last executing test programs: 10m27.033442748s ago: executing program 4 (id=4449): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 10m26.529277072s ago: executing program 4 (id=4456): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x0, 0x0, 0x1]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) 10m26.282818783s ago: executing program 4 (id=4460): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, 0x0, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r1, &(0x7f0000000040)={0x11, 0x18}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@llc={0x606, {@llc={0x42, 0x8e, "be"}}}}}, 0x0) 10m26.147657188s ago: executing program 4 (id=4462): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 10m25.226163707s ago: executing program 4 (id=4466): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x10, 0x117, 0x3, 0x3}, @iv={0x10}], 0x20, 0x8000}], 0x1, 0x40800) 10m24.963826699s ago: executing program 4 (id=4467): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000e001"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x130, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x11) 10m24.770835815s ago: executing program 32 (id=4467): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000e001"], 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x2, 0x130, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{0x2}, 0x3, 0x3, 0x0, 0x0, "ae771958a0cb06cc"}}, 0x48}}, 0x11) 3m51.04270824s ago: executing program 3 (id=8902): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x18, &(0x7f0000000100)={0x40, 0xe, 0x5, {0x5, 0x38, "cf4022"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @string={0x0, 0x3, "064b765bc5404c731a96cbd8e0ae7ef1716fb019a8243f97526290b788e24695b4b343e7526ac555a1694789a0dcff10bdce1c07375fcd903b0c9efea3ff90339007bdceaa0277470c5c677b089f901a67b0ddf347cd1fdd902243f4ef3bea42e031000000000000"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000600)={0x0, 0x3, 0xc, @string={0xc, 0x3, "0343e04208c6bee58ecc"}}}, 0x0) 3m48.657543349s ago: executing program 3 (id=8936): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xecf86c37d53048d6) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000d30000007f00000004"], 0x58) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x48f) close(r0) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 3m48.482059574s ago: executing program 3 (id=8939): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 3m46.62135469s ago: executing program 3 (id=8958): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x41) r2 = open_tree(r1, &(0x7f0000000bc0)='./file0\x00', 0x800) move_mount(r2, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x220) 3m45.707114208s ago: executing program 3 (id=8968): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x12141, 0x0) 3m45.487875888s ago: executing program 3 (id=8970): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) getdents(r2, 0x0, 0x58) 3m45.301056969s ago: executing program 33 (id=8970): r0 = fsopen(&(0x7f0000000000)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0x0) getdents(r2, 0x0, 0x58) 2m24.531489882s ago: executing program 0 (id=9774): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/174) 2m24.271795474s ago: executing program 0 (id=9779): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 2m24.209788043s ago: executing program 0 (id=9780): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) close(0x3) 2m23.285752099s ago: executing program 0 (id=9789): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 2m23.136297785s ago: executing program 0 (id=9790): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r0, 0xf1) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xe2) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) 2m22.247349291s ago: executing program 0 (id=9792): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff940200000000000040000000000000001000000000000000000000002c8f380001000ce70201000003000000970f000005000000000000000d00000000000000c607000000000000e2"], 0x78) close(r0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 2m21.673946108s ago: executing program 34 (id=9792): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbff940200000000000040000000000000001000000000000000000000002c8f380001000ce70201000003000000970f000005000000000000000d00000000000000c607000000000000e2"], 0x78) close(r0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 3.797236478s ago: executing program 2 (id=11125): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fstat(r0, &(0x7f0000002900)) 2.900508346s ago: executing program 2 (id=11136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="080000000000000090000040", @ANYBLOB="b98b5aca7a7eda"]) 2.679972115s ago: executing program 2 (id=11138): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 2.107852333s ago: executing program 6 (id=11142): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='nv', 0x2) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)="9d", 0x1}], 0x1}}], 0x1, 0x400c0) 2.064306872s ago: executing program 6 (id=11144): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x10001, @local, 0x5}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) sendmmsg$inet(r0, &(0x7f0000000b80)=[{{&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@multicast1=0xe0000306]}]}}}], 0x18}}], 0x1, 0x4880) 1.939921617s ago: executing program 6 (id=11146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) 1.909994414s ago: executing program 6 (id=11147): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0) 1.902375146s ago: executing program 7 (id=11148): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}]}], {0x14}}, 0x44}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, 0x0, &(0x7f0000000240)) 1.726730207s ago: executing program 6 (id=11151): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xfffffffffffffffe}, 0x10) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 1.65194571s ago: executing program 7 (id=11152): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f00000000c0), 0x1, r1}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r0, 0xc01864ba, &(0x7f0000000300)={0x16, r3, r1}) 1.512570005s ago: executing program 7 (id=11153): gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setrlimit(0x0, &(0x7f0000000280)={0x5, 0x515}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 1.330788042s ago: executing program 6 (id=11154): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000034709d405f0530c2acb6010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000800)={0x24, &(0x7f0000000580)={0x20, 0xf}, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x81, 0x1, "8f"}, &(0x7f0000000700)={0x20, 0x82, 0x1, ','}, 0x0, 0x0, 0x0}) syz_mount_image$fuse(0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0) 1.258163619s ago: executing program 5 (id=11155): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000340)="10030600e030b8ed75014780aa96a13bb100001100007fca18ed158217cd078c1e41740c25b028eabf61f3dbdfd646", 0x2f, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0xfd, 0x6, @multicast}, 0x14) 1.215475452s ago: executing program 7 (id=11157): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000280)=""/16, 0x10}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/157, 0x9d}], 0x1}, 0xc5bf}], 0x2, 0x400000a0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c049d285d9bbff3bb6d5f6ee2b38a01b49", 0x11}], 0x1, 0x0, 0x0, 0x4000004}, 0xc0) 1.114164047s ago: executing program 5 (id=11158): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0xf5, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) 1.092917884s ago: executing program 1 (id=11159): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000240)=[{r1, 0x4080}, {r1, 0x400}], 0x2, 0x0, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x9) 1.000008733s ago: executing program 7 (id=11160): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r1, &(0x7f0000000740)=""/384, 0x200008c0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 957.614015ms ago: executing program 1 (id=11161): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000004180)={0x0, 0x0, 0x0}, 0x10000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 947.146164ms ago: executing program 5 (id=11162): socket$alg(0x26, 0x5, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r0], 0x38}}, 0x0) 864.896534ms ago: executing program 5 (id=11163): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a", 0x7}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 752.77723ms ago: executing program 1 (id=11164): write$binfmt_register(0xffffffffffffffff, &(0x7f0000000340)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x80000001, 0x3a, '\xbb\xbb\xbb\xbb\xbb\xbb', 0x3a, '/dev/kvm\x00', 0x3a, './cgroup.cpu/cpuset.cpus'}, 0x47) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c08d3fc140820004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 735.500818ms ago: executing program 5 (id=11165): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x0, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x40004) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) 598.230007ms ago: executing program 1 (id=11166): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={r3}) 505.805233ms ago: executing program 2 (id=11167): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 504.958898ms ago: executing program 5 (id=11168): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 369.713747ms ago: executing program 1 (id=11169): timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 265.810176ms ago: executing program 2 (id=11170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/158, 0x9e}], 0x1}, 0x0) 132.204446ms ago: executing program 1 (id=11171): openat$kvm(0xffffffffffffff9c, 0x0, 0x82042, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000b2000040"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x3a, 0x0, [{0xc0000101, 0x0, 0x4}]}) 131.501371ms ago: executing program 2 (id=11172): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x4) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000005c0)={"04dfc86351907bcbc9293982262169af775bed097e022d45a9640a4a4b506dc328f61ac030daca9e81e6847961e65610b8f6e25f9eaf1a9f48ac011b67d68f8725991345a1f8ed6450a11246c642e1fb830900fc472096b40644bce6cf7210107f57b850d0c9af06c766af1c637aa057167a6910e2e185b8d972e49eeda481d9a58394ef43958ce7407e73d6460653fc672aa4ab6a26bd1a631fa3a0f2b025ba137b8e3f933af28e1ea9980600438ea00b5f5b16893a22bb83ff1c92407a946d4dc7d347d526db0e71bb38f873937ca7343fb7248867adf5decd52e74f05c768c3b1be3d3305e32b8db562d19dd7c83fde6dbe03ef72aa7ddcca0850527c234e015071d38133e36417a251af7100392b6cdb0bbed4670d746c45fb5589f279cfd594911cb11f2a7336af10b2332e731f2eec8287c735f2346449f1629fde0300c7fbffffffffffffff22976d5721ee6dd6068cfd6174d23823524672a2656eed5cf34eff27c2974deebf2aa6226e3f06005ea8db5891a079fe9e47089b2a8bbdbdcbb076ebbd9c8fdc6246c00a34176a1c46a924ab4c3877215eb384238b3ad6ac559d90e22170d6915c7150a1858eb3f20a1847642018840b49c335074496991fb3193914f5213846ff8bf5b389298d797dfdd116caec17f13152c9699caab72a96d364134266030e67ada0de8d2bb05091f7d855fe1c435574856b0f8de9dc6af14ce179e3c0b6b563ccb8e02900fa9412784b0e5fa71a6e4499fecd1343d289daeb929d0cbd96f9f4501bc9d6bad0b4f462aaf2556ce92ae6438bb3e3aa258c8c4ba6646f99f5a3d4f14f677353722cc81a8ef1f68d41ad1bef785b248faee830613461239487bee1b53748f95db78d4f30d079a39a2286fb3df3472d330f6f11fc7d1939a923c50263b3e0314037ec808df7cec279df5785fa2124d1650563799defc378cb9506ee7142eb108b3f4125ade3d9a73646bfda56956c44895b2ad51d358eff496d1c1a885c30b85b50eca89bf14ee50a24301805f1691b3a391d7575060000000000000090491c60bdab122222c66cbb155452a01cb9750d14ffdc77ad24c7b74353bf38c8185c769c1409ac8101d6784c9510790dd1df8fa6f2b4dbdbde3bdcbf6bfc456f68b680f2595853178e04a32e9c56d66fd2210fb0fc0e3cda61e6980e16e47ae8071182af80950c43ba221fe072e6945107a6edcd38bfeb201a657969bf340960a67e30987e56c953a177404fdf67b5d99bbc06d705a0fc9659336b458ea075ddfe59706738d1e65c505272000000000000000000ff00dfe3e14700000000000000e3ffffff00"}) 0s ago: executing program 7 (id=11173): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) recvmmsg$unix(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000003c0)=""/4116, 0x1014}], 0x1}}], 0x1, 0x10000, 0x0) kernel console output (not intermixed with test programs): ng to 7 [ 907.121707][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 907.138293][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.149239][ T24] usb 3-1: Product: syz [ 907.153428][ T24] usb 3-1: Manufacturer: syz [ 907.160122][ T24] usb 3-1: SerialNumber: syz [ 907.424974][ T48] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 907.587469][ T48] usb 6-1: config 0 has no interfaces? [ 907.597965][ T48] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 907.607496][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.616494][ T48] usb 6-1: Product: syz [ 907.620868][ T48] usb 6-1: Manufacturer: syz [ 907.625656][ T48] usb 6-1: SerialNumber: syz [ 907.642378][ T48] usb 6-1: config 0 descriptor?? [ 907.909096][T15514] usb 6-1: USB disconnect, device number 100 [ 908.220177][ T24] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 908.390351][T29642] syzkaller1: entered promiscuous mode [ 908.419679][T29642] syzkaller1: entered allmulticast mode [ 908.502974][ T24] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 908.593304][ T24] usb 3-1: USB disconnect, device number 21 [ 908.617805][ T24] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 909.294923][ T5896] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 909.444989][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 909.452152][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 909.474413][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 909.487268][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 909.498104][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 909.509931][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 909.528695][ T5896] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 909.538313][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.546915][ T5896] usb 3-1: Product: syz [ 909.551302][ T5896] usb 3-1: Manufacturer: syz [ 909.556418][ T5896] usb 3-1: SerialNumber: syz [ 909.565167][ T5896] usb 3-1: config 0 descriptor?? [ 909.705777][ T9] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 909.875027][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 909.886421][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.898348][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 909.909427][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 909.922845][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 909.933305][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.966160][ T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 909.981091][ T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 909.984172][ T5896] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 909.999111][ T9] usb 6-1: Manufacturer: syz [ 910.023869][ T5896] input input173: Device does not respond to id packet M [ 910.032921][ T5896] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 910.038055][ T9] usb 6-1: config 0 descriptor?? [ 910.051274][ T5896] input input173: Device does not respond to id packet P [ 910.088131][ T5896] iforce 3-1:0.0: usb_submit_urb failed: -32 [ 910.094184][ T5896] input input173: Device does not respond to id packet B [ 910.308939][ T5896] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 910.315507][ T5896] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 910.336374][ T5896] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 910.352997][ T5896] iforce 3-1:0.0: usb_submit_urb failed: -71 [ 910.380550][ T5896] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input173 [ 910.436627][ T9] rc_core: IR keymap rc-hauppauge not found [ 910.442567][ T9] Registered IR keymap rc-empty [ 910.443413][ T5896] usb 3-1: USB disconnect, device number 22 [ 910.486656][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.531278][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.573914][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 910.602447][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input174 [ 910.637759][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.675138][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.715509][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.740199][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.774994][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.815273][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.835238][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.880516][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.924984][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 910.962702][ T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 911.029201][ T9] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 911.058365][ T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 911.123747][ T9] usb 6-1: USB disconnect, device number 101 [ 911.234919][ T5896] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 911.422091][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 911.438882][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.465154][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.491205][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 