last executing test programs: 3.410001474s ago: executing program 2 (id=8694): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000500)=0x15) sendfile(r0, r1, 0x0, 0x20000023896) 3.003626428s ago: executing program 2 (id=8699): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 2.817507834s ago: executing program 2 (id=8701): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3800000054000100000000000000000007000000", @ANYRES32, @ANYBLOB="20000100"], 0x38}, 0x1, 0xf00}, 0x0) 2.671687357s ago: executing program 2 (id=8704): r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) 2.386253855s ago: executing program 2 (id=8709): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5437, 0x0) 2.189025206s ago: executing program 4 (id=8713): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0xa, r2, 0x0, r1}) 2.04130378s ago: executing program 4 (id=8717): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r2, @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r1, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c000300e028aa46e44ee6830c0003009cf7debf7cdf5a207c007a80080004003465e91c0c0003004a159160a275d9fa08000400ff0f00000800040007000000140001006fde61d99aa98d55b507315489e6cd79140002"], 0x12c}}, 0x0) 1.880748302s ago: executing program 4 (id=8720): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'geneve1\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "7e2104715fbf4196a6e806e246155d59a2cf9a0096f59519767cfe504887963c", "fddd0a9c52b9a7e237949471cf88ecf0b7b5391979943341e7ba5538ada78aa6", "847d4ece81676a7d00d785add41f95faeb00", "e6b03456a628ff939dc7baa4073ba5fbfa31d466d1e59b478af858369b77be00", "f86114c318381d39aae8145645ef9c56057d96c73b318c34a7fbbfee13cf15ab", "feb100"}}) syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e01"], 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) 1.314015181s ago: executing program 3 (id=8726): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='sysv\x00', 0x1005b, 0x0) 1.076299303s ago: executing program 3 (id=8729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001000058009000100b53fb783ce"], 0x48}}, 0x0) 936.834082ms ago: executing program 0 (id=8732): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x22}}]}}]}, 0x8c}}, 0x0) 892.802725ms ago: executing program 3 (id=8733): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90e24fc60", 0x14}], 0x1}, 0x0) 821.936164ms ago: executing program 1 (id=8734): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdd2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000035000107000020000000000003"], 0x14}}, 0x0) 782.653114ms ago: executing program 0 (id=8735): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') close(r0) 712.437787ms ago: executing program 3 (id=8736): unshare(0x20400) r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000600)="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", 0xfd1, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 701.199679ms ago: executing program 1 (id=8737): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe99) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) 683.604243ms ago: executing program 0 (id=8738): r0 = io_uring_setup(0x482f, &(0x7f0000000040)={0x0, 0xd919, 0x100, 0x0, 0x1}) close(r0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) 542.450423ms ago: executing program 1 (id=8739): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="5059685959c54814eb39", 0xa, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r1}, 0x0, 0x0, 0x0) 493.536155ms ago: executing program 0 (id=8740): r0 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 422.874955ms ago: executing program 3 (id=8741): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x800001}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) 403.682838ms ago: executing program 1 (id=8742): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f00006b8000/0x2000)=nil, 0x2000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 399.128938ms ago: executing program 0 (id=8743): unshare(0x20000400) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 360.717411ms ago: executing program 4 (id=8744): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x501041) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 240.463946ms ago: executing program 1 (id=8745): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x4, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x3}]}}}]}, 0x3c}}, 0x0) 159.919785ms ago: executing program 4 (id=8746): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r0, &(0x7f0000002200)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000914) 71.827729ms ago: executing program 2 (id=8747): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001500000008000300", @ANYRES32=r2, @ANYBLOB="20002a800800"], 0x3c}}, 0x0) 61.60936ms ago: executing program 0 (id=8748): r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 61.185699ms ago: executing program 3 (id=8749): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x82, 0x0, &(0x7f0000000340)) 51.36732ms ago: executing program 4 (id=8750): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000000)="c94e2f1099", 0x1e) 0s ago: executing program 1 (id=8751): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) write$binfmt_elf64(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000003800000000000000000002000000ff"], 0x78) kernel console output (not intermixed with test programs): man_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.089395][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.101375][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.111403][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.122139][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.133323][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.164247][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.178662][T19291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.207257][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.219642][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.235292][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.246304][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.256274][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.267711][T19343] program syz.0.6317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.285522][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.304039][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.326287][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.346363][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.357423][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.382786][T19291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.393482][T19291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.418317][ T1850] gspca_ov534_9: reg_w failed -71 [ 