443] savu 0003:1E7D:2D5A.012C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1823.134120][T22318] usb 3-1: USB disconnect, device number 66 [ 1823.364413][T27543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1823.371797][T27543] IPv6: NLM_F_CREATE should be set when creating new route [ 1823.861447][T27551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23514'. [ 1823.876443][ T30] kauditd_printk_skb: 119 callbacks suppressed [ 1823.876463][ T30] audit: type=1326 audit(1750145320.614:9582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27552 comm="syz.1.23515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1823.923429][ T30] audit: type=1326 audit(1750145320.644:9583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27552 comm="syz.1.23515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1824.014583][ T30] audit: type=1326 audit(1750145320.654:9584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27552 comm="syz.1.23515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1824.055368][ T30] audit: type=1326 audit(1750145320.684:9585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27552 comm="syz.1.23515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1824.115550][ T30] audit: type=1326 audit(1750145320.684:9586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27552 comm="syz.1.23515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1824.205901][ T30] audit: type=1326 audit(1750145320.684:9587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27552 comm="syz.1.23515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1824.352556][ T30] audit: type=1326 audit(1750145320.684:9588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27552 comm="syz.1.23515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1824.482446][ T30] audit: type=1326 audit(1750145320.684:9589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27552 comm="syz.1.23515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fc2539 code=0x7ffc0000 [ 1824.515008][ T30] audit: type=1326 audit(1750145320.684:9590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27552 comm="syz.1.23515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1824.538726][ T30] audit: type=1326 audit(1750145320.684:9591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27552 comm="syz.1.23515" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc2558 code=0x7ffc0000 [ 1824.651691][T27563] sctp: [Deprecated]: syz.6.23520 (pid 27563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1824.651691][T27563] Use struct sctp_sack_info instead [ 1825.124019][T27576] mac80211_hwsim hwsim19 syzkaller1: left promiscuous mode [ 1825.133222][T27576] mac80211_hwsim hwsim19 syzkaller1: left allmulticast mode [ 1826.676786][T27612] mac80211_hwsim hwsim19 syzkaller1: entered promiscuous mode [ 1826.684610][T27612] mac80211_hwsim hwsim19 syzkaller1: entered allmulticast mode [ 1829.751398][T27665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23562'. [ 1830.262547][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23569'. [ 1830.288706][T27679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23569'. [ 1830.520580][T27685] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23572'. [ 1830.578702][T27685] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23572'. [ 1831.189479][T27714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.23584'. [ 1832.853750][T27754] ALSA: mixer_oss: invalid OSS volume '' [ 1833.158589][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23607'. [ 1833.368033][T27770] syzkaller1: entered promiscuous mode [ 1833.377898][T27770] syzkaller1: entered allmulticast mode [ 1833.981335][T27788] syz_tun: entered allmulticast mode [ 1833.992293][ T30] kauditd_printk_skb: 202 callbacks suppressed [ 1833.992311][ T30] audit: type=1326 audit(1750145330.724:9794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27776 comm="syz.2.23612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1834.059784][T27786] syz_tun: left allmulticast mode [ 1834.080822][ T30] audit: type=1326 audit(1750145330.724:9795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27776 comm="syz.2.23612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1834.112943][ T30] audit: type=1326 audit(1750145330.724:9796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27776 comm="syz.2.23612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1834.207612][T27792] netlink: 36 bytes leftover after parsing attributes in process `syz.6.23619'. [ 1834.245851][ T30] audit: type=1326 audit(1750145330.724:9797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27776 comm="syz.2.23612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1834.378800][ T30] audit: type=1326 audit(1750145330.724:9798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27776 comm="syz.2.23612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1834.467022][ T30] audit: type=1326 audit(1750145330.724:9799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27776 comm="syz.2.23612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1834.595712][ T30] audit: type=1326 audit(1750145330.724:9800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27776 comm="syz.2.23612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1834.665167][ T30] audit: type=1326 audit(1750145330.764:9801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27776 comm="syz.2.23612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1834.756091][ T30] audit: type=1326 audit(1750145330.764:9802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27776 comm="syz.2.23612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x7ffc0000 [ 1834.866523][ T30] audit: type=1326 audit(1750145330.764:9803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27776 comm="syz.2.23612" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf707e558 code=0x7ffc0000 [ 1835.776343][T27827] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.23631'. [ 1835.799371][T27826] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.23631'. [ 1836.019850][T27833] input: syz0 as /devices/virtual/input/input210 [ 1837.886810][ T8100] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1838.037426][ T8100] usb 7-1: Using ep0 maxpacket: 16 [ 1838.048781][ T8100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1838.067407][ T8100] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1838.086794][ T8100] usb 7-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1838.106117][ T8100] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.129042][ T8100] usb 7-1: config 0 descriptor?? [ 1838.202077][T27875] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23649'. [ 1838.222597][T27875] syz_tun: Device is already in use. [ 1838.565207][ T8100] input: HID 05ac:8241 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:05AC:8241.012D/input/input211 [ 1838.656710][ T8100] appleir 0003:05AC:8241.012D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.6-1/input0 [ 1838.805162][T22318] usb 7-1: USB disconnect, device number 72 [ 1838.835588][T27886] fido_id[27886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1839.305417][T27906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1839.555355][T27912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1839.737754][T27921] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.23670'. [ 1839.836828][T22318] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 1840.005424][T22318] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.019903][T22318] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1840.032435][T22318] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1840.042580][T22318] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.060750][T22318] usb 7-1: Product: syz [ 1840.065376][T22318] usb 7-1: Manufacturer: syz [ 1840.087782][T22318] usb 7-1: SerialNumber: syz [ 1840.323178][T22318] usb 7-1: 0:2 : does not exist [ 1840.363778][T22318] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1840.401260][T22318] usb 7-1: USB disconnect, device number 73 [ 1840.481872][T20264] udevd[20264]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1842.632753][T28005] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23705'. [ 1842.743191][T28010] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.23706'. [ 1842.766076][T28009] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.23706'. [ 1842.900566][T28015] netlink: 'syz.5.23708': attribute type 16 has an invalid length. [ 1842.940100][T28015] netlink: 'syz.5.23708': attribute type 3 has an invalid length. [ 1842.979021][T28015] netlink: 'syz.5.23708': attribute type 1 has an invalid length. [ 1843.015829][T28015] netlink: 'syz.5.23708': attribute type 1 has an invalid length. [ 1843.064428][T28015] netlink: 'syz.5.23708': attribute type 2 has an invalid length. [ 1843.134485][T28015] netlink: 64006 bytes leftover after parsing attributes in process `syz.5.23708'. [ 1845.578694][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23736'. [ 1847.058813][T28121] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.23750'. [ 1847.108143][T28119] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.23750'. [ 1847.228554][T28125] netlink: 48 bytes leftover after parsing attributes in process `syz.6.23754'. [ 1847.341650][T28129] netlink: 'syz.2.23755': attribute type 16 has an invalid length. [ 1847.361575][T28131] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1847.385987][T28129] netlink: 'syz.2.23755': attribute type 3 has an invalid length. [ 1847.432075][T28129] netlink: 'syz.2.23755': attribute type 1 has an invalid length. [ 1847.464974][T28132] all (unregistering): Released all slaves [ 1847.466221][T28129] netlink: 'syz.2.23755': attribute type 1 has an invalid length. [ 1847.479989][T28129] netlink: 'syz.2.23755': attribute type 2 has an invalid length. [ 1847.488736][T28129] netlink: 64006 bytes leftover after parsing attributes in process `syz.2.23755'. [ 1848.440441][T28162] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.23768'. [ 1848.454459][T28158] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.23768'. [ 1849.855033][ T30] kauditd_printk_skb: 135 