911.510578][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.529533][ T5896] usb 3-1: config 0 descriptor?? [ 911.558625][ T5896] hub 3-1:0.0: USB hub found [ 911.765639][ T5896] hub 3-1:0.0: 1 port detected [ 912.036162][T29736] input: syz0 as /devices/virtual/input/input175 [ 912.289261][T29746] KVM: debugfs: duplicate directory 29746-5 [ 912.402014][ T5896] hub 3-1:0.0: activate --> -90 [ 912.812592][ T24] usb 3-1: USB disconnect, device number 23 [ 912.818755][ T5896] usb 3-1-port1: cannot disable (err = -71) [ 913.058436][ T5904] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 913.235310][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 913.252788][ T5904] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 913.275508][ T5904] usb 2-1: config 0 has no interface number 0 [ 913.281647][ T5904] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 913.302326][ T5904] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 913.315105][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.323113][ T5904] usb 2-1: Product: syz [ 913.354886][ T5904] usb 2-1: Manufacturer: syz [ 913.364493][ T5904] usb 2-1: SerialNumber: syz [ 913.395930][ T5904] usb 2-1: config 0 descriptor?? [ 913.415986][ T5903] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 913.435910][ T5904] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 913.447904][ T5904] em28xx 2-1:0.132: Video interface 132 found: [ 913.605121][ T5903] usb 6-1: Using ep0 maxpacket: 8 [ 913.616891][ T5903] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 913.654001][T29801] netlink: 'syz.6.9916': attribute type 10 has an invalid length. [ 913.668645][ T5903] usb 6-1: config 150 has no interface number 0 [ 913.686298][ T5903] usb 6-1: config 150 interface 204 has no altsetting 0 [ 913.696763][T29801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.726242][ T5903] usb 6-1: config 150 interface 1 has no altsetting 0 [ 913.726482][T29801] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 913.801647][ T5903] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 913.833648][T29801] netlink: 'syz.6.9916': attribute type 10 has an invalid length. [ 913.841718][T29801] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9916'. [ 913.843824][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.860016][T29801] batadv0: entered promiscuous mode [ 913.865346][ T5904] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 913.872381][T29801] batadv0: entered allmulticast mode [ 913.884544][ T5903] usb 6-1: Product: syz [ 913.900565][ T5903] usb 6-1: Manufacturer: syz [ 913.907129][T29801] bond0: (slave batadv0): Releasing backup interface [ 913.908808][ T5903] usb 6-1: SerialNumber: syz [ 914.042118][T29801] bridge0: port 3(batadv0) entered blocking state [ 914.050794][T29801] bridge0: port 3(batadv0) entered disabled state [ 914.145120][ T3479] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 914.154375][ T3479] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 914.218776][ T5903] xr_serial 6-1:150.204: xr_serial converter detected [ 914.965397][ T5904] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 914.997866][T29766] em28xx 2-1:0.132: failed to trigger read from i2c address 0x0 (error=-5) [ 915.009468][ T5904] em28xx 2-1:0.132: board has no eeprom [ 915.035479][ T5903] usb 6-1: xr_serial converter now attached to ttyUSB0 [ 915.118299][ T5904] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 915.143538][ T5904] em28xx 2-1:0.132: analog set to bulk mode. [ 915.156340][ T5926] em28xx 2-1:0.132: Registering V4L2 extension [ 915.180206][ T5904] usb 2-1: USB disconnect, device number 10 [ 915.216631][ T5904] em28xx 2-1:0.132: Disconnecting em28xx [ 915.270634][T29817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9924'. [ 915.282626][ T5903] usb 6-1: USB disconnect, device number 102 [ 915.295902][ T5903] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 915.314503][ T5903] xr_serial 6-1:150.204: device disconnected [ 915.324493][T29817] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9924'. [ 915.384938][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 915.423450][ T5926] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 915.442503][ T5926] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 915.454860][ T5926] em28xx 2-1:0.132: No AC97 audio processor [ 915.478243][ T5926] usb 2-1: Decoder not found [ 915.482861][ T5926] em28xx 2-1:0.132: failed to create media graph [ 915.513525][ T5926] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 915.533138][ T5926] em28xx 2-1:0.132: Remote control support is not available for this card. [ 915.536579][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 915.547426][ T5904] em28xx 2-1:0.132: Closing input extension [ 915.566738][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 915.580582][ T5904] em28xx 2-1:0.132: Freeing device [ 915.586063][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 915.617640][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 915.647039][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.682993][ T24] usb 3-1: Product: syz [ 915.695983][ T24] usb 3-1: Manufacturer: syz [ 915.712010][ T24] usb 3-1: SerialNumber: syz [ 915.935188][ T24] usb 3-1: 0:2 : does not exist [ 915.966723][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 916.029263][ T24] usb 3-1: USB disconnect, device number 24 [ 916.110244][ T9404] udevd[9404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 916.241819][T29841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 916.563066][T29853] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.9939'. [ 917.271267][T29881] netlink: 'syz.5.9951': attribute type 10 has an invalid length. [ 917.282627][T29881] netlink: 'syz.5.9951': attribute type 10 has an invalid length. [ 917.292289][T29881] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9951'. [ 917.301997][T29881] batadv0: entered allmulticast mode [ 917.309905][T29881] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 917.945066][ T5904] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 918.104918][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 918.112658][ T5904] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 918.124166][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 918.132429][ T5904] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 918.151626][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.171219][ T5904] usb 3-1: config 0 descriptor?? [ 918.273886][T29909] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9962'. [ 918.625558][ T5904] nzxt-smart2 0003:1E71:2009.0095: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 918.720242][ T30] audit: type=1804 audit(1763561897.587:2433): pid=29925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.9965" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=146008 res=1 errno=0 [ 918.835277][T29931] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9967'. [ 918.844181][T29931] netlink: 'syz.5.9967': attribute type 12 has an invalid length. [ 918.932203][T29931] netlink: 'syz.5.9967': attribute type 13 has an invalid length. [ 918.960750][T29931] vxlan0: entered promiscuous mode [ 918.971996][ T3479] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 918.982810][ T3479] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.005304][ T3479] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.018553][ T3479] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 919.060546][T15514] usb 3-1: USB disconnect, device number 25 [ 920.241386][T20058] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 920.394902][T20058] usb 6-1: Using ep0 maxpacket: 16 [ 920.415931][T20058] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 920.424657][T20058] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.449058][T20058] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 920.469550][T20058] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 920.483866][T20058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.493437][T20058] usb 6-1: Product: syz [ 920.497790][T20058] usb 6-1: Manufacturer: syz [ 920.502389][T20058] usb 6-1: SerialNumber: syz [ 920.936808][T20058] usb 6-1: 0:2 : does not exist [ 921.764721][ T5903] usb 6-1: USB disconnect, device number 103 [ 922.248251][T30008] vivid-000: disconnect [ 922.256736][T30007] vivid-000: reconnect [ 923.785012][T29664] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 923.946040][T29664] usb 3-1: Using ep0 maxpacket: 16 [ 923.959085][T29664] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 923.979871][T29664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 924.023018][T29664] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 924.053078][T29664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.068774][T29664] usb 3-1: Product: syz [ 924.072968][T29664] usb 3-1: Manufacturer: syz [ 924.095369][T29664] usb 3-1: SerialNumber: syz [ 924.108986][T29664] usb 3-1: config 0 descriptor?? [ 924.128393][T29664] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 924.144930][T29664] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 924.750032][T29664] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 924.758474][T29664] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 924.975326][T29664] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 924.999076][T29664] em28xx 3-1:0.0: No AC97 audio processor [ 924.999410][T30094] input: syz1 as /devices/virtual/input/input176 [ 925.040650][T29664] usb 3-1: USB disconnect, device number 26 [ 925.066902][T29664] em28xx 3-1:0.0: Disconnecting em28xx [ 925.109432][T29664] em28xx 3-1:0.0: Freeing device [ 925.570980][T30107] input: syz1 as /devices/virtual/input/input177 [ 926.234962][T29664] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 926.297517][ T30] audit: type=1326 audit(1763561905.157:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30140 comm="syz.6.10036" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704d539 code=0x0 [ 926.405986][T29664] usb 3-1: Using ep0 maxpacket: 32 [ 926.414683][T29664] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 926.424432][T29664] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.432712][T29664] usb 3-1: Product: syz [ 926.438479][T29664] usb 3-1: Manufacturer: syz [ 926.443065][T29664] usb 3-1: SerialNumber: syz [ 926.449862][T29664] usb 3-1: config 0 descriptor?? [ 926.458237][T29664] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 926.474901][ T5903] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 926.625020][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 926.632487][ T5903] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 926.641828][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.652454][ T5903] usb 6-1: config 0 descriptor?? [ 926.866252][ T5903] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 926.875946][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 926.888308][ T5903] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 926.898325][ T5903] usb 6-1: media controller created [ 926.920237][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 927.069980][ T5903] az6027: usb out operation failed. (-71) [ 927.076980][ T5903] az6027: usb out operation failed. (-71) [ 927.082716][ T5903] stb0899_attach: Driver disabled by Kconfig [ 927.088792][ T5903] az6027: no front-end attached [ 927.088792][ T5903] [ 927.096305][ T5903] az6027: usb out operation failed. (-71) [ 927.103756][ T5903] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 927.127205][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input178 [ 927.146914][ T5903] dvb-usb: schedule remote query interval to 400 msecs. [ 927.153882][ T5903] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 927.182441][ T5903] usb 6-1: USB disconnect, device number 104 [ 927.284850][ T5903] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 927.627140][ T30] audit: type=1326 audit(1763561906.497:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.10043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 927.662214][ T30] audit: type=1326 audit(1763561906.497:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.10043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 927.688294][T29664] gspca_topro: reg_w err -71 [ 927.690133][ T30] audit: type=1326 audit(1763561906.497:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.10043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 927.715696][T29664] gspca_topro: Sensor soi763a [ 927.775056][T29664] usb 3-1: USB disconnect, device number 27 [ 927.813332][ T30] audit: type=1326 audit(1763561906.517:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.10043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 927.856295][ T30] audit: type=1326 audit(1763561906.517:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.10043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 927.966357][ T30] audit: type=1326 audit(1763561906.517:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.10043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 928.045540][ T30] audit: type=1326 audit(1763561906.517:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.10043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 928.100340][ T30] audit: type=1326 audit(1763561906.517:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.10043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf708d558 code=0x7ffc0000 [ 928.160751][ T30] audit: type=1326 audit(1763561906.517:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.10043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 928.759370][T30191] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 929.116119][T30209] netlink: 'syz.2.10068': attribute type 2 has an invalid length. [ 929.124169][T30209] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10068'. [ 929.370413][T30217] netlink: 'syz.2.10072': attribute type 8 has an invalid length. [ 929.379269][T30217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10072'. [ 929.402566][T30217] gretap0: entered promiscuous mode [ 929.435896][T30217] gretap0: left promiscuous mode [ 929.453499][T30221] vivid-000: disconnect [ 929.467512][T30220] vivid-000: reconnect [ 929.684625][T30227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10077'. [ 929.888961][T30229] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 930.937040][T30254] netlink: 35 bytes leftover after parsing attributes in process `syz.1.10089'. [ 930.957645][T30254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10089'. [ 931.448413][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.454761][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.934903][T29664] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 933.108704][T29664] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 933.118280][T29664] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.133647][T29664] usb 6-1: Product: syz [ 933.138185][T29664] usb 6-1: Manufacturer: syz [ 933.143613][T29664] usb 6-1: SerialNumber: syz [ 933.159988][T29664] usb 6-1: config 0 descriptor?? [ 933.588653][T29664] airspy 6-1:0.0: Board ID: 00 [ 933.593471][T29664] airspy 6-1:0.0: Firmware version: [ 934.404065][T29664] airspy 6-1:0.0: usb_control_msg() failed -71 request 0f [ 934.435305][T29664] airspy 6-1:0.0: Registered as swradio24 [ 934.451209][T29664] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 934.488928][T29664] usb 6-1: USB disconnect, device number 105 [ 934.806157][ T5903] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 934.977663][ T5903] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 935.010638][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.044650][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.064833][ T5903] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 935.097546][ T5903] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 935.115101][ T5903] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 935.123358][ T5903] usb 2-1: Manufacturer: syz [ 935.145590][ T5903] usb 2-1: config 0 descriptor?? [ 935.563846][ T5903] appleir 0003:05AC:8243.0096: unknown main item tag 0x0 [ 935.612592][ T5903] appleir 0003:05AC:8243.0096: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 935.820378][T30337] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10122'. [ 935.865095][T30337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10122'. [ 937.043878][T30362] netlink: 'syz.5.10134': attribute type 1 has an invalid length. [ 937.097190][T30362] 8021q: adding VLAN 0 to HW filter on device bond3 [ 937.122024][T30362] bond3: (slave geneve2): making interface the new active one [ 937.130972][T30362] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 937.140341][ T61] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.151427][ T61] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.162042][ T61] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.171860][ T61] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.566214][T29664] usb 2-1: USB disconnect, device number 11 [ 937.840730][T30388] syzkaller1: entered promiscuous mode [ 937.847728][T30388] syzkaller1: entered allmulticast mode [ 938.375035][T15514] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 