432.419656][T19291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.445412][T19291] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.457308][T19291] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.466180][T19291] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.475399][T19291] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.593647][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.609762][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.638906][ T3044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.661687][ T3044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.804202][ T1850] gspca_ov534_9: Unknown sensor 0000 [ 432.804294][ T1850] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 432.837794][ T1850] usb 5-1: USB disconnect, device number 61 [ 433.685933][ T5238] Bluetooth: hci6: command tx timeout [ 433.946581][T19405] bond0: option mode: unable to set because the bond device has slaves [ 435.164601][ T1850] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 435.369520][ T1850] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 435.387582][ T1850] usb 2-1: config 0 has no interface number 0 [ 435.406271][ T1850] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 435.432450][ T1850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.455586][ T1850] usb 2-1: config 0 descriptor?? [ 435.468218][ T1850] ums-realtek 2-1:0.6: USB Mass Storage device detected [ 435.723461][ T1850] usb 2-1: USB disconnect, device number 49 [ 435.764300][ T5238] Bluetooth: hci6: command tx timeout [ 437.504087][ T5381] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 437.573867][T19507] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 437.713806][ T5381] usb 5-1: Using ep0 maxpacket: 16 [ 437.727382][ T5381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.745248][ T5381] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.783925][ T5381] usb 5-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 437.793034][ T5381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.829752][ T5381] usb 5-1: config 0 descriptor?? [ 437.855449][ T5238] Bluetooth: hci6: command tx timeout [ 438.340547][ T5381] input: HID 0458:5015 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5015.006F/input/input79 [ 438.457518][ T5381] input: HID 0458:5015 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5015.006F/input/input80 [ 438.492747][ T5381] input: HID 0458:5015 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5015.006F/input/input81 [ 438.563206][ T5381] kye 0003:0458:5015.006F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5015] on usb-dummy_hcd.4-1/input0 [ 438.602327][ T5381] usb 5-1: USB disconnect, device number 62 [ 439.361479][ T29] audit: type=1326 audit(1725632022.721:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19541 comm="syz.1.6406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x0 [ 439.927050][T19567] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 439.943736][T19567] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 439.984173][T19567] Error parsing options; rc = [-22] [ 440.246725][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.253096][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.034277][T19606] ieee802154 phy0 wpan0: encryption failed: -90 [ 441.253786][ T5381] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 441.472660][ T5381] usb 2-1: config 0 has no interfaces? [ 441.488700][ T5381] usb 2-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 441.513149][ T5381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.544972][ T5381] usb 2-1: config 0 descriptor?? [ 441.719110][T19618] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6440'. [ 441.785851][ T5381] usb 2-1: USB disconnect, device number 50 [ 442.015388][T19623] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 442.037092][T19623] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 442.054850][T19623] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 442.075157][T19623] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 443.317607][T19668] netlink: 'syz.0.6462': attribute type 1 has an invalid length. [ 443.341116][T19668] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.6462'. [ 443.405167][T19674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.571220][ T29] audit: type=1326 audit(1725632026.931:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19676 comm="syz.2.6466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8f77cef9 code=0x7ffc0000 [ 443.653653][ T29] audit: type=1326 audit(1725632026.971:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19676 comm="syz.2.6466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f4e8f77cef9 code=0x7ffc0000 [ 443.709401][ T29] audit: type=1326 audit(1725632026.971:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19676 comm="syz.2.6466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8f77cef9 code=0x7ffc0000 [ 443.742678][ T29] audit: type=1326 audit(1725632026.971:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19676 comm="syz.2.6466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8f77cef9 code=0x7ffc0000 [ 443.826007][T19683] Falling back ldisc for ttyS3. [ 444.040900][T19697] netlink: 'syz.4.6476': attribute type 1 has an invalid length. [ 444.062533][T19697] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.6476'. [ 444.082278][T19697] netlink: 'syz.4.6476': attribute type 1 has an invalid length. [ 444.839102][T19724] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6488'. [ 444.859261][T19724] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 445.965592][ T5244] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.977545][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.987796][ T5244] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.999920][ T5244] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 446.011431][ T5244] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 446.025800][ T5244] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 446.063691][ T5281] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 446.293678][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 446.311597][ T5281] usb 3-1: config 0 has an invalid interface number: 64 but max is 1 [ 446.326075][ T5281] usb 3-1: config 0 has no interface number 1 [ 446.342484][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 446.467537][ T5281] usb 3-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=1c.a5 [ 446.503686][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.511745][ T5281] usb 3-1: Product: syz [ 446.572878][ T5281] usb 3-1: Manufacturer: syz [ 446.589382][ T5281] usb 3-1: SerialNumber: syz [ 446.635282][ T5281] usb 3-1: config 0 descriptor?? [ 446.909014][ T5281] usb 3-1: bad CDC descriptors [ 446.967546][ T5281] usb 3-1: USB disconnect, device number 59 [ 447.357773][T19786] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6512'. [ 447.475902][T19765] chnl_net:caif_netlink_parms(): no params data found [ 447.606383][T19795] ptrace attach of "./syz-executor