callbacks suppressed [ 1849.855050][ T30] audit: type=1800 audit(1750145346.584:9939): pid=28191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.23780" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1850.500363][T28205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23786'. [ 1850.532041][T28205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23786'. [ 1851.006815][T22315] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1851.183122][T22315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.225723][T22315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1851.246307][T22315] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1851.277533][T22315] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1851.297547][T22315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.338608][T22315] usb 6-1: config 0 descriptor?? [ 1851.782218][T22315] plantronics 0003:047F:FFFF.012E: No inputs registered, leaving [ 1851.860937][T22315] plantronics 0003:047F:FFFF.012E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1852.150423][T22315] usb 6-1: USB disconnect, device number 124 [ 1852.182141][T28236] fido_id[28236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1853.146463][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.153163][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.431390][T28275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.23816'. [ 1855.804607][ T30] audit: type=1326 audit(1750145352.534:9940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28318 comm="syz.6.23833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1856.011425][ T30] audit: type=1326 audit(1750145352.564:9941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28318 comm="syz.6.23833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1856.033610][ C0] vkms_vblank_simulate: vblank timer overrun [ 1856.112444][ T30] audit: type=1326 audit(1750145352.564:9942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28318 comm="syz.6.23833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1856.226420][ T30] audit: type=1326 audit(1750145352.564:9943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28318 comm="syz.6.23833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1856.248658][ C0] vkms_vblank_simulate: vblank timer overrun [ 1856.316822][ T30] audit: type=1326 audit(1750145352.564:9944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28318 comm="syz.6.23833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1856.427296][ T30] audit: type=1326 audit(1750145352.564:9945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28318 comm="syz.6.23833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1856.556854][ T30] audit: type=1326 audit(1750145352.564:9946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28318 comm="syz.6.23833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1856.579038][ C0] vkms_vblank_simulate: vblank timer overrun [ 1856.657148][ T30] audit: type=1326 audit(1750145352.564:9947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28318 comm="syz.6.23833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1856.679370][ C0] vkms_vblank_simulate: vblank timer overrun [ 1856.707174][T11488] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 1856.761059][ T30] audit: type=1326 audit(1750145352.564:9948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28318 comm="syz.6.23833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 1856.783251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1856.870516][ T30] audit: type=1326 audit(1750145352.564:9949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28318 comm="syz.6.23833" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 1856.903993][T11488] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1856.922381][T11488] usb 3-1: config 0 has no interface number 0 [ 1856.941236][T11488] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1857.006854][T11488] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1857.053865][T11488] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1857.101242][T11488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.164948][T11488] usb 3-1: config 0 descriptor?? [ 1857.172059][T28338] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1857.219175][T11488] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1857.460800][T11488] usb 3-1: USB disconnect, device number 67 [ 1857.467263][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1858.220508][T28378] input: syz0 as /devices/virtual/input/input213 [ 1858.666536][T28387] batadv_slave_1: entered promiscuous mode [ 1858.677499][T28390] batadv_slave_1: left promiscuous mode [ 1859.167570][T28406] input: syz0 as /devices/virtual/input/input214 [ 1860.947493][T22318] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 1861.144349][T22318] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.158941][T22318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1861.217144][T22318] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1861.248475][T22318] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1861.299259][T22318] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1861.320667][T22318] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1861.339914][T22318] usb 