938.485495][T29664] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 938.526609][T15514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.537658][T15514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.547496][T15514] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 938.556816][T15514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.573283][T15514] usb 3-1: config 0 descriptor?? [ 938.651385][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 938.662770][T29664] usb 2-1: unable to get BOS descriptor or descriptor too short [ 938.675144][T29664] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 938.687315][T29664] usb 2-1: config 6 has no interface number 0 [ 938.693535][T29664] usb 2-1: config 6 interface 200 altsetting 8 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 938.707726][T29664] usb 2-1: config 6 interface 200 has no altsetting 0 [ 938.719059][T29664] usb 2-1: string descriptor 0 read error: -22 [ 938.726137][T29664] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 938.735913][T29664] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 938.760675][T29664] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 939.000894][T30406] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10153'. [ 939.007787][T15514] cm6533_jd 0003:0D8C:0022.0097: unknown main item tag 0x0 [ 939.036674][T30406] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10153'. [ 939.046127][T15514] cm6533_jd 0003:0D8C:0022.0097: unknown main item tag 0x0 [ 939.053224][T30406] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10153'. [ 939.078365][T15514] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0097/input/input179 [ 939.154356][T15514] cm6533_jd 0003:0D8C:0022.0097: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 939.206504][T30394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.255735][T30394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.333301][ T9] usb 3-1: USB disconnect, device number 28 [ 939.437393][T30409] fido_id[30409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 939.715057][T15514] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 939.794649][T29664] dvb-usb: bulk message failed: -71 (3/0) [ 939.811521][T29664] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 939.829503][T29664] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 939.854896][T29664] usb 2-1: media controller created [ 939.880276][T15514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 939.905979][T29664] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 939.924920][T15514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.960579][T15514] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 939.972647][T15514] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 939.992022][T15514] usb 6-1: Manufacturer: syz [ 940.000088][T29664] dvb-usb: bulk message failed: -71 (6/0) [ 940.020712][T15514] usb 6-1: config 0 descriptor?? [ 940.027433][T29664] dvb-usb: bulk message failed: -71 (6/0) [ 940.033330][T29664] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 940.075732][T29664] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input180 [ 940.126097][T29664] dvb-usb: schedule remote query interval to 150 msecs. [ 940.139908][T29664] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 940.193982][T29664] usb 2-1: USB disconnect, device number 12 [ 940.356631][T29664] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 941.059304][T15514] uclogic 0003:256C:006D.0098: v1 frame probing failed: -71 [ 941.094015][T15514] uclogic 0003:256C:006D.0098: failed probing parameters: -71 [ 941.132281][T15514] uclogic 0003:256C:006D.0098: probe with driver uclogic failed with error -71 [ 941.184404][T15514] usb 6-1: USB disconnect, device number 106 [ 942.495225][ T24] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 942.588630][T30470] loop6: detected capacity change from 0 to 7 [ 942.625984][T30470] Dev loop6: unable to read RDB block 7 [ 942.632859][T30470] loop6: AHDI p3 p4 [ 942.661619][T30470] loop6: partition table partially beyond EOD, truncated [ 942.685604][T30470] loop6: p3 start 1886353253 is beyond EOD, truncated [ 942.697437][ T24] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 942.717126][ T24] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 942.749414][ T24] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 942.772698][ T24] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 942.792811][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.852769][T30466] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 943.177778][T30486] netlink: 51 bytes leftover after parsing attributes in process `syz.1.10190'. [ 943.975615][T30513] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10202'. [ 944.284484][T30526] netlink: 'syz.1.10208': attribute type 12 has an invalid length. [ 944.346722][T30528] loop6: detected capacity change from 0 to 524287999 [ 944.458548][ T24] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 944.479779][ T24] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input181 [ 944.553045][ T24] usb 6-1: USB disconnect, device number 107 [ 944.559132][ C1] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 944.758819][T30537] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.10213'. [ 944.928528][T30544] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10215'. [ 945.022441][T30544] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 945.467765][T30558] misc userio: Invalid payload size [ 946.374880][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 946.537489][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.559205][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.571609][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 946.586893][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 946.596767][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.610282][ T9] usb 3-1: config 0 descriptor?? [ 947.063885][ T9] plantronics 0003:047F:FFFF.0099: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 947.621142][T30607] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 948.276575][ C0] plantronics 0003:047F:FFFF.0099: usb_submit_urb(ctrl) failed: -1 [ 948.775257][T30622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.784658][T30622] team0: Port device bond0 added [ 949.065660][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 949.087444][ T24] usb 3-1: USB disconnect, device number 29 [ 949.174001][T30634] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 949.182089][T30634] syzkaller1: Refused to change device type [ 949.251038][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 949.267313][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 949.286149][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 949.311753][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 949.339111][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 949.362102][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 949.386836][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 949.398183][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.630176][ T9] usb 2-1: usb_control_msg returned -32 [ 949.636607][ T9] usbtmc 2-1:16.0: can't read capabilities [ 949.795162][T15514] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 949.956204][T15514] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 949.965989][T15514] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 949.976378][T15514] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 949.985402][T15514] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 949.996900][T15514] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 950.008151][T15514] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 950.021266][T15514] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 950.030345][T15514] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 950.039550][T15514] usb 3-1: Product: syz [ 950.043705][T15514] usb 3-1: Manufacturer: syz [ 950.051104][T30649] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 950.059795][T15514] cdc_wdm 3-1:1.0: skipping garbage [ 950.065085][T15514] cdc_wdm 3-1:1.0: skipping garbage [ 950.071316][T15514] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device [ 950.077876][T15514] cdc_wdm 3-1:1.0: Unknown control protocol [ 950.277502][ T24] usb 3-1: USB disconnect, device number 30 [ 950.539462][T30660] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 951.180421][T30685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10273'. [ 951.497758][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 951.497773][ T30] audit: type=1326 audit(1763561930.367:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30698 comm="syz.5.10279" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad539 code=0x0 [ 951.525939][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 951.684974][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 951.693098][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.703984][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 951.715122][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 951.724275][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.732413][ T24] usb 3-1: Product: syz [ 951.736703][ T24] usb 3-1: Manufacturer: syz [ 951.741297][ T24] usb 3-1: SerialNumber: syz [ 951.804661][ T30] audit: type=1326 audit(1763561930.667:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30623 comm="syz.1.10245" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7fc00000 [ 951.842825][ T5896] usb 2-1: USB disconnect, device number 13 [ 951.954666][ T24] usb 3-1: 0:2 : does not exist [ 951.966193][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 951.994322][ T24] usb 3-1: USB disconnect, device number 31 [ 952.037515][ T9404] udevd[9404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 952.520635][ T30] audit: type=1326 audit(1763561931.387:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30706 comm="syz.5.10283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 952.583399][ T30] audit: type=1326 audit(1763561931.387:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30706 comm="syz.5.10283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 952.605625][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.617537][ T30] audit: type=1326 audit(1763561931.387:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30706 comm="syz.5.10283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 952.639718][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.648254][ T30] audit: type=1326 audit(1763561931.387:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30706 comm="syz.5.10283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 952.716030][ T30] audit: type=1326 audit(1763561931.387:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30706 comm="syz.5.10283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 952.755453][ T30] audit: type=1326 audit(1763561931.387:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30706 comm="syz.5.10283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 952.804959][ T30] audit: type=1326 audit(1763561931.387:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30706 comm="syz.5.10283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 952.854471][ T30] audit: type=1326 audit(1763561931.387:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30706 comm="syz.5.10283" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 952.919547][T30720] loop6: detected capacity change from 0 to 7 [ 952.927949][ T9404] Dev loop6: unable to read RDB block 7 [ 952.933530][ T9404] loop6: AHDI p1 p2 p3 [ 952.948912][ T9404] loop6: partition table partially beyond EOD, truncated [ 952.957747][ T9404] loop6: p1 start 4217409618 is beyond EOD, truncated [ 952.965812][ T9404] loop6: p2 size 98 extends beyond EOD, truncated [ 952.979871][T30720] Dev loop6: unable to read RDB block 7 [ 952.985973][T30720] loop6: AHDI p1 p2 p3 [ 952.991210][T30720] loop6: partition table partially beyond EOD, truncated [ 953.003384][T30720] loop6: p1 start 4217409618 is beyond EOD, truncated [ 953.016970][T30720] loop6: p2 size 98 extends beyond EOD, truncated [ 953.088302][ T9404] udevd[9404]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 953.159840][ T9404] udevd[9404]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 953.880690][T30751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10302'. [ 954.068495][ T5896] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 954.080959][ T5896] hid-generic 0000:0000:0000.009A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 954.214928][ T5903] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 954.226266][T30760] kvm: kvm [30759]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 954.315026][T15514] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 954.386256][ T5903] usb 3-1: Using ep0 maxpacket: 16 [ 954.393139][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.404755][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.414574][ T5903] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 954.424236][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.434514][ T5903] usb 3-1: config 0 descriptor?? [ 954.477983][T15514] usb 2-1: config 0 has no interfaces? [ 954.484474][T15514] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 954.493669][T15514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 954.501927][T15514] usb 2-1: SerialNumber: syz [ 954.508845][T15514] usb 2-1: config 0 descriptor?? [ 954.615116][ T9] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 954.779885][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 954.792711][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 954.803477][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 954.816337][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.839109][T30764] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 954.853051][ T5903] ntrig 0003:1B96:0008.009B: unknown main item tag 0x0 [ 954.870859][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 954.882632][ T5903] ntrig 0003:1B96:0008.009B: unknown main item tag 0x0 [ 954.898597][ T5903] ntrig 0003:1B96:0008.009B: unknown main item tag 0x0 [ 954.919624][ T5903] ntrig 0003:1B96:0008.009B: unknown main item tag 0x0 [ 954.927451][ T5903] ntrig 0003:1B96:0008.009B: unknown main item tag 0x0 [ 954.942010][ T5903] ntrig 0003:1B96:0008.009B: unknown main item tag 0x0 [ 954.962225][ T5903] ntrig 0003:1B96:0008.009B: unknown main item tag 0x0 [ 955.098222][ T9] usb 6-1: USB disconnect, device number 108 [ 955.970547][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10318'. [ 955.981222][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10318'. [ 955.992072][T30788] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10318'. [ 956.150712][T30795] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10321'. [ 956.163077][T30795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10321'. [ 956.172306][T30795] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10321'. [ 957.066179][ T5903] ntrig 0003:1B96:0008.009B: hidraw1: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.2-1/input0 [ 957.093335][T29664] usb 2-1: USB disconnect, device number 14 [ 957.146096][ T5903] usb 3-1: USB disconnect, device number 32 [ 957.244015][T30817] fido_id[30817]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 957.428587][T30831] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.10336'. [ 958.064746][T30852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10346'. [ 958.078675][T30852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10346'. [ 958.095361][T30852] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10346'. [ 958.204875][ T5926] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 958.253892][T30858] input: syz0 as /devices/virtual/input/input183 [ 958.376245][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 958.398780][ T5926] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 958.407817][ T5926] usb 2-1: config 0 has no interface number 0 [ 958.421232][ T5926] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 958.447162][ T5926] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 958.457660][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.470001][ T5926] usb 2-1: config 0 descriptor?? [ 958.485075][ T5926] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 958.592230][T30868] kvm: kvm [30867]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 958.684250][T30873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10356'. [ 958.699005][ T24] usb 2-1: USB disconnect, device number 15 [ 958.709859][T30873] tipc: Started in network mode [ 958.717751][T30873] tipc: Node identity ac14140f, cluster identity 4711 [ 958.731472][T30873] tipc: New replicast peer: 255.255.255.255 [ 958.741964][T30873] tipc: Enabled bearer , priority 10 [ 959.528352][T30901] kvm: kvm [30900]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x4 [ 959.856143][ T24] tipc: Node number set to 2886997007 [ 960.705172][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 960.878373][ T24] usb 2-1: config 0 has an invalid interface number: 217 but max is 0 [ 960.904884][ T24] usb 2-1: config 0 has no interface number 0 [ 960.924344][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 960.924360][ T30] audit: type=1326 audit(1763561939.787:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.2.10386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 960.926536][ T24] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 960.952602][ T30] audit: type=1326 audit(1763561939.787:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.2.10386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 960.952651][ T30] audit: type=1326 audit(1763561939.797:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.2.10386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 960.952698][ T30] audit: type=1326 audit(1763561939.797:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.2.10386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 960.952739][ T30] audit: type=1326 audit(1763561939.797:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.2.10386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 960.952780][ T30] audit: type=1326 audit(1763561939.797:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.2.10386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 960.952821][ T30] audit: type=1326 audit(1763561939.797:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.2.10386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 960.952862][ T30] audit: type=1326 audit(1763561939.797:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.2.10386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 960.952900][ T30] audit: type=1326 audit(1763561939.797:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.2.10386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 961.006586][ C0] vkms_vblank_simulate: vblank timer overrun [ 961.025064][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.123244][ T30] audit: type=1326 audit(1763561939.917:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30944 comm="syz.2.10386" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 961.185655][ T24] usb 2-1: Product: syz [ 961.189843][ T24] usb 2-1: Manufacturer: syz [ 961.194439][ T24] usb 2-1: SerialNumber: syz [ 961.245609][ T24] usb 2-1: config 0 descriptor?? [ 961.265161][ T24] hub 2-1:0.217: bad descriptor, ignoring hub [ 961.271270][ T24] hub 2-1:0.217: probe with driver hub failed with error -5 [ 961.472734][ T24] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 961.489101][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 961.519014][ T24] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 961.774898][ T24] usb 2-1: media controller created [ 961.822900][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 961.934092][ T24] DVB: Unable to find symbol dib7000p_attach() [ 961.944850][ T24] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 962.046521][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 962.052636][ T24] Registered IR keymap rc-empty [ 962.058765][ T24] dvb-usb: could not initialize remote control. [ 962.065520][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 962.093844][ T24] usb 2-1: USB disconnect, device number 16 [ 962.096231][ T5926] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 962.144651][T30956] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10389'. [ 962.167344][ T24] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 962.276009][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 962.283283][ T5926] usb 6-1: config 0 has an invalid interface number: 172 but max is 0 [ 962.291827][ T5926] usb 6-1: config 0 has no interface number 0 [ 962.304836][ T5926] usb 6-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 962.332001][ T5926] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 962.355208][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.373885][ T5926] usb 6-1: Product: syz [ 962.388849][ T5926] usb 6-1: Manufacturer: syz [ 962.393469][ T5926] usb 6-1: SerialNumber: syz [ 962.430536][ T5926] usb 6-1: config 0 descriptor?? [ 962.443658][ T5926] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 962.529930][T30965] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10395'. [ 963.260296][ T5926] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input185 [ 963.495421][ T5926] usb 6-1: USB disconnect, device number 109 [ 963.800795][T30982] syzkaller1: entered promiscuous mode [ 963.812533][T30982] syzkaller1: entered allmulticast mode [ 963.894992][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 964.115368][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 964.132783][ T9] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 964.159052][ T9] usb 2-1: config 0 has no interface number 0 [ 964.176113][ T9] usb 2-1: config 0 interface 230 has no altsetting 0 [ 964.193740][ T9] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 964.212310][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.239429][ T9] usb 2-1: Product: syz [ 964.249491][ T9] usb 2-1: Manufacturer: syz [ 964.262399][ T9] usb 2-1: SerialNumber: syz [ 964.288534][ T9] usb 2-1: config 0 descriptor?? [ 964.314414][ T9] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 964.357116][ T9] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 964.401997][T29664] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 964.584848][T29664] usb 3-1: Using ep0 maxpacket: 32 [ 964.592331][T29664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 964.621475][T29664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 964.649968][T29664] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 964.668145][T29664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.679745][T29664] usb 3-1: config 0 descriptor?? [ 964.688196][T29664] hub 3-1:0.0: USB hub found [ 964.897174][T29664] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 965.130271][T29664] hid-generic 0003:046D:C31C.009C: item fetching failed at offset 0/1 [ 965.139731][T29664] hid-generic 0003:046D:C31C.009C: probe with driver hid-generic failed with error -22 [ 965.465246][ T5903] usb 3-1: USB disconnect, device number 33 [ 965.508015][T31025] netlink: 'syz.5.10418': attribute type 1 has an invalid length. [ 965.532186][T31025] 8021q: adding VLAN 0 to HW filter on device bond4 [ 965.558348][T31025] bond4: (slave geneve3): making interface the new active one [ 965.567844][T31025] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 965.966709][T31035] input: syz0 as /devices/virtual/input/input186 [ 966.595082][ T5903] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 966.606903][ T9] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 966.744870][ T5896] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 966.756325][ T5903] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 966.767510][ T5903] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 966.777703][ T5903] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 966.786963][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.803078][T31041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 966.813564][ T5903] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 966.897376][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 966.903914][ T5896] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 966.914527][ T5896] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 966.926589][ T5896] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 966.938237][ T5896] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 966.953526][ T5896] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 966.962651][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.971322][ T5896] usb 6-1: Product: syz [ 966.976576][ T5896] usb 6-1: Manufacturer: syz [ 966.981182][ T5896] usb 6-1: SerialNumber: syz [ 966.991596][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 967.000199][ T5896] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input187 [ 967.034118][ T5903] usb 3-1: USB disconnect, device number 34 [ 967.215067][ T5896] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 967.224052][ T5896] (id 0x00) [ 967.296704][ T5896] rc_core: IR keymap rc-imon-pad not found [ 967.310002][ T5896] Registered IR keymap rc-empty [ 967.314974][ T5896] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 967.325560][ T5896] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 967.416297][ T5896] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0 [ 967.429833][ T5896] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input188 [ 967.453746][ T5896] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:110> initialized [ 967.641413][T31046] imon:vfd_write: invalid payload size [ 967.652035][ T5896] usb 6-1: USB disconnect, device number 110 [ 967.851803][T15514] usb 2-1: USB disconnect, device number 17 [ 968.435085][T15514] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 968.599990][T15514] usb 2-1: Using ep0 maxpacket: 16 [ 968.613413][T15514] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 968.632144][T15514] usb 2-1: config 0 interface 0 has no altsetting 0 [ 968.640477][T15514] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 968.651155][T15514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.665707][T15514] usb 2-1: config 0 descriptor?? [ 968.696638][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 968.783903][T31094] input: syz0 as /devices/virtual/input/input189 [ 968.857596][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 968.866842][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 968.891029][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 968.900609][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 968.911994][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 968.927913][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 968.937408][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 968.945859][ T9] usb 3-1: Product: syz [ 968.950239][ T9] usb 3-1: Manufacturer: syz [ 968.963309][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 968.972365][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 968.983026][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 968.989505][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 969.023454][ T30] kauditd_printk_skb: 2443 callbacks suppressed [ 969.023472][ T30] audit: type=1326 audit(1763561947.887:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31099 comm="syz.5.10450" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad539 code=0x0 [ 969.110742][T15514] nzxt-smart2 0003:1E71:2009.009D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 969.221452][T29664] usb 3-1: USB disconnect, device number 35 [ 969.521574][ T9] usb 2-1: USB disconnect, device number 18 [ 969.968924][T31121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10458'. [ 971.184286][T31157] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10471'. [ 971.201298][T31157] netlink: 64 bytes leftover after parsing attributes in process `syz.7.10471'. [ 972.383889][T31188] loop2: detected capacity change from 0 to 7 [ 972.393598][T31188] Dev loop2: unable to read RDB block 7 [ 972.399658][T31188] loop2: unable to read partition table [ 972.409896][T31188] loop2: partition table beyond EOD, truncated [ 972.416611][T31188] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 972.463291][ T5198] Dev loop2: unable to read RDB block 7 [ 972.471389][ T5198] loop2: unable to read partition table [ 972.482272][ T5198] loop2: partition table beyond EOD, truncated [ 973.362253][T31211] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10495'. [ 973.371749][T31211] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10495'. [ 973.461678][T31213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10496'. [ 973.471008][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030b83c00: rx timeout, send abort [ 973.471210][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030b82c00: rx timeout, send abort [ 973.471396][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030b83c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 973.471551][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030b82c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 974.234883][T29664] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 974.418867][T29664] usb 6-1: Using ep0 maxpacket: 32 [ 974.436563][T29664] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 974.452079][T29664] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 974.474938][T29664] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.482954][T29664] usb 6-1: Product: syz [ 974.493494][T29664] usb 6-1: Manufacturer: syz [ 974.498751][T29664] usb 6-1: SerialNumber: syz [ 974.509159][T29664] usb 6-1: config 0 descriptor?? [ 974.521048][T31227] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 974.533393][T29664] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input190 [ 974.832184][T29664] usb 6-1: USB disconnect, device number 111 [ 974.838368][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 975.128253][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 975.284242][T31266] input: syz1 as /devices/virtual/input/input191 [ 975.294512][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 975.307736][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 975.324545][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 975.340689][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 975.353866][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 975.378818][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.403162][ T9] usb 2-1: config 0 descriptor?? [ 975.842546][ T9] plantronics 0003:047F:FFFF.009E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 976.044936][T29664] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 976.204831][T29664] usb 3-1: Using ep0 maxpacket: 32 [ 976.211721][T29664] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 976.220626][T29664] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 976.229497][T29664] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 976.239286][T29664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 976.253121][T29664] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 976.263737][T29664] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 976.276854][T29664] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 976.285919][T29664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.296376][T29664] usb 3-1: config 0 descriptor?? [ 976.511629][T31285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.511638][T29664] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 976.520729][T31285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.680175][T29664] usb 3-1: USB disconnect, device number 36 [ 977.176883][T29664] usblp1: removed [ 977.769469][T31300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10533'. [ 977.915683][T31308] loop2: detected capacity change from 0 to 7 [ 977.923633][T31308] Dev loop2: unable to read RDB block 7 [ 977.932299][T31308] loop2: unable to read partition table [ 977.940643][T31308] loop2: partition table beyond EOD, truncated [ 977.950254][ T5896] usb 2-1: USB disconnect, device number 19 [ 977.955073][T31308] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 978.842617][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807edf6800: rx timeout, send abort [ 979.014932][ T5896] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 979.166794][ T5896] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 979.177928][ T5896] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 979.187834][ T5896] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 979.196930][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.212445][T31337] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 979.223816][ T5896] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 979.342731][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807edf7400: rx timeout, send abort [ 979.351083][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807edf6800: abort rx timeout. Force session deactivation [ 979.503406][ T5896] usb 2-1: USB disconnect, device number 20 [ 979.850956][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807edf7400: abort rx timeout. Force session deactivation [ 979.984969][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 980.134867][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 980.141265][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 980.153937][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 980.163533][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.173413][ T24] usb 3-1: config 0 descriptor?? [ 980.385364][ T24] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 980.904483][T15514] usb 3-1: USB disconnect, device number 37 [ 981.045071][ T5896] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 981.205020][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 981.211758][ T5896] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 981.220061][ T5896] usb 6-1: config 0 has no interface number 0 [ 981.226347][ T5896] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 981.238543][ T5896] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 981.247661][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.255877][ T5896] usb 6-1: Product: syz [ 981.260023][ T5896] usb 6-1: Manufacturer: syz [ 981.264595][ T5896] usb 6-1: SerialNumber: syz [ 981.273375][ T5896] usb 6-1: config 0 