6-1: Manufacturer: syz [ 1861.364252][T22318] usb 6-1: config 0 descriptor?? [ 1861.795667][T28454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23885'. [ 1861.922579][T22318] rc_core: IR keymap rc-hauppauge not found [ 1861.937036][T22318] Registered IR keymap rc-empty [ 1861.947967][T22318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1862.007299][T22318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1862.037877][T22318] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1862.067686][T22318] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input215 [ 1862.089952][T28454] hsr_slave_0 (unregistering): left promiscuous mode [ 1862.113030][T22318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1862.154656][T28458] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1862.167342][T22318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1862.208314][T22318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1862.247429][T22318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1862.267414][T22318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1862.296876][T22318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1862.317751][T22318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1862.338929][T22318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1862.381665][T22318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1862.445892][T22318] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1862.490080][T22318] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1862.506308][T22318] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1862.525068][T22318] usb 6-1: USB disconnect, device number 125 [ 1862.828327][T28471] : renamed from bond_slave_0 (while UP) [ 1863.792131][T28503] input: syz0 as /devices/virtual/input/input216 [ 1864.337185][ T8100] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1864.526834][ T8100] usb 6-1: Using ep0 maxpacket: 32 [ 1864.550565][ T8100] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1864.569324][ T8100] usb 6-1: config 0 has no interface number 0 [ 1864.601764][ T8100] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1864.641542][ T8100] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.697634][ T8100] usb 6-1: Product: syz [ 1864.727571][ T8100] usb 6-1: Manufacturer: syz [ 1864.752722][ T8100] usb 6-1: SerialNumber: syz [ 1864.821425][ T8100] usb 6-1: config 0 descriptor?? [ 1864.861979][ T8100] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1865.104106][ T8100] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1865.152729][ T8100] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1865.163563][T22307] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1865.338885][T22307] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1865.369083][T22307] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1865.382410][T22307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1865.392158][T22307] usb 3-1: SerialNumber: syz [ 1865.568060][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1865.576102][ T8100] usb 6-1: USB disconnect, device number 126 [ 1865.612412][ T8100] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1865.643773][ T8100] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1865.681975][ T8100] quatech2 6-1:0.51: device disconnected [ 1866.045280][T22307] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1866.267940][T20840] Bluetooth: hci1: command 0x0406 tx timeout [ 1866.354519][T20443] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1866.395312][T20443] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1866.487363][T22316] usb 3-1: USB disconnect, device number 68 [ 1866.544443][T22316] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1867.798893][ T8100] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1867.961783][ T8100] usb 3-1: Using ep0 maxpacket: 16 [ 1867.980475][ T8100] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1867.995870][ T8100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.005256][ T8100] usb 3-1: Product: syz [ 1868.015600][ T8100] usb 3-1: Manufacturer: syz [ 1868.026403][ T8100] usb 3-1: SerialNumber: syz [ 1868.052487][ T8100] usb 3-1: config 0 descriptor?? [ 1868.494075][ T8100] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1868.508828][ T8100] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1868.522233][ T8100] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1868.532012][ T8100] usb 3-1: media controller created [ 1868.560871][ T8100] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1868.707586][ T8100] zl10353_read_register: readreg error (reg=127, ret==0) [ 1868.730809][ T8100] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1868.756604][ T8100] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1868.774277][ T8100] usb 3-1: USB disconnect, device number 69 [ 1868.847710][T28605] netlink: 80 bytes leftover after parsing attributes