descriptor?? [ 981.279057][T31364] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 981.334914][ T24] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 981.498372][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 981.510166][T31364] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 981.523616][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.533904][ T24] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 981.543348][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.557491][ T24] usb 2-1: config 0 descriptor?? [ 982.125801][ T5896] asix 6-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 982.198226][ T24] usb 2-1: string descriptor 0 read error: -71 [ 982.209768][ T24] uclogic 0003:5543:0047.009F: failed retrieving string descriptor #200: -71 [ 982.220269][ T24] uclogic 0003:5543:0047.009F: failed retrieving pen parameters: -71 [ 982.229146][ T24] uclogic 0003:5543:0047.009F: failed probing pen v2 parameters: -71 [ 982.237768][ T24] uclogic 0003:5543:0047.009F: failed probing parameters: -71 [ 982.256251][ T24] uclogic 0003:5543:0047.009F: probe with driver uclogic failed with error -71 [ 982.277974][ T24] usb 2-1: USB disconnect, device number 21 [ 982.538341][ T5896] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 982.562761][ T5896] asix 6-1:0.188: probe with driver asix failed with error -71 [ 982.583841][ T5896] usb 6-1: USB disconnect, device number 112 [ 983.154893][ T5896] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 983.274734][T31435] kvm: kvm [31434]: vcpu0, guest rIP: 0x8000000 Unhandled WRMSR(0x4000006f) = 0x6 [ 983.314934][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 983.328332][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 983.339413][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 983.354594][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 983.366034][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 983.387005][ T5896] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 983.404901][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.423806][ T5896] usb 3-1: Product: syz [ 983.433391][ T5896] usb 3-1: Manufacturer: syz [ 983.443542][ T5896] usb 3-1: SerialNumber: syz [ 983.464839][ T5896] usb 3-1: config 0 descriptor?? [ 983.471248][T31421] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 983.695211][ T5896] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 983.726772][T31442] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10593'. [ 983.841928][ T5896] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input193 [ 983.941724][ C1] powermate: config urb returned -71 [ 983.942636][T15514] usb 3-1: USB disconnect, device number 38 [ 983.947178][ C1] powermate: usb_submit_urb(config) failed [ 983.947274][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 984.155307][T31451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10595'. [ 984.168184][T31451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10595'. [ 984.179567][T31451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10595'. [ 984.374941][ T5896] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 984.526281][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.536614][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 984.547859][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 984.559271][ T5896] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 984.575360][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.594228][T31450] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 984.617316][ T5896] hub 2-1:1.0: bad descriptor, ignoring hub [ 984.623265][ T5896] hub 2-1:1.0: probe with driver hub failed with error -5 [ 984.641344][ T5896] cdc_wdm 2-1:1.0: skipping garbage [ 984.655695][ T5896] cdc_wdm 2-1:1.0: skipping garbage [ 984.671512][ T5896] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 984.693667][ T5896] cdc_wdm 2-1:1.0: Unknown control protocol [ 984.890770][T31464] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 984.920083][T31464] block device autoloading is deprecated and will be removed. [ 985.532336][T31497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10614'. [ 985.543733][T31497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10614'. [ 985.555233][T31497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10614'. [ 985.556766][T31450] usb 2-1: reset full-speed USB device number 22 using dummy_hcd [ 985.737488][T31450] usb 2-1: device firmware changed [ 985.745098][ T5896] usb 2-1: USB disconnect, device number 22 [ 985.746833][T31450] cdc_wdm 2-1:1.0: Error autopm - -16 [ 985.864867][T29664] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 985.895025][ T5896] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 986.048048][T29664] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 986.057429][T29664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.068954][ T5896] usb 2-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 986.083110][T29664] usb 3-1: config 0 descriptor?? [ 986.088494][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 986.099433][ T5896] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 986.117034][ T5896] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 986.126292][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.148392][T31467] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 986.174614][ T5896] hub 2-1:1.0: bad descriptor, ignoring hub [ 986.196489][ T5896] hub 2-1:1.0: probe with driver hub failed with error -5 [ 986.204286][ T5896] cdc_wdm 2-1:1.0: skipping garbage [ 986.218625][ T5896] cdc_wdm 2-1:1.0: skipping garbage [ 986.223888][ T5896] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 986.575263][ T5896] usb 2-1: USB disconnect, device number 23 [ 986.634918][ T5926] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 986.784871][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 986.791571][ T5926] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 986.804129][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 986.815609][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 986.826888][ T5926] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 986.836963][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.847331][ T5926] usb 6-1: config 0 descriptor?? [ 986.853003][T31515] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 986.863333][ T5926] hub 6-1:0.0: USB hub found [ 987.070333][ T5926] hub 6-1:0.0: 2 ports detected [ 987.239364][T31527] netlink: 88 bytes leftover after parsing attributes in process `syz.6.10629'. [ 987.285247][ T5896] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 987.336852][T29664] usb 3-1: Cannot set autoneg [ 987.341942][T29664] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 987.357536][T29664] usb 3-1: USB disconnect, device number 39 [ 987.437678][ T5896] usb 2-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 987.446830][ T5896] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 987.455995][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.466995][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.476849][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 987.477941][ T5926] hub 6-1:0.0: set hub depth failed [ 987.489974][ T5896] usb 2-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 987.504189][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.513240][ T5926] usb 6-1: USB disconnect, device number 113 [ 987.522028][ T5896] usb 2-1: config 0 descriptor?? [ 987.809084][T31529] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10630'. [ 987.871893][T31531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 987.963570][ T5896] input: HID 28bd:0909 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0909.00A0/input/input194 [ 988.057052][ T5896] uclogic 0003:28BD:0909.00A0: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.1-1/input0 [ 988.241923][ T9] usb 2-1: USB disconnect, device number 24 [ 988.304998][ T5926] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 988.486773][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 988.497948][ T5926] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 988.508196][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.519279][ T5926] usb 3-1: config 0 descriptor?? [ 988.735509][ T5926] usbhid 3-1:0.0: can't add hid device: -71 [ 988.741558][ T5926] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 988.752795][ T5926] usb 3-1: USB disconnect, device number 40 [ 988.809105][ T5896] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 988.965122][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 988.971638][ T5896] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 988.981769][ T5896] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 988.993403][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 989.004324][ T5896] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 989.017687][ T5896] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 989.026840][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.035089][ T5896] usb 6-1: Product: syz [ 989.039264][ T5896] usb 6-1: Manufacturer: syz [ 989.043856][ T5896] usb 6-1: SerialNumber: syz [ 989.051557][ T5896] usb 6-1: config 0 descriptor?? [ 989.057819][T31554] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 989.244911][ T5926] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 989.271947][ T5896] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 989.281759][ T5896] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input195 [ 989.405085][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 989.417996][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.432510][ T5926] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 989.444888][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.456630][ T5926] usb 3-1: config 0 descriptor?? [ 989.530340][ C1] powermate: config urb returned -71 [ 989.537841][ C1] powermate: config urb returned -71 [ 989.543334][ C1] powermate: config urb returned -71 [ 989.548938][ C1] powermate: config urb returned -71 [ 989.559614][ T5896] usb 6-1: USB disconnect, device number 114 [ 989.565748][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 989.671342][ T5926] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 989.700467][ T5926] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input196 [ 990.035530][ T5896] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 990.092539][ C0] powermate: config urb returned -71 [ 990.092987][T29664] usb 3-1: USB disconnect, device number 41 [ 990.097862][ C0] powermate: usb_submit_urb(config) failed [ 990.097921][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 990.194950][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 990.198671][T31578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10649'. [ 990.206521][ T5896] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 990.215029][T31578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10649'. [ 990.222955][ T5896] usb 2-1: config 0 has no interface number 0 [ 990.240536][T31578] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10649'. [ 990.244697][ T5896] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 990.251970][T31578] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10649'. [ 990.268173][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.285065][ T5896] usb 2-1: Product: syz [ 990.298241][ T5896] usb 2-1: Manufacturer: syz [ 990.305018][ T5896] usb 2-1: SerialNumber: syz [ 990.316982][ T5896] usb 2-1: config 0 descriptor?? [ 990.333502][ T5896] smsc95xx v2.0.0 [ 990.743447][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 990.757534][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 991.382943][ T5896] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 991.408440][ T5896] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 991.429531][ T5896] usb 2-1: USB disconnect, device number 25 [ 992.134968][ T5896] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 992.306645][ T5896] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 992.318155][ T5896] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 992.329122][ T5896] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 992.338674][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.350521][T31628] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 992.361992][ T5896] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 992.704843][ T24] usb 3-1: USB disconnect, device number 42 [ 992.891351][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.897856][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.431418][T15514] hid-generic 0000:0000:0000.00A1: unknown main item tag 0x0 [ 993.480048][T15514] hid-generic 0000:0000:0000.00A1: hidraw0: HID v0.00 Device [syz1] on syz0 [ 994.165398][T31675] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10692'. [ 994.209050][T31675] ip_vti0: left promiscuous mode [ 994.225209][T31675] ip_vti0: left allmulticast mode [ 994.231799][T31675] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10692'. [ 994.399344][T31662] hid-generic 0000:0000:0000.00A1: pid 31662 passed too short report [ 995.047418][ T5926] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 995.215005][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 995.227470][ T5926] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 995.236713][ T5926] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 995.246537][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 995.257025][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 995.268172][ T5926] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 995.278216][ T5926] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 995.292863][ T5926] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 995.303521][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.324406][ T5926] usb 3-1: config 0 descriptor?? [ 995.540888][ T5926] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 995.590284][ T30] audit: type=1326 audit(1763561974.457:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31724 comm="syz.1.10715" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d539 code=0x0 [ 995.684955][ T9] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 995.753701][ T5896] usb 3-1: USB disconnect, device number 43 [ 995.763500][ T5896] usblp0: removed [ 995.839764][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 995.849042][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.857237][ T9] usb 6-1: Product: syz [ 995.861661][ T9] usb 6-1: Manufacturer: syz [ 995.866338][ T9] usb 6-1: SerialNumber: syz [ 995.876809][ T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 995.899826][ T5926] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 996.135134][ T9] usb 6-1: USB disconnect, device number 115 [ 996.710019][T31742] netlink: 56 bytes leftover after parsing attributes in process `syz.5.10721'. [ 996.720596][T31742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10721'. [ 996.800900][T31744] loop4: detected capacity change from 0 to 7 [ 996.811225][T31744] Dev loop4: unable to read RDB block 7 [ 996.817900][T31744] loop4: unable to read partition table [ 996.823912][T31744] loop4: partition table beyond EOD, truncated [ 996.835132][T31744] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 996.969416][ T5926] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 996.984126][ T5926] ath9k_htc: Failed to initialize the device [ 996.992356][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 997.354256][T31771] Set syz1 is full, maxelem 14 reached [ 999.645800][ T30] audit: type=1326 audit(1763561978.517:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31846 comm="syz.5.10764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 999.997820][T31859] input: syz1 as /devices/virtual/input/input198 [ 1000.327205][ T30] audit: type=1326 audit(1763561979.197:5013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31846 comm="syz.5.10764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 1000.394984][T29664] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1000.561315][T29664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.580603][T29664] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1000.590002][T29664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.600960][T29664] usb 3-1: config 0 descriptor?? [ 1000.642182][ T30] audit: type=1326 audit(1763561979.507:5014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31877 comm="syz.1.10776" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708d539 code=0x0 [ 1000.663759][ C0] vkms_vblank_simulate: vblank timer overrun [ 1000.794860][ T5896] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 1000.814700][T29664] usbhid 3-1:0.0: can't add hid device: -71 [ 1000.821861][T29664] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1000.832547][T29664] usb 3-1: USB disconnect, device number 44 [ 1000.946272][ T5896] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.956909][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1000.966098][ T5896] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1000.977487][ T5896] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1000.987356][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.999950][T31876] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1001.016607][ T5896] hub 6-1:1.0: bad descriptor, ignoring hub [ 1001.029638][ T5896] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1001.041355][ T5896] cdc_wdm 6-1:1.0: skipping garbage [ 1001.047490][ T5896] cdc_wdm 6-1:1.0: skipping garbage [ 1001.062032][ T5896] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1001.069149][ T5896] cdc_wdm 6-1:1.0: Unknown control protocol [ 1001.315578][ T5926] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1001.464828][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 1001.471398][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.483311][ T5926] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1001.495422][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.508792][ T5926] usb 3-1: config 0 descriptor?? [ 1001.526727][ T5926] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1001.917700][T31876] usb 6-1: reset full-speed USB device number 116 using dummy_hcd [ 1002.086938][T31876] usb 6-1: device firmware changed [ 1002.098472][T31876] cdc_wdm 6-1:1.0: Error autopm - -16 [ 1002.098630][ T5896] usb 6-1: USB disconnect, device number 116 [ 1002.110274][ T5926] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1002.118400][T31865] cdc_wdm 6-1:1.0: Error autopm - -16 [ 1002.146730][ T5926] usb 3-1: USB disconnect, device number 45 [ 1002.154291][ T5926] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 1002.257064][ T5896] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 1002.416937][ T5896] usb 6-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 1002.427335][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1002.436442][ T5896] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1002.449481][ T5896] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1002.458674][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.469398][T31884] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1002.479944][ T5896] hub 6-1:1.0: bad descriptor, ignoring hub [ 1002.486520][ T5896] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1002.497712][ T5896] cdc_wdm 6-1:1.0: skipping garbage [ 1002.503046][ T5896] cdc_wdm 6-1:1.0: skipping garbage [ 1002.508823][ T5896] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1002.826198][ T9] usb 6-1: USB disconnect, device number 117 [ 1003.584886][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1003.738420][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1003.748532][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1003.760584][ T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1003.770222][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.778270][ T9] usb 2-1: Product: syz [ 1003.782447][ T9] usb 2-1: Manufacturer: syz [ 1003.787135][ T9] usb 2-1: SerialNumber: syz [ 1003.793753][ T9] usb 2-1: config 0 descriptor?? [ 1003.800864][T31889] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1003.808533][T31889] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1004.024447][T31889] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1004.032031][T31889] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1004.443509][ T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1004.774872][ T5896] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1004.941464][ T5896] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1004.952437][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1004.963385][ T5896] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1004.973724][ T5896] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1004.981883][ T5896] usb 3-1: Manufacturer: syz [ 1004.989226][ T5896] usb 3-1: config 0 descriptor?? [ 1005.046927][ T9] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1005.058910][ T5896] rc_core: IR keymap rc-hauppauge not found [ 1005.063102][ T9] usb 2-1: USB disconnect, device number 26 [ 1005.070757][ T5896] Registered IR keymap rc-empty [ 1005.073036][ T5896] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1005.095091][ T5896] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input199 [ 1005.174856][T15514] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 1005.205019][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1005.215108][ T5896] usb 3-1: USB disconnect, device number 46 [ 1005.327280][T15514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1005.338965][T15514] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1005.352090][T15514] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1005.361172][T15514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.376380][T15514] usb 6-1: config 0 descriptor?? [ 1005.382190][T31924] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1005.599544][T31924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.610749][T31924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.626313][T15514] usbhid 6-1:0.0: can't add hid device: -71 [ 1005.639092][T15514] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1005.654234][T15514] usb 6-1: USB disconnect, device number 118 [ 1006.124935][T15514] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1006.334921][T15514] usb 6-1: Using ep0 maxpacket: 32 [ 1006.362087][T15514] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1006.464566][T15514] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1006.518999][T15514] usb 6-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 1006.547178][T15514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.579302][T15514] usb 6-1: config 0 descriptor?? [ 1006.597755][T15514] hub 6-1:0.0: bad descriptor, ignoring hub [ 1006.621442][T15514] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1006.731225][T31951] input: syz0 as /devices/virtual/input/input200 [ 1007.010818][T15514] betop 0003:20BC:5500.00A2: unknown main item tag 0x0 [ 1007.026281][T15514] betop 0003:20BC:5500.00A2: unknown main item tag 0x0 [ 1007.055157][T15514] betop 0003:20BC:5500.00A2: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.5-1/input0 [ 1007.077056][T15514] betop 0003:20BC:5500.00A2: no inputs found [ 1007.164907][ T5896] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1007.316265][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.338566][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.355144][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1007.375311][ T5896] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1007.385158][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.405144][T29664] usb 6-1: USB disconnect, device number 119 [ 1007.413068][ T5896] usb 2-1: config 0 descriptor?? [ 1007.655953][T31956] veth2: entered promiscuous mode [ 1007.661149][T31956] veth2: entered allmulticast mode [ 1007.840979][ T5896] plantronics 0003:047F:FFFF.00A3: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1008.230456][T15514] hid-generic 0000:0003:0001.00A4: unknown main item tag 0x0 [ 1008.243627][T15514] hid-generic 0000:0003:0001.00A4: unknown main item tag 0x0 [ 1008.272308][T15514] hid-generic 0000:0003:0001.00A4: hidraw1: HID v0.03 Device [syz0] on syz1 [ 1008.485852][T31967] fido_id[31967]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1008.767558][ T5896] hid-generic 0006:0004:0009.00A5: unknown main item tag 0x0 [ 1008.787590][ T5896] hid-generic 0006:0004:0009.00A5: unknown main item tag 0x0 [ 1008.813028][ T5896] hid-generic 0006:0004:0009.00A5: unknown main item tag 0x0 [ 1008.825184][ T5896] hid-generic 0006:0004:0009.00A5: unknown main item tag 0x0 [ 1008.832707][ T5896] hid-generic 0006:0004:0009.00A5: unknown main item tag 0x0 [ 1008.840771][ T5896] hid-generic 0006:0004:0009.00A5: unknown main item tag 0x0 [ 1008.853307][ T5896] hid-generic 0006:0004:0009.00A5: hidraw1: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1009.031638][T31976] fido_id[31976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1009.942086][T15514] usb 2-1: USB disconnect, device number 27 [ 1010.524731][T32029] batadv_slave_1: Caught tx_queue_len zero misconfig [ 1010.830509][T32042] ªªªªªª: renamed from wg2 (while UP) [ 1011.337660][T32054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10848'. [ 1011.414955][ T5903] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1011.601531][ T5903] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 1011.614820][ T5903] usb 3-1: config 0 has no interface number 0 [ 1011.651658][ T5903] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1011.686653][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.694701][ T5903] usb 3-1: Product: syz [ 1011.729603][ T5903] usb 3-1: Manufacturer: syz [ 1011.744461][ T5903] usb 3-1: SerialNumber: syz [ 1011.770165][ T5903] usb 3-1: config 0 descriptor?? [ 1012.934289][ T5903] usb 3-1: non-Atmel transceiver xxxx0000 [ 1013.096583][ T5903] usb 3-1: Firmware version (0.0) predates our first public release. [ 1013.104818][ T5903] usb 3-1: Please update to version 0.2 or newer [ 1013.125152][ T5903] usb 3-1: atusb_probe: initialization failed, error = -19 [ 1013.128308][T32093] loop2: detected capacity change from 0 to 7 [ 1013.144060][ T5903] usb 3-1: USB disconnect, device number 47 [ 1013.176040][T32093] Dev loop2: unable to read RDB block 7 [ 1013.217102][T32093] loop2: unable to read partition table [ 1013.223005][T32093] loop2: partition table beyond EOD, truncated [ 1013.279746][T32093] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1013.925962][T32108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10868'. [ 1014.002175][T32108] vxlan1: entered promiscuous mode [ 1014.312337][T32123] loop2: detected capacity change from 0 to 7 [ 1014.330181][ T9404] Dev loop2: unable to read RDB block 7 [ 1014.337722][ T9404] loop2: AHDI p1 p2 p3 [ 1014.348642][ T9404] loop2: partition table partially beyond EOD, truncated [ 1014.359665][ T9404] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1014.374540][ T9404] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1014.383137][T32123] Dev loop2: unable to read RDB block 7 [ 1014.392916][T32123] loop2: AHDI p1 p2 p3 [ 1014.400542][T32123] loop2: partition table partially beyond EOD, truncated [ 1014.411025][T32123] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1014.418835][T32123] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1015.525466][ T24] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1015.715442][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 1015.730539][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1015.753219][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1015.794252][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1015.817977][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1015.848063][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.893661][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1015.915450][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.937615][T32184] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10904'. [ 1015.956957][T32184] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10904'. [ 1015.983628][T32184] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10904'. [ 1016.165571][ T24] usb 6-1: GET_CAPABILITIES returned 0 [ 1016.171122][ T24] usbtmc 6-1:16.0: can't read capabilities [ 1016.402627][T32168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1016.414151][T32168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.424725][ T24] usb 6-1: USB disconnect, device number 120 [ 1016.497214][T32201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10912'. [ 1017.063000][ T30] audit: type=1326 audit(1763561995.927:5015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32227 comm="syz.5.10924" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad539 code=0x0 [ 1017.183134][T32233] pim6reg1: entered promiscuous mode [ 1017.188752][T32233] pim6reg1: entered allmulticast mode [ 1017.387077][T32240] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1017.395686][T32240] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1017.403165][T32240] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1017.411146][T32240] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1017.419278][T32240] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1017.427186][T32240] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1017.617001][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1017.774848][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 1017.789673][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.801909][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.826356][ T24] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1017.845004][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.866560][ T24] usb 3-1: config 0 descriptor?? [ 1018.404911][ T5903] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1018.442091][ T30] audit: type=1326 audit(1763561997.307:5016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32270 comm="syz.1.10941" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x0 [ 1018.576844][ T5903] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1018.585772][ T5903] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 1018.597274][ T5903] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1018.606785][ T5903] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 1018.618610][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 1018.629689][ T5903] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 1018.642589][ T5903] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1018.652657][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1018.661304][ T5903] usb 6-1: Product: syz [ 1018.665593][ T5903] usb 6-1: Manufacturer: syz [ 1018.675407][ T5903] cdc_wdm 6-1:1.0: skipping garbage [ 1018.680716][ T5903] cdc_wdm 6-1:1.0: skipping garbage [ 1018.686090][ T5903] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1018.898575][ T24] letsketch 0003:6161:4D15.00A6: Device info:   [ 1019.129742][ T24] usb 3-1: Max retries (5) exceeded reading string descriptor 201 [ 1019.138845][ T24] letsketch 0003:6161:4D15.00A6: probe with driver letsketch failed with error -71 [ 1019.151791][ T24] usb 3-1: USB disconnect, device number 48 [ 1019.544885][T29664] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1019.695081][T29664] usb 2-1: Using ep0 maxpacket: 32 [ 1019.709615][T29664] usb 2-1: config 0 has no interfaces? [ 1019.715801][T29664] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1019.725431][T29664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.741814][T29664] usb 2-1: config 0 descriptor?? [ 1019.954892][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1019.974552][T29664] usb 2-1: USB disconnect, device number 28 [ 1020.117673][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1020.126475][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1020.135044][ T24] usb 3-1: config 0 has no interface number 0 [ 1020.141160][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1020.152068][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1020.161758][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.173724][ T24] usb 3-1: Product: syz [ 1020.178037][ T24] usb 3-1: Manufacturer: syz [ 1020.183542][ T24] usb 3-1: SerialNumber: syz [ 1020.205512][ T24] usb 3-1: config 0 descriptor?? [ 1020.222520][ T24] smsc75xx v1.0.0 [ 1020.346961][T32303] loop9: detected capacity change from 0 to 7 [ 1020.354335][T32303] Dev loop9: unable to read RDB block 7 [ 1020.360405][T32303] loop9: unable to read partition table [ 1020.366932][T32303] loop9: partition table beyond EOD, truncated [ 1020.373197][T32303] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1020.574956][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 1020.825356][T29664] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1021.017358][T29664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.028500][T29664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.039324][T29664] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1021.053604][T29664] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1021.062859][T29664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.077594][T29664] usb 2-1: config 0 descriptor?? [ 1021.152141][ T5903] usb 6-1: USB disconnect, device number 121 [ 1021.253811][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1021.403440][T32326] input: syz0 as /devices/virtual/input/input201 [ 1021.454589][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1021.485194][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1021.515767][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1021.537741][T29664] plantronics 0003:047F:FFFF.00A7: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1021.563160][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1021.583349][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1021.610902][ T24] usb 3-1: USB disconnect, device number 49 [ 1021.820029][ T24] usb 2-1: USB disconnect, device number 29 [ 1021.835167][ T5903] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1022.001925][ T5903] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1022.017660][ T5903] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.053930][ T5903] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1022.075299][ T5903] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1022.083355][ T5903] usb 6-1: Manufacturer: syz [ 1022.105918][ T5903] usb 6-1: config 0 descriptor?? [ 1022.216253][ T5903] rc_core: IR keymap rc-hauppauge not found [ 1022.222191][ T5903] Registered IR keymap rc-empty [ 1022.233293][ T5903] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1022.257184][ T5903] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input202 [ 1022.275391][T32352] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10972'. [ 1022.389658][ C0] igorplugusb 6-1:0.0: Error: urb status = -32 [ 1022.418824][ T5903] usb 6-1: USB disconnect, device number 122 [ 1022.737983][T32363] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1023.214894][ T5903] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1023.954829][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 1023.961497][ T5903] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1023.970746][ T5903] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1023.980547][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1023.994829][ T5903] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1024.010007][ T5903] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1024.044946][ T5903] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1024.054032][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.298658][ T5903] usb 2-1: GET_CAPABILITIES returned 0 [ 1024.304208][ T5903] usbtmc 2-1:16.0: can't read capabilities [ 1024.650187][T32367] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 1024.657860][T32403] usb 2-1: usbtmc_ioctl_clear_out_halt returned -71 [ 1024.657889][ T5903] usb 2-1: USB disconnect, device number 30 [ 1024.798280][ T876] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1024.965320][ T876] usb 3-1: Using ep0 maxpacket: 16 [ 1024.971421][ T876] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 1024.986060][ T876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.016199][ T876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.036010][ T876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.048771][ T876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.066280][ T876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.085832][ T876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.108437][ T876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.131679][ T876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.150947][ T876] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1025.170582][ T876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1025.185610][ T876] usb 3-1: SerialNumber: syz [ 1025.209126][ T876] usb 3-1: config 0 descriptor?? [ 1025.240295][ T876] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input203 [ 1025.460349][ T5183] bcm5974 3-1:0.0: could not read from device [ 1025.466473][ T876] usb 3-1: USB disconnect, device number 50 [ 1025.495137][T22127] bcm5974 3-1:0.0: could not read from device [ 1026.321892][T32449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11011'. [ 1026.427883][T29664] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1026.611254][T29664] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.635912][T29664] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1026.662526][T29664] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1026.682055][T29664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1026.698970][T29664] usb 3-1: SerialNumber: syz [ 1026.927687][T29664] usb 3-1: 0:2 : does not exist [ 1026.956827][T29664] usb 3-1: USB disconnect, device number 51 [ 1027.051368][ T9404] udevd[9404]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1027.760051][T32483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11023'. [ 1027.786471][T32483] netlink: 'syz.5.11023': attribute type 15 has an invalid length. [ 1027.794431][T32483] netlink: 'syz.5.11023': attribute type 18 has an invalid length. [ 1028.884913][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1028.894089][T32535] syzkaller1: entered promiscuous mode [ 1028.904206][T32535] syzkaller1: entered allmulticast mode [ 1029.035001][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1029.043833][T32542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11051'. [ 1029.045629][ T24] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.065642][T32542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11051'. [ 1029.086315][T32542] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11051'. [ 1029.095881][ T24] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1029.095913][ T24] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1029.144472][ T24] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1029.161580][ T24] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1029.171451][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.179790][ T24] usb 2-1: Product: syz [ 1029.184141][ T24] usb 2-1: Manufacturer: syz [ 1029.189952][ T24] usb 2-1: SerialNumber: syz [ 1029.209498][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1029.219462][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input204 [ 1029.310399][T32546] netlink: 'syz.7.11053': attribute type 4 has an invalid length. [ 1029.436581][ T24] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1029.447653][ T24] (id 0x00) [ 1029.536981][ T24] rc_core: IR keymap rc-imon-pad not found [ 1029.547979][ T24] Registered IR keymap rc-empty [ 1029.558220][ T24] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1029.582986][ T24] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1029.611512][T32563] input: syz1 as /devices/virtual/input/input206 [ 1029.635746][ T24] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1029.668692][ T24] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input205 [ 1029.711669][ T24] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:31> initialized [ 1029.903445][T32568] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11061'. [ 1029.959318][ T24] usb 2-1: USB disconnect, device number 31 [ 1030.280914][T32581] input: syz0 as /devices/virtual/input/input207 [ 1030.571001][T32589] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11070'. [ 1030.615597][T32589] vxlan1: entered promiscuous mode [ 1031.113887][ T30] audit: type=1326 audit(1763562009.977:5017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32606 comm="syz.2.11078" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x0 [ 1031.199119][T32609] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 1031.388019][ T30] audit: type=1326 audit(1763562010.257:5018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.5.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1031.410670][ T30] audit: type=1326 audit(1763562010.257:5019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.5.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1031.437537][ T30] audit: type=1326 audit(1763562010.257:5020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.5.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1031.462954][ T30] audit: type=1326 audit(1763562010.327:5021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.5.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1031.487204][ T30] audit: type=1326 audit(1763562010.327:5022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.5.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1031.510085][ T30] audit: type=1326 audit(1763562010.327:5023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.5.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad558 code=0x7ffc0000 [ 1031.585811][ T30] audit: type=1326 audit(1763562010.327:5024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.5.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1031.661910][ T30] audit: type=1326 audit(1763562010.327:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.5.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ad558 code=0x7ffc0000 [ 1031.739641][ T30] audit: type=1326 audit(1763562010.327:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32615 comm="syz.5.11082" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7ffc0000 [ 1032.555025][T29664] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1032.704823][ T24] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1032.736819][T29664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.754875][T29664] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1032.763955][T29664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.795682][T29664] usb 2-1: config 0 descriptor?? [ 1032.825759][T32655] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11099'. [ 1032.874369][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1032.887625][ T24] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1032.889381][T32655] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11099'. [ 1032.899109][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.925200][ T24] usb 3-1: config 0 descriptor?? [ 1032.931071][T32649] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1033.214252][T29664] uclogic 0003:2179:0053.00A8: interface is invalid, ignoring [ 1033.359095][ T24] elan 0003:04F3:0755.00A9: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1033.438959][ T24] usb 2-1: USB disconnect, device number 32 [ 1033.601846][T32671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11105'. [ 1033.814215][ T5903] usb 3-1: USB disconnect, device number 52 [ 1034.506115][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1034.676069][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1034.687869][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.715599][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1034.743546][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1034.754098][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.767402][ T24] usb 2-1: config 0 descriptor?? [ 1034.775547][ T24] hub 2-1:0.0: USB hub found [ 1034.983502][ T24] hub 2-1:0.0: 1 port detected [ 1035.337543][ T5903] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1035.495346][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 1035.506388][ T5903] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1035.542301][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.554375][ T5903] usb 6-1: Product: syz [ 1035.558696][ T5903] usb 6-1: Manufacturer: syz [ 1035.563355][ T5903] usb 6-1: SerialNumber: syz [ 1035.571538][ T5903] usb 6-1: config 0 descriptor?? [ 1035.580792][ T5903] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1035.593085][ T24] hub 2-1:0.0: activate --> -90 [ 1035.927307][T32748] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11137'. [ 1035.947310][T32748] vxlan0: entered promiscuous mode [ 1035.957077][T15212] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1035.970339][T15212] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1035.980919][T15212] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1035.992356][T15212] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1036.000326][ T9] usb 2-1: USB disconnect, device number 33 [ 1036.274916][T15514] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1036.445007][T15514] usb 3-1: Using ep0 maxpacket: 32 [ 1036.454700][T15514] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.467074][T15514] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1036.479304][T15514] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1036.491302][T15514] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1036.517488][T15514] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1036.534218][T15514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.550778][T15514] usb 3-1: Product: syz [ 1036.555975][T15514] usb 3-1: Manufacturer: syz [ 1036.561075][T15514] usb 3-1: SerialNumber: syz [ 1036.581706][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1036.600294][T15514] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input208 [ 1036.798664][ T5903] gspca_stk1135: reg_w 0xd err -71 [ 1036.816732][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.827524][ T5903] gspca_stk1135: Sensor write failed [ 1036.832849][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.839855][T15514] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1036.856767][T15514] (id 0x00) [ 1036.863181][ T5903] gspca_stk1135: Sensor write failed [ 1036.882226][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.900689][ T5903] gspca_stk1135: Sensor read failed [ 1036.916566][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.940884][ T5903] gspca_stk1135: Sensor read failed [ 1036.954794][ T5903] gspca_stk1135: Detected sensor type unknown (0x0) [ 1036.966071][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 1036.984833][T15514] rc_core: IR keymap rc-imon-pad not found [ 1036.990664][T15514] Registered IR keymap rc-empty [ 1036.997052][ T5903] gspca_stk1135: Sensor read failed [ 1037.002372][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 1037.019624][T15514] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1037.034793][ T5903] gspca_stk1135: Sensor read failed [ 1037.040033][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 1037.054849][T15514] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1037.074520][ T5903] gspca_stk1135: Sensor write failed [ 1037.084666][ T5903] gspca_stk1135: serial bus timeout: status=0x00 [ 1037.101374][ T5903] gspca_stk1135: Sensor write failed [ 1037.108637][T15514] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1037.119051][ T5903] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 1037.139424][T15514] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input209 [ 1037.161412][ T5903] usb 6-1: USB disconnect, device number 123 [ 1037.183717][T15514] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:53> initialized [ 1037.305367][ T315] sctp: [Deprecated]: syz.7.11153 (pid 315) Use of int in max_burst socket option. [ 1037.305367][ T315] Use struct sctp_assoc_value instead [ 1037.396116][T29664] usb 3-1: USB disconnect, device number 53 [ 1037.534568][ T322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11156'. [ 1038.646258][ T358] [ 1038.648619][ T358] ===================================================== [ 1038.655551][ T358] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1038.663019][ T358] syzkaller #0 Not tainted [ 1038.667756][ T358] ----------------------------------------------------- [ 1038.674925][ T358] syz.5.11168/358 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1038.682694][ T358] ffff88807234fb40 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1038.691425][ T358] [ 1038.691425][ T358] and this task is already holding: [ 1038.698784][ T358] ffff888073e15028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1038.708536][ T358] which would create a new lock dependency: [ 1038.714419][ T358] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1038.722528][ T358] [ 1038.722528][ T358] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1038.731967][ T358] (&dev->event_lock#2){..-.}-{3:3} [ 1038.732003][ T358] [ 1038.732003][ T358] ... which became SOFTIRQ-irq-safe at: [ 1038.744867][ T358] lock_acquire+0x120/0x360 [ 1038.749449][ T358] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1038.755512][ T358] input_event+0x76/0xe0 [ 1038.759838][ T358] atp_complete_geyser_3_4+0xf6d/0x1e80 [ 1038.765469][ T358] __usb_hcd_giveback_urb+0x376/0x540 [ 1038.770931][ T358] dummy_timer+0x85f/0x44c0 [ 1038.775510][ T358] __hrtimer_run_queues+0x52c/0xc60 [ 1038.780789][ T358] hrtimer_run_softirq+0x187/0x2b0 [ 1038.785975][ T358] handle_softirqs+0x286/0x870 [ 1038.790814][ T358] __irq_exit_rcu+0xca/0x1f0 [ 1038.795485][ T358] irq_exit_rcu+0x9/0x30 [ 1038.799808][ T358] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1038.805526][ T358] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1038.811585][ T358] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1038.817398][ T358] dummy_urb_enqueue+0x58a/0x780 [ 1038.822426][ T358] usb_hcd_submit_urb+0x325/0x1aa0 [ 1038.827620][ T358] atp_open+0x63/0xc0 [ 1038.831685][ T358] input_open_device+0x1d3/0x390 [ 1038.836705][ T358] mousedev_open_device+0xcc/0x150 [ 1038.841893][ T358] mousedev_open+0x2ef/0x4a0 [ 1038.846561][ T358] chrdev_open+0x4cc/0x5e0 [ 1038.851059][ T358] do_dentry_open+0x953/0x13f0 [ 1038.855913][ T358] vfs_open+0x3b/0x340 [ 1038.860059][ T358] path_openat+0x2ee5/0x3830 [ 1038.864732][ T358] do_filp_open+0x1fa/0x410 [ 1038.869317][ T358] do_sys_openat2+0x121/0x1c0 [ 1038.874077][ T358] __x64_sys_openat+0x138/0x170 [ 1038.879003][ T358] do_syscall_64+0xfa/0xfa0 [ 1038.883588][ T358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.889552][ T358] [ 1038.889552][ T358] to a SOFTIRQ-irq-unsafe lock: [ 1038.896552][ T358] (tasklist_lock){.+.