in process `syz.6.23933'. [ 1868.884616][T28605] netlink: 80 bytes leftover after parsing attributes in process `syz.6.23933'. [ 1868.895748][ T8100] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1871.049520][T22315] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1871.156307][T28660] netlink: 'syz.1.23956': attribute type 6 has an invalid length. [ 1871.237691][T22315] usb 7-1: Using ep0 maxpacket: 16 [ 1871.253567][T22315] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1871.275429][T22315] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1871.291661][T22315] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1871.325454][T22315] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1871.336523][T22315] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.352830][T22315] usb 7-1: Product: syz [ 1871.359179][T22315] usb 7-1: Manufacturer: syz [ 1871.363838][T22315] usb 7-1: SerialNumber: syz [ 1871.938539][T22315] usb 7-1: 2:1 : format type 0 is detected, processed as PCM [ 1872.732561][T22315] usb 7-1: 2:1: cannot get freq at ep 0x82 [ 1872.787640][T22316] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1872.818122][T22315] usb 7-1: USB disconnect, device number 74 [ 1872.914502][T20252] udevd[20252]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1872.983008][T22316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.997226][T22316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1873.007661][T22316] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1873.023563][T22316] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1873.042483][T22316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1873.059621][T22316] usb 6-1: config 0 descriptor?? [ 1873.493048][T22316] plantronics 0003:047F:FFFF.012F: No inputs registered, leaving [ 1873.508639][T22316] plantronics 0003:047F:FFFF.012F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1874.817670][ C0] plantronics 0003:047F:FFFF.012F: usb_submit_urb(ctrl) failed: -1 [ 1874.935763][T28707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23974'. [ 1874.984087][T28707] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23974'. [ 1875.214016][T28718] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23978'. [ 1875.591917][T22308] usb 6-1: USB disconnect, device number 127 [ 1876.547002][T22316] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1876.731235][T28761] input: syz0 as /devices/virtual/input/input217 [ 1876.739916][T22316] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1876.761261][T22316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1876.788004][T22316] usb 3-1: config 1 has no interface number 0 [ 1876.826710][T22316] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1876.847752][T22316] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1876.860615][T22316] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1876.871439][T22316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.896036][T22316] usb 3-1: Product: syz [ 1876.901167][T22316] usb 3-1: Manufacturer: syz [ 1876.911092][T22316] usb 3-1: SerialNumber: syz [ 1877.129216][T28766] syz.6.23999 (28766): drop_caches: 2 [ 1877.395488][T28773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24002'. [ 1877.415015][T28773] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24002'. [ 1877.643344][T28775] syzkaller1: entered promiscuous mode [ 1877.650048][T28775] syzkaller1: entered allmulticast mode [ 1877.964380][T22316] cdc_ncm 3-1:1.1: bind() failure [ 1878.222826][T22308] usb 3-1: USB disconnect, device number 70 [ 1878.276990][T22316] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1878.467868][T22316] usb 6-1: Using ep0 maxpacket: 8 [ 1878.475002][T22316] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1878.488306][T22316] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1878.509616][T22316] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1878.541416][T22316] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1878.572343][T22316] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1878.616034][T22316] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1878.644709][T22316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.769586][T10427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1878.929328][T22316] usb 6-1: usb_control_msg returned -32 [ 1878.934977][T22316] usbtmc 6-1:16.0: can't read capabilities [ 1878.999933][T10427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.089058][T10427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.152604][T10427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1879.283986][T10427] bridge_slave_1: left allmulticast mode [ 1879.291132][T10427] bridge_slave_1: left promiscuous mode [ 1879.299952][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.310513][T10427] bridge_slave_0: left allmulticast mode [ 1879.316220][T10427] bridge_slave_0: left promiscuous mode [ 1879.323337][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.719812][T28809] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1879.870890][T22318] usb 6-1: USB disconnect, device