+}-{3:3} [ 1038.896581][ T358] [ 1038.896581][ T358] ... which became SOFTIRQ-irq-unsafe at: [ 1038.909176][ T358] ... [ 1038.909184][ T358] lock_acquire+0x120/0x360 [ 1038.916322][ T358] _raw_read_lock+0x36/0x50 [ 1038.920907][ T358] __do_wait+0xde/0x740 [ 1038.925146][ T358] do_wait+0x1f8/0x510 [ 1038.929297][ T358] kernel_wait+0xab/0x170 [ 1038.933703][ T358] call_usermodehelper_exec_work+0xbe/0x230 [ 1038.939670][ T358] process_scheduled_works+0xae1/0x17b0 [ 1038.945293][ T358] worker_thread+0x8a0/0xda0 [ 1038.949955][ T358] kthread+0x711/0x8a0 [ 1038.954100][ T358] ret_from_fork+0x4bc/0x870 [ 1038.958770][ T358] ret_from_fork_asm+0x1a/0x30 [ 1038.963609][ T358] [ 1038.963609][ T358] other info that might help us debug this: [ 1038.963609][ T358] [ 1038.973818][ T358] Chain exists of: [ 1038.973818][ T358] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1038.973818][ T358] [ 1038.987378][ T358] Possible interrupt unsafe locking scenario: [ 1038.987378][ T358] [ 1038.995680][ T358] CPU0 CPU1 [ 1039.001026][ T358] ---- ---- [ 1039.006379][ T358] lock(tasklist_lock); [ 1039.010623][ T358] local_irq_disable(); [ 1039.017363][ T358] lock(&dev->event_lock#2); [ 1039.024558][ T358] lock(&client->buffer_lock); [ 1039.031916][ T358] [ 1039.035353][ T358] lock(&dev->event_lock#2); [ 1039.040199][ T358] [ 1039.040199][ T358] *** DEADLOCK *** [ 1039.040199][ T358] [ 1039.048323][ T358] 7 locks held by syz.5.11168/358: [ 1039.053412][ T358] #0: ffff888146b41118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1039.062548][ T358] #1: ffff88801dffb230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1039.072636][ T358] #2: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1039.082282][ T358] #3: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1039.091844][ T358] #4: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1039.100974][ T358] #5: ffff888073e15028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1039.111147][ T358] #6: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1039.120192][ T358] [ 1039.120192][ T358] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1039.130578][ T358] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1039.136224][ T358] IN-SOFTIRQ-W at: [ 1039.140284][ T358] lock_acquire+0x120/0x360 [ 1039.146598][ T358] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1039.153611][ T358] input_event+0x76/0xe0 [ 1039.159663][ T358] atp_complete_geyser_3_4+0xf6d/0x1e80 [ 1039.167017][ T358] __usb_hcd_giveback_urb+0x376/0x540 [ 1039.174199][ T358] dummy_timer+0x85f/0x44c0 [ 1039.180513][ T358] __hrtimer_run_queues+0x52c/0xc60 [ 1039.187521][ T358] hrtimer_run_softirq+0x187/0x2b0 [ 1039.194442][ T358] handle_softirqs+0x286/0x870 [ 1039.201104][ T358] __irq_exit_rcu+0xca/0x1f0 [ 1039.207592][ T358] irq_exit_rcu+0x9/0x30 [ 1039.213640][ T358] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1039.221089][ T358] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1039.228886][ T358] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1039.236419][ T358] dummy_urb_enqueue+0x58a/0x780 [ 1039.243166][ T358] usb_hcd_submit_urb+0x325/0x1aa0 [ 1039.250088][ T358] atp_open+0x63/0xc0 [ 1039.255882][ T358] input_open_device+0x1d3/0x390 [ 1039.262624][ T358] mousedev_open_device+0xcc/0x150 [ 1039.269545][ T358] mousedev_open+0x2ef/0x4a0 [ 1039.275942][ T358] chrdev_open+0x4cc/0x5e0 [ 1039.282165][ T358] do_dentry_open+0x953/0x13f0 [ 1039.288742][ T358] vfs_open+0x3b/0x340 [ 1039.294619][ T358] path_openat+0x2ee5/0x3830 [ 1039.301023][ T358] do_filp_open+0x1fa/0x410 [ 1039.307337][ T358] do_sys_openat2+0x121/0x1c0 [ 1039.313827][ T358] __x64_sys_openat+0x138/0x170 [ 1039.320489][ T358] do_syscall_64+0xfa/0xfa0 [ 1039.326809][ T358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.334511][ T358] INITIAL USE at: [ 1039.338476][ T358] lock_acquire+0x120/0x360 [ 1039.344700][ T358] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1039.351626][ T358] input_inject_event+0xa5/0x340 [ 1039.358285][ T358] kbd_led_trigger_activate+0xbc/0x100 [ 1039.365467][ T358] led_trigger_set+0x52d/0x950 [ 1039.371966][ T358] led_trigger_set_default+0x260/0x2a0 [ 1039.379147][ T358] led_classdev_register_ext+0x73d/0x930 [ 1039.386507][ T358] input_leds_connect+0x517/0x790 [ 1039.393255][ T358] input_register_device+0xd00/0x1140 [ 1039.400349][ T358] atkbd_connect+0x72e/0xa00 [ 1039.406663][ T358] serio_driver_probe+0x82/0xd0 [ 1039.413242][ T358] really_probe+0x26d/0x9e0 [ 1039.419472][ T358] __driver_probe_device+0x18c/0x2f0 [ 1039.426481][ T358] driver_probe_device+0x4f/0x430 [ 1039.433231][ T358] __driver_attach+0x452/0x700 [ 1039.439720][ T358] bus_for_each_dev+0x233/0x2b0 [ 1039.446392][ T358] serio_handle_event+0x1f9/0x8d0 [ 1039.453154][ T358] process_scheduled_works+0xae1/0x17b0 [ 1039.460442][ T358] worker_thread+0x8a0/0xda0 [ 1039.466768][ T358] kthread+0x711/0x8a0 [ 1039.472586][ T358] ret_from_fork+0x4bc/0x870 [ 1039.478920][ T358] ret_from_fork_asm+0x1a/0x30 [ 1039.485412][ T358] } [ 1039.487981][ T358] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1039.497079][ T358] -> (&client->buffer_lock){....}-{3:3} { [ 1039.502810][ T358] INITIAL USE at: [ 1039.506688][ T358] lock_acquire+0x120/0x360 [ 1039.512746][ T358] _raw_spin_lock+0x2e/0x40 [ 1039.518808][ T358] evdev_pass_values+0xb9/0xbd0 [ 1039.525213][ T358] evdev_events+0x1e6/0x340 [ 1039.531265][ T358] input_pass_values+0x288/0x890 [ 1039.537766][ T358] input_event_dispose+0x330/0x6b0 [ 1039.544429][ T358] input_inject_event+0x1dd/0x340 [ 1039.551001][ T358] evdev_write+0x2fc/0x480 [ 1039.556970][ T358] vfs_write+0x27e/0xb30 [ 1039.562770][ T358] ksys_write+0x145/0x250 [ 1039.568655][ T358] __do_fast_syscall_32+0xb6/0x2b0 [ 1039.575312][ T358] do_fast_syscall_32+0x34/0x80 [ 1039.581707][ T358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1039.589595][ T358] } [ 1039.592077][ T358] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1039.600214][ T358] ... acquired at: [ 1039.603999][ T358] lock_acquire+0x120/0x360 [ 1039.608661][ T358] _raw_spin_lock+0x2e/0x40 [ 1039.613330][ T358] evdev_pass_values+0xb9/0xbd0 [ 1039.618352][ T358] evdev_events+0x1e6/0x340 [ 1039.623014][ T358] input_pass_values+0x288/0x890 [ 1039.628111][ T358] input_event_dispose+0x330/0x6b0 [ 1039.633379][ T358] input_inject_event+0x1dd/0x340 [ 1039.638559][ T358] evdev_write+0x2fc/0x480 [ 1039.643138][ T358] vfs_write+0x27e/0xb30 [ 1039.647552][ T358] ksys_write+0x145/0x250 [ 1039.652050][ T358] __do_fast_syscall_32+0xb6/0x2b0 [ 1039.657317][ T358] do_fast_syscall_32+0x34/0x80 [ 1039.662323][ T358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1039.668817][ T358] [ 1039.671126][ T358] [ 1039.671126][ T358] the dependencies between the lock to be acquired [ 1039.671136][ T358] and SOFTIRQ-irq-unsafe lock: [ 1039.684622][ T358] -> (tasklist_lock){.+.+}-{3:3} { [ 1039.689914][ T358] HARDIRQ-ON-R at: [ 1039.694051][ T358] lock_acquire+0x120/0x360 [ 1039.700536][ T358] _raw_read_lock+0x36/0x50 [ 1039.707026][ T358] __do_wait+0xde/0x740 [ 1039.713174][ T358] do_wait+0x1f8/0x510 [ 1039.719230][ T358] kernel_wait+0xab/0x170 [ 1039.725550][ T358] call_usermodehelper_exec_work+0xbe/0x230 [ 1039.733426][ T358] process_scheduled_works+0xae1/0x17b0 [ 1039.740956][ T358] worker_thread+0x8a0/0xda0 [ 1039.747704][ T358] kthread+0x711/0x8a0 [ 1039.753766][ T358] ret_from_fork+0x4bc/0x870 [ 1039.760339][ T358] ret_from_fork_asm+0x1a/0x30 [ 1039.767085][ T358] SOFTIRQ-ON-R at: [ 1039.771224][ T358] lock_acquire+0x120/0x360 [ 1039.777713][ T358] _raw_read_lock+0x36/0x50 [ 1039.784205][ T358] __do_wait+0xde/0x740 [ 1039.790349][ T358] do_wait+0x1f8/0x510 [ 1039.796408][ T358] kernel_wait+0xab/0x170 [ 1039.802727][ T358] call_usermodehelper_exec_work+0xbe/0x230 [ 1039.810602][ T358] process_scheduled_works+0xae1/0x17b0 [ 1039.818133][ T358] worker_thread+0x8a0/0xda0 [ 1039.824714][ T358] kthread+0x711/0x8a0 [ 1039.830771][ T358] ret_from_fork+0x4bc/0x870 [ 1039.837341][ T358] ret_from_fork_asm+0x1a/0x30 [ 1039.844086][ T358] INITIAL USE at: [ 1039.848146][ T358] lock_acquire+0x120/0x360 [ 1039.854542][ T358] _raw_write_lock_irq+0xa2/0xf0 [ 1039.861469][ T358] copy_process+0x224f/0x3c00 [ 1039.868042][ T358] kernel_clone+0x21e/0x840 [ 1039.874440][ T358] user_mode_thread+0xdd/0x140 [ 1039.881101][ T358] rest_init+0x23/0x300 [ 1039.887155][ T358] start_kernel+0x3ae/0x410 [ 1039.893553][ T358] x86_64_start_reservations+0x24/0x30 [ 1039.900913][ T358] x86_64_start_kernel+0x143/0x1c0 [ 1039.907927][ T358] common_startup_64+0x13e/0x147 [ 1039.914766][ T358] INITIAL READ USE at: [ 1039.919249][ T358] lock_acquire+0x120/0x360 [ 1039.926081][ T358] _raw_read_lock+0x36/0x50 [ 1039.932919][ T358] __do_wait+0xde/0x740 [ 1039.939413][ T358] do_wait+0x1f8/0x510 [ 1039.945829][ T358] kernel_wait+0xab/0x170 [ 1039.952498][ T358] call_usermodehelper_exec_work+0xbe/0x230 [ 1039.960722][ T358] process_scheduled_works+0xae1/0x17b0 [ 1039.968599][ T358] worker_thread+0x8a0/0xda0 [ 1039.975525][ T358] kthread+0x711/0x8a0 [ 1039.981932][ T358] ret_from_fork+0x4bc/0x870 [ 1039.988850][ T358] ret_from_fork_asm+0x1a/0x30 [ 1039.995945][ T358] } [ 1039.998600][ T358] ... key at: [] tasklist_lock+0x18/0x40 [ 1040.006487][ T358] ... acquired at: [ 1040.010445][ T358] lock_acquire+0x120/0x360 [ 1040.015116][ T358] _raw_read_lock+0x36/0x50 [ 1040.019788][ T358] send_sigio+0x101/0x370 [ 1040.024279][ T358] dnotify_handle_event+0x169/0x440 [ 1040.029640][ T358] fsnotify+0x1814/0x1a80 [ 1040.034133][ T358] path_openat+0x171e/0x3830 [ 1040.038887][ T358] do_filp_open+0x1fa/0x410 [ 1040.043553][ T358] do_sys_openat2+0x121/0x1c0 [ 1040.048392][ T358] __ia32_compat_sys_open+0x117/0x140 [ 1040.053925][ T358] __do_fast_syscall_32+0xb6/0x2b0 [ 1040.059196][ T358] do_fast_syscall_32+0x34/0x80 [ 1040.064204][ T358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1040.070694][ T358] [ 1040.073001][ T358] -> (&f_owner->lock){....}-{3:3} { [ 1040.078291][ T358] INITIAL USE at: [ 1040.082256][ T358] lock_acquire+0x120/0x360 [ 1040.088480][ T358] _raw_write_lock_irq+0xa2/0xf0 [ 1040.095144][ T358] __f_setown+0x67/0x370 [ 1040.101111][ T358] fcntl_dirnotify+0x3fa/0x6a0 [ 1040.107605][ T358] do_fcntl+0x6d0/0x1910 [ 1040.113571][ T358] do_compat_fcntl64+0x477/0x720 [ 1040.120237][ T358] __do_fast_syscall_32+0xb6/0x2b0 [ 1040.127070][ T358] do_fast_syscall_32+0x34/0x80 [ 1040.133638][ T358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1040.141690][ T358] INITIAL READ USE at: [ 1040.146096][ T358] lock_acquire+0x120/0x360 [ 1040.152760][ T358] _raw_read_lock_irqsave+0xaf/0x100 [ 1040.160210][ T358] send_sigio+0x38/0x370 [ 1040.166612][ T358] dnotify_handle_event+0x169/0x440 [ 1040.173970][ T358] fsnotify+0x1671/0x1a80 [ 1040.180454][ T358] __fsnotify_parent+0x3fe/0x540 [ 1040.187544][ T358] notify_change+0xc55/0xf40 [ 1040.194295][ T358] chmod_common+0x248/0x400 [ 1040.200955][ T358] do_fchmodat+0x12d/0x200 [ 1040.207530][ T358] __ia32_sys_fchmodat+0x7d/0x90 [ 1040.214626][ T358] __do_fast_syscall_32+0xb6/0x2b0 [ 1040.221896][ T358] do_fast_syscall_32+0x34/0x80 [ 1040.228902][ T358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1040.237389][ T358] } [ 1040.239961][ T358] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1040.248978][ T358] ... acquired at: [ 1040.252857][ T358] lock_acquire+0x120/0x360 [ 1040.257520][ T358] _raw_read_lock_irqsave+0xaf/0x100 [ 1040.262972][ T358] send_sigio+0x38/0x370 [ 1040.267376][ T358] kill_fasync+0x24d/0x4d0 [ 1040.271953][ T358] sock_wake_async+0x137/0x160 [ 1040.276882][ T358] sock_def_readable+0x3bb/0x550 [ 1040.281983][ T358] queue_oob+0x452/0x4f0 [ 1040.286387][ T358] unix_stream_sendmsg+0xc3f/0xdf0 [ 1040.291661][ T358] __sock_sendmsg+0x21c/0x270 [ 1040.296500][ T358] ____sys_sendmsg+0x52d/0x830 [ 1040.301425][ T358] ___sys_sendmsg+0x21f/0x2a0 [ 1040.306258][ T358] __sys_sendmmsg+0x28e/0x430 [ 1040.311096][ T358] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1040.316806][ T358] __do_fast_syscall_32+0xb6/0x2b0 [ 1040.322074][ T358] do_fast_syscall_32+0x34/0x80 [ 1040.327082][ T358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1040.333575][ T358] [ 1040.335884][ T358] -> (&new->fa_lock){....}-{3:3} { [ 1040.340998][ T358] INITIAL USE at: [ 1040.344874][ T358] lock_acquire+0x120/0x360 [ 1040.350926][ T358] _raw_write_lock_irq+0xa2/0xf0 [ 1040.357422][ T358] fasync_remove_entry+0xf1/0x1c0 [ 1040.364002][ T358] lease_modify+0x1ca/0x3c0 [ 1040.370059][ T358] locks_remove_file+0x4bf/0xea0 [ 1040.376557][ T358] __fput+0x3ab/0xa70 [ 1040.382094][ T358] task_work_run+0x1d4/0x260 [ 1040.388240][ T358] exit_to_user_mode_loop+0xe9/0x130 [ 1040.395071][ T358] __do_fast_syscall_32+0x1f4/0x2b0 [ 1040.401824][ T358] do_fast_syscall_32+0x34/0x80 [ 1040.408220][ T358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1040.416100][ T358] INITIAL READ USE at: [ 1040.420413][ T358] lock_acquire+0x120/0x360 [ 1040.426900][ T358] _raw_read_lock_irqsave+0xaf/0x100 [ 1040.434175][ T358] kill_fasync+0x199/0x4d0 [ 1040.440576][ T358] sock_wake_async+0x137/0x160 [ 1040.447329][ T358] sock_def_readable+0x3bb/0x550 [ 1040.454255][ T358] queue_oob+0x452/0x4f0 [ 1040.460486][ T358] unix_stream_sendmsg+0xc3f/0xdf0 [ 1040.467589][ T358] __sock_sendmsg+0x21c/0x270 [ 1040.474253][ T358] ____sys_sendmsg+0x52d/0x830 [ 1040.480998][ T358] ___sys_sendmsg+0x21f/0x2a0 [ 1040.487658][ T358] __sys_sendmmsg+0x28e/0x430 [ 1040.494317][ T358] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1040.501846][ T358] __do_fast_syscall_32+0xb6/0x2b0 [ 1040.508942][ T358] do_fast_syscall_32+0x34/0x80 [ 1040.515773][ T358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1040.524092][ T358] } [ 1040.526574][ T358] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1040.535242][ T358] ... acquired at: [ 1040.539029][ T358] lock_acquire+0x120/0x360 [ 1040.543692][ T358] _raw_read_lock_irqsave+0xaf/0x100 [ 1040.549149][ T358] kill_fasync+0x199/0x4d0 [ 1040.553741][ T358] evdev_pass_values+0x627/0xbd0 [ 1040.558854][ T358] evdev_events+0x1e6/0x340 [ 1040.563530][ T358] input_pass_values+0x288/0x890 [ 1040.568636][ T358] input_event_dispose+0x330/0x6b0 [ 1040.573922][ T358] input_inject_event+0x1dd/0x340 [ 1040.579107][ T358] evdev_write+0x2fc/0x480 [ 1040.583686][ T358] vfs_write+0x27e/0xb30 [ 1040.588093][ T358] ksys_write+0x145/0x250 [ 1040.592585][ T358] __do_fast_syscall_32+0xb6/0x2b0 [ 1040.597868][ T358] do_fast_syscall_32+0x34/0x80 [ 1040.602885][ T358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1040.609385][ T358] [ 1040.611695][ T358] [ 1040.611695][ T358] stack backtrace: [ 1040.617579][ T358] CPU: 1 UID: 0 PID: 358 Comm: syz.5.11168 Not tainted syzkaller #0 PREEMPT(full) [ 1040.617600][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1040.617614][ T358] Call Trace: [ 1040.617623][ T358] [ 1040.617631][ T358] dump_stack_lvl+0x189/0x250 [ 1040.617657][ T358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1040.617678][ T358] ? __pfx__printk+0x10/0x10 [ 1040.617698][ T358] validate_chain+0x1f05/0x2140 [ 1040.617726][ T358] __lock_acquire+0xab9/0xd20 [ 1040.617749][ T358] ? kill_fasync+0x199/0x4d0 [ 1040.617768][ T358] lock_acquire+0x120/0x360 [ 1040.617783][ T358] ? kill_fasync+0x199/0x4d0 [ 1040.617807][ T358] _raw_read_lock_irqsave+0xaf/0x100 [ 1040.617829][ T358] ? kill_fasync+0x199/0x4d0 [ 1040.617848][ T358] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1040.617869][ T358] ? do_raw_spin_lock+0x121/0x290 [ 1040.617895][ T358] kill_fasync+0x199/0x4d0 [ 1040.617913][ T358] ? kill_fasync+0x53/0x4d0 [ 1040.617933][ T358] evdev_pass_values+0x627/0xbd0 [ 1040.617956][ T358] ? evdev_pass_values+0x5e1/0xbd0 [ 1040.617978][ T358] evdev_events+0x1e6/0x340 [ 1040.617996][ T358] ? evdev_events+0x79/0x340 [ 1040.618015][ T358] ? input_pass_values+0x8d/0x890 [ 1040.618033][ T358] input_pass_values+0x288/0x890 [ 1040.618054][ T358] ? input_handle_event+0x70c/0xf30 [ 1040.618069][ T358] input_event_dispose+0x330/0x6b0 [ 1040.618085][ T358] input_inject_event+0x1dd/0x340 [ 1040.618100][ T358] ? input_inject_event+0xb6/0x340 [ 1040.618116][ T358] evdev_write+0x2fc/0x480 [ 1040.618137][ T358] ? __pfx_evdev_write+0x10/0x10 [ 1040.618158][ T358] ? bpf_lsm_file_permission+0x9/0x20 [ 1040.618176][ T358] ? security_file_permission+0x75/0x290 [ 1040.618197][ T358] ? rw_verify_area+0x255/0x4d0 [ 1040.618218][ T358] ? __lock_acquire+0xab9/0xd20 [ 1040.618233][ T358] ? __pfx_evdev_write+0x10/0x10 [ 1040.618253][ T358] vfs_write+0x27e/0xb30 [ 1040.618278][ T358] ? __pfx_vfs_write+0x10/0x10 [ 1040.618300][ T358] ? __fget_files+0x2a/0x420 [ 1040.618316][ T358] ? __fget_files+0x2a/0x420 [ 1040.618330][ T358] ? __fget_files+0x3a0/0x420 [ 1040.618344][ T358] ? __fget_files+0x2a/0x420 [ 1040.618362][ T358] ksys_write+0x145/0x250 [ 1040.618385][ T358] ? __pfx_ksys_write+0x10/0x10 [ 1040.618407][ T358] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 1040.618434][ T358] ? lockdep_hardirqs_on+0x9c/0x150 [ 1040.618458][ T358] __do_fast_syscall_32+0xb6/0x2b0 [ 1040.618474][ T358] ? lockdep_hardirqs_on+0x9c/0x150 [ 1040.618498][ T358] do_fast_syscall_32+0x34/0x80 [ 1040.618513][ T358] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1040.618538][ T358] RIP: 0023:0xf70ad539 [ 1040.618553][ T358] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1040.618569][ T358] RSP: 002b:00000000f549d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1040.618587][ T358] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1040.618600][ T358] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 1040.618614][ T358] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1040.618624][ T358] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1040.618634][ T358] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1040.618651][ T358] [ 1040.939618][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.008956][ T359] kvm: user requested TSC rate below hardware speed