number 2 [ 1880.105158][T10427] bond0 (unregistering): (slave 0): Releasing backup interface [ 1880.115043][T10427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1880.125404][T10427] bond0 (unregistering): Released all slaves [ 1880.141138][T10427] bond1 (unregistering): Released all slaves [ 1880.239995][T10427] tipc: Disabling bearer [ 1880.245462][T10427] tipc: Disabling bearer [ 1880.268278][T10427] tipc: Left network mode [ 1914.583965][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.590370][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.022193][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.029105][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 2019.537601][ T31] INFO: task kworker/0:1:11488 blocked for more than 143 seconds. [ 2019.545463][ T31] Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 [ 2019.553671][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2019.562579][ T31] task:kworker/0:1 state:D stack:22088 pid:11488 tgid:11488 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2019.575126][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 2019.581931][ T31] Call Trace: [ 2019.585218][ T31] [ 2019.588897][ T31] __schedule+0x16f5/0x4d00 [ 2019.593435][ T31] ? schedule+0x165/0x360 [ 2019.597904][ T31] ? __pfx___schedule+0x10/0x10 [ 2019.602780][ T31] ? schedule+0x91/0x360 [ 2019.607635][ T31] schedule+0x165/0x360 [ 2019.611816][ T31] schedule_preempt_disabled+0x13/0x30 [ 2019.617515][ T31] __mutex_lock+0x724/0xe80 [ 2019.622029][ T31] ? look_up_lock_class+0x74/0x170 [ 2019.627805][ T31] ? __mutex_lock+0x51b/0xe80 [ 2019.632498][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 2019.639148][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2019.644188][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2019.650369][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2019.656124][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 2019.663290][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2019.669624][ T31] process_scheduled_works+0xae1/0x17b0 [ 2019.675233][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2019.681377][ T31] worker_thread+0x8a0/0xda0 [ 2019.685982][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2019.692735][ T31] ? __kthread_parkme+0x7b/0x200 [ 2019.697888][ T31] kthread+0x70e/0x8a0 [ 2019.701973][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2019.707651][ T31] ? __pfx_kthread+0x10/0x10 [ 2019.712379][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2019.717783][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2019.722998][ T31] ? __pfx_kthread+0x10/0x10 [ 2019.728211][ T31] ret_from_fork+0x3f9/0x770 [ 2019.732818][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2019.738036][ T31] ? __switch_to_asm+0x39/0x70 [ 2019.742814][ T31] ? __switch_to_asm+0x33/0x70 [ 2019.748432][ T31] ? __pfx_kthread+0x10/0x10 [ 2019.753045][ T31] ret_from_fork_asm+0x1a/0x30 [ 2019.758006][ T31] [ 2019.761061][ T31] INFO: task kworker/0:2:20443 blocked for more than 143 seconds. [ 2019.769520][ T31] Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 [ 2019.777440][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2019.786114][ T31] task:kworker/0:2 state:D stack:20600 pid:20443 tgid:20443 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2019.798928][ T31] Workqueue: events rfkill_op_handler [ 2019.804341][ T31] Call Trace: [ 2019.807955][ T31] [ 2019.810908][ T31] __schedule+0x16f5/0x4d00 [ 2019.815459][ T31] ? __lock_acquire+0xa91/0xd20 [ 2019.820768][ T31] ? schedule+0x165/0x360 [ 2019.825132][ T31] ? __pfx___schedule+0x10/0x10 [ 2019.830857][ T31] ? schedule+0x91/0x360 [ 2019.835183][ T31] schedule+0x165/0x360 [ 2019.839433][ T31] schedule_preempt_disabled+0x13/0x30 [ 2019.844906][ T31] __mutex_lock+0x724/0xe80 [ 2019.849659][ T31] ? __lock_acquire+0xab9/0xd20 [ 2019.854554][ T31] ? __mutex_lock+0x51b/0xe80 [ 2019.859857][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 2019.865172][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2019.870401][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2019.875623][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2019.881630][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2019.888511][ T31] ? kobject_uevent_env+0x36b/0x8c0 [ 2019.893743][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 2019.899563][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 2019.904723][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 2019.910616][ T31] rfkill_set_block+0x1d2/0x440 [ 2019.915494][ T31] rfkill_epo+0x7e/0x180 [ 2019.920121][ T31] rfkill_op_handler+0x84/0x240 [ 2019.925075][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2019.930994][ T31] process_scheduled_works+0xae1/0x17b0 [ 2019.936630][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2019.942809][ T31] worker_thread+0x8a0/0xda0 [ 2019.947849][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2019.954246][ T31] ? __kthread_parkme+0x7b/0x200 [ 2019.959286][ T31] kthread+0x70e/0x8a0 [ 2019.963371][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2019.968682][ T31] ? __pfx_kthread+0x10/0x10 [ 2019.973293][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2019.978832][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2019.984058][ T31] ? __pfx_kthread+0x10/0x10 [ 2019.988814][ T31] ret_from_fork+0x3f9/0x770 [ 2019.993421][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2019.998604][ T31] ? __switch_to_asm+0x39/0x70 [ 2020.003396][ T31] ? __switch_to_asm+0x33/0x70 [ 2020.008609][ T31] ? __pfx_kthread+0x10/0x10 [ 2020.013217][ T31] ret_from_fork_asm+0x1a/0x30 [ 2020.018194][ T31] [ 2020.021328][ T31] INFO: task syz.7.23894:28473 blocked for more than 143 seconds. [ 2020.029318][ T31] Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 [ 2020.037315][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2020.045986][ T31] task:syz.7.23894 state:D stack:23528 pid:28473 tgid:28473 ppid:22977 task_flags:0x400040 flags:0x20004006 [ 2020.058151][ T31] Call Trace: [ 2020.061494][ T31] [ 2020.064441][ T31] __schedule+0x16f5/0x4d00 [ 2020.069471][ T31] ? schedule+0x165/0x360 [ 2020.073828][ T31] ? __pfx___schedule+0x10/0x10 [ 2020.078805][ T31] ? schedule+0x91/0x360 [ 2020.083153][ T31] schedule+0x165/0x360 [ 2020.087478][ T31] schedule_preempt_disabled+0x13/0x30 [ 2020.092974][ T31] __mutex_lock+0x724/0xe80 [ 2020.098078][ T31] ? kobject_put+0x43f/0x480 [ 2020.102733][ T31] ? __mutex_lock+0x51b/0xe80 [ 2020.107547][ T31] ? rfkill_unregister+0xc8/0x220 [ 2020.112596][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2020.117731][ T31] ? __pfx_device_del+0x10/0x10 [ 2020.122718][ T31] rfkill_unregister+0xc8/0x220 [ 2020.127980][ T31] nfc_unregister_device+0x96/0x2a0 [ 2020.133203][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 2020.139161][ T31] virtual_ncidev_close+0x56/0x90 [ 2020.144205][ T31] __fput+0x44c/0xa70 [ 2020.148367][ T31] task_work_run+0x1d1/0x260 [ 2020.153001][ T31] ? __pfx_task_work_run+0x10/0x10 [ 2020.158492][ T31] ? __pfx_locks_remove_posix+0x10/0x10 [ 2020.164299][ T31] get_signal+0x11ed/0x1340 [ 2020.168977][ T31] ? __lock_acquire+0xab9/0xd20 [ 2020.173883][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 2020.179689][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2020.184930][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2020.191465][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 2020.197070][ T31] exit_to_user_mode_loop+0x75/0x110 [ 2020.202397][ T31] __do_fast_syscall_32+0x1f4/0x2b0 [ 2020.207747][ T31] ? asm_int80_emulation+0x1a/0x20 [ 2020.212885][ T31] ? do_int80_emulation+0x1f3/0x390 [ 2020.218498][ T31] do_fast_syscall_32+0x34/0x80 [ 2020.223365][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2020.229854][ T31] RIP: 0023:0xf70ee539 [ 2020.233934][ T31] RSP: 002b:00000000f75afadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 2020.242470][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 2020.250856][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2020.259084][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2020.267185][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2020.275276][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2020.283701][ T31] [ 2020.286929][ T31] [ 2020.286929][ T31] Showing all locks held in the system: [ 2020.294669][ T31] 6 locks held by kworker/u8:1/13: [ 2020.299939][ T31] 1 lock held by khungtaskd/31: [ 2020.304833][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2020.315071][ T31] 2 locks held by getty/5603: [ 2020.319865][ T31] #0: ffff8880309840a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2020.329841][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2020.340329][ T31] 4 locks held by kworker/u8:11/10427: [ 2020.345798][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2020.356734][ T31] #1: ffffc90002de7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2020.367681][ T31] #2: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 2020.377145][ T31] #3: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 2020.387381][ T31] 1 lock held by syz-executor/10946: [ 2020.392667][ T31] #0: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 2020.403087][ T31] 3 locks held by kworker/0:1/11488: [ 2020.408442][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2020.419570][ T31] #1: ffffc9000e24fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2020.433558][ T31] #2: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 2020.445028][ T31] 4 locks held by kworker/0:2/20443: [ 2020.450348][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2020.461698][ T31] #1: ffffc900033b7bc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2020.472787][ T31] #2: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 2020.482361][ T31] #3: ffff8880569d1100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 2020.492258][ T31] 2 locks held by syz.7.23894/28473: [ 2020.503346][ T31] #0: ffff8880569d1100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 2020.513247][ T31] #1: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 2020.523567][ T31] 2 locks held by syz-executor/28781: [ 2020.529052][ T31] #0: ffff8880777de918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 2020.539237][ T31] #1: ffffffff8f7eb128 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 2020.550515][ T31] [ 2020.552884][ T31] ============================================= [ 2020.552884][ T31] [ 2020.561359][ T31] NMI backtrace for cpu 0 [ 2020.561375][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 2020.561398][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2020.561411][ T31] Call Trace: [ 2020.561421][ T31] [ 2020.561430][ T31] dump_stack_lvl+0x189/0x250 [ 2020.561462][ T31] ? __wake_up_klogd+0xd9/0x110 [ 2020.561487][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2020.561516][ T31] ? __pfx__printk+0x10/0x10 [ 2020.561549][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2020.561578][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2020.561600][ T31] ? _printk+0xcf/0x120 [ 2020.561626][ T31] ? __pfx__printk+0x10/0x10 [ 2020.561649][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2020.561678][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2020.561707][ T31] watchdog+0xfee/0x1030 [ 2020.561735][ T31] ? watchdog+0x1de/0x1030 [ 2020.561773][ T31] kthread+0x70e/0x8a0 [ 2020.561798][ T31] ? __pfx_watchdog+0x10/0x10 [ 2020.561823][ T31] ? __pfx_kthread+0x10/0x10 [ 2020.561846][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2020.561877][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2020.561903][ T31] ? __pfx_kthread+0x10/0x10 [ 2020.561926][ T31] ret_from_fork+0x3f9/0x770 [ 2020.561955][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2020.561988][ T31] ? __switch_to_asm+0x39/0x70 [ 2020.562006][ T31] ? __switch_to_asm+0x33/0x70 [ 2020.562025][ T31] ? __pfx_kthread+0x10/0x10 [ 2020.562047][ T31] ret_from_fork_asm+0x1a/0x30 [ 2020.562080][ T31] [ 2020.562087][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2020.720827][ C1] NMI backtrace for cpu 1 [ 2020.720845][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 2020.720867][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2020.720878][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2020.720908][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 e6 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2020.720924][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 2020.720940][ C1] RAX: b63803cd9b376c00 RBX: ffffffff81975d58 RCX: b63803cd9b376c00 [ 2020.720954][ C1] RDX: 0000000000000001 RSI: ffffffff8d9820d6 RDI: ffffffff8be28b80 [ 2020.720967][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 2020.720988][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa10df0 [ 2020.721002][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 2020.721014][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 2020.721028][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2020.721040][ C1] CR2: 000055f22aaa8660 CR3: 000000000df38000 CR4: 00000000003526f0 [ 2020.721056][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2020.721067][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2020.721078][ C1] Call Trace: [ 2020.721085][ C1] [ 2020.721093][ C1] default_idle+0x13/0x20 [ 2020.721110][ C1] default_idle_call+0x74/0xb0 [ 2020.721128][ C1] do_idle+0x1e8/0x510 [ 2020.721147][ C1] ? __pfx_do_idle+0x10/0x10 [ 2020.721161][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2020.721192][ C1] cpu_startup_entry+0x44/0x60 [ 2020.721208][ C1] start_secondary+0x101/0x110 [ 2020.721229][ C1] common_startup_64+0x13e/0x147 [ 2020.721254][ C1] [ 2020.721885][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 2020.911407][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 2020.923205][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2020.933256][ T31] Call Trace: [ 2020.936532][ T31] [ 2020.939457][ T31] dump_stack_lvl+0x99/0x250 [ 2020.944056][ T31] ? __asan_memcpy+0x40/0x70 [ 2020.948741][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2020.953944][ T31] ? __pfx__printk+0x10/0x10 [ 2020.958539][ T31] panic+0x2db/0x790 [ 2020.962442][ T31] ? __pfx_panic+0x10/0x10 [ 2020.966857][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 2020.972669][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 2020.978044][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 2020.984202][ T31] watchdog+0x102d/0x1030 [ 2020.988534][ T31] ? watchdog+0x1de/0x1030 [ 2020.992954][ T31] kthread+0x70e/0x8a0 [ 2020.997030][ T31] ? __pfx_watchdog+0x10/0x10 [ 2021.001731][ T31] ? __pfx_kthread+0x10/0x10 [ 2021.006318][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2021.011514][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2021.016719][ T31] ? __pfx_kthread+0x10/0x10 [ 2021.021312][ T31] ret_from_fork+0x3f9/0x770 [ 2021.025904][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2021.031021][ T31] ? __switch_to_asm+0x39/0x70 [ 2021.035777][ T31] ? __switch_to_asm+0x33/0x70 [ 2021.040534][ T31] ? __pfx_kthread+0x10/0x10 [ 2021.045119][ T31] ret_from_fork_asm+0x1a/0x30 [ 2021.049889][ T31] [ 2021.053142][ T31] Kernel Offset: disabled [ 2021.057459][ T31] Rebooting in 86400 seconds..