exec"[19796] was attempted by "./syz-executor exec"[19795] [ 447.832812][T19765] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.884047][T19765] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.891339][T19765] bridge_slave_0: entered allmulticast mode [ 447.918715][T19765] bridge_slave_0: entered promiscuous mode [ 447.948341][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6519'. [ 447.974174][T19765] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.981333][T19765] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.005940][T19765] bridge_slave_1: entered allmulticast mode [ 448.024798][T19765] bridge_slave_1: entered promiscuous mode [ 448.052999][T19813] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 448.083855][ T5238] Bluetooth: hci4: command tx timeout [ 448.153485][T19819] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6525'. [ 448.281809][T19765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.320326][T19765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.486464][T19765] team0: Port device team_slave_0 added [ 448.498039][T19831] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.6531'. [ 448.517724][T19765] team0: Port device team_slave_1 added [ 448.532867][T19831] netlink: 'syz.0.6531': attribute type 1 has an invalid length. [ 448.547981][T19831] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6531'. [ 448.646606][T19765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.672033][T19765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.746450][T19765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.780362][T19765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.797622][T19765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.880331][T19765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 449.121336][T19765] hsr_slave_0: entered promiscuous mode [ 449.140413][T19765] hsr_slave_1: entered promiscuous mode [ 449.160305][T19765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 449.168083][T19765] Cannot create hsr debugfs directory [ 449.599741][T19765] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.648937][T19853] netlink: 35 bytes leftover after parsing attributes in process `syz.0.6541'. [ 449.669000][T19855] team0: entered promiscuous mode [ 449.674423][T19855] team_slave_0: entered promiscuous mode [ 449.680391][T19855] team_slave_1: entered promiscuous mode [ 449.698850][T19855] team0: left promiscuous mode [ 449.703971][T19855] team_slave_0: left promiscuous mode [ 449.724997][T19855] team_slave_1: left promiscuous mode [ 449.825980][T19765] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.960538][T19860] [U] ƒ [ 450.112107][T19765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.164546][ T5238] Bluetooth: hci4: command tx timeout [ 450.302550][T19765] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.361221][T19876] tun0: tun_chr_ioctl cmd 35108 [ 450.652104][T19765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 450.707330][T19765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 450.756843][T19765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 450.777806][ T29] audit: type=1326 audit(1725632034.141:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19890 comm="syz.2.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8f77cef9 code=0x7ffc0000 [ 450.837425][T19765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 450.854315][ T29] audit: type=1326 audit(1725632034.141:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19890 comm="syz.2.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8f77cef9 code=0x7ffc0000 [ 450.940099][ T29] audit: type=1326 audit(1725632034.141:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19890 comm="syz.2.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f4e8f77cef9 code=0x7ffc0000 [ 450.975650][T19898] netlink: 'syz.2.6560': attribute type 6 has an invalid length. [ 451.001380][ T29] audit: type=1326 audit(1725632034.141:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19890 comm="syz.2.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8f77cef9 code=0x7ffc0000 [ 451.081715][ T29] audit: type=1326 audit(1725632034.141:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19890 comm="syz.2.6558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e8f77cef9 code=0x7ffc0000 [ 451.296548][T19765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.358373][T19765] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.432021][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.439239][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 451.493092][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.500274][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.199279][T19765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.243774][ T5244] Bluetooth: hci4: command tx timeout [ 452.457439][T19765] veth0_vlan: entered promiscuous mode [ 452.506949][T19765] veth1_vlan: entered promiscuous mode [ 452.616551][T19765] veth0_macvtap: entered promiscuous mode [ 452.643215][T19765] veth1_macvtap: entered promiscuous mode [ 452.693635][T19950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6582'. [ 452.738273][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.772938][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.818438][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.856406][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.886855][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.923681][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.942479][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.963336][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.995959][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.029912][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.062745][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.094432][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.137826][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.164359][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.189190][T19765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.530109][T19962] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 453.579532][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.623585][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.633421][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.644530][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.654437][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.669633][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.680148][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.713602][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.728998][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.740143][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.770974][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.795291][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.823084][T19765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.861212][T19765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.905287][T19765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.937362][T19765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.984202][T19765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.992953][T19765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.049020][T19765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.070956][T19984] batadv_slave_1: entered allmulticast mode [ 454.084702][T19988] netlink: 340 bytes leftover after parsing attributes in process `syz.1.6600'. [ 454.112154][T19989] batadv_slave_1: left allmulticast mode [ 454.325501][ T5244] Bluetooth: hci4: command 0x0419 tx timeout [ 454.350561][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.378668][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.462228][ T2511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.483445][ T2511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.017961][ T29] audit: type=1326 audit(1725632038.381:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20013 comm="syz.1.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 455.072667][ T29] audit: type=1326 audit(1725632038.381:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20013 comm="syz.1.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 455.112815][ T29] audit: type=1326 audit(1725632038.401:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20013 comm="syz.1.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 455.156587][ T29] audit: type=1326 audit(1725632038.411:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20013 comm="syz.1.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 455.189181][ T29] audit: type=1326 audit(1725632038.411:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20013 comm="syz.1.6611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 455.262862][T20018] tap0: tun_chr_ioctl cmd 1074812118 [ 455.814194][ T5381] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 456.013617][ T5381] usb 5-1: Using ep0 maxpacket: 8 [ 456.020827][ T5381] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec [ 456.059220][ T5381] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.078936][ T5381] usb 5-1: config 0 descriptor?? [ 456.107058][ T5381] ttusb_dec_send_command: command bulk message failed: error -22 [ 456.146658][ T5381] ttusb-dec 5-1:0.0: probe with driver ttusb-dec failed with error -22 [ 456.314039][ T5381] usb 5-1: USB disconnect, device number 63 [ 456.404253][ T5238] Bluetooth: hci4: command 0x0419 tx timeout [ 456.498657][T20055] netlink: 'syz.1.6630': attribute type 32 has an invalid length. [ 456.534180][T20055] netlink: 280 bytes leftover after parsing attributes in process `syz.1.6630'. [ 456.543397][T20055] unsupported nla_type 8192 [ 457.524942][T20097] input: syz0 as /devices/virtual/input/input83 [ 457.600857][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 457.600875][ T29] audit: type=1326 audit(1725632040.961:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20099 comm="syz.3.6650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 457.677707][ T29] audit: type=1326 audit(1725632040.961:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20099 comm="syz.3.6650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 457.778226][ T29] audit: type=1326 audit(1725632040.971:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20099 comm="syz.3.6650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 457.844494][ T29] audit: type=1326 audit(1725632040.971:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20099 comm="syz.3.6650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 457.900345][ T29] audit: type=1326 audit(1725632040.981:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20099 comm="syz.3.6650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 457.970210][ T29] audit: type=1326 audit(1725632040.981:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20099 comm="syz.3.6650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 459.963805][ T5281] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 460.163751][ T5244] Bluetooth: hci4: command 0x0419 tx timeout [ 460.169976][ T5281] usb 2-1: Using ep0 maxpacket: 16 [ 460.177985][ T5281] usb 2-1: config 0 has no interfaces? [ 460.189403][ T5281] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 460.203783][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.218458][ T5281] usb 2-1: Product: syz [ 460.222718][ T5281] usb 2-1: Manufacturer: syz [ 460.227468][ T5281] usb 2-1: SerialNumber: syz [ 460.235257][ T5281] usb 2-1: config 0 descriptor?? [ 460.553996][ T5310] usb 2-1: USB disconnect, device number 51 [ 461.767997][T20227] sctp: [Deprecated]: syz.2.6711 (pid 20227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.767997][T20227] Use struct sctp_sack_info instead [ 462.417188][T20244] ./file0: Can't open blockdev [ 462.803776][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 464.217349][T20318] netlink: 'syz.1.6750': attribute type 1 has an invalid length. [ 464.233576][T20318] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.6750'. [ 464.242826][T20318] netlink: 'syz.1.6750': attribute type 1 has an invalid length. [ 464.277269][T20318] netlink: 'syz.1.6750': attribute type 2 has an invalid length. [ 465.393849][ T8] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 465.587466][ T8] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 465.614901][ T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 465.642530][ T8] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.666954][ T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 465.683243][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.709007][ T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 465.722999][ T8] usb 5-1: invalid MIDI out EP 0 [ 465.839123][ T8] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 466.064887][ T8] usb 5-1: USB disconnect, device number 64 [ 466.354694][T20389] netlink: 'syz.0.6782': attribute type 25 has an invalid length. [ 466.362558][T20389] netlink: 'syz.0.6782': attribute type 8 has an invalid length. [ 467.064782][T20413] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6794'. [ 467.587559][T20436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6805'. [ 467.637427][T20436] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6805'. [ 467.945061][T20444] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 468.053767][ T5310] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 468.247736][ T5310] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 468.268876][ T5310] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.314423][ T5310] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 468.332504][ T5310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.363385][ T5310] usb 2-1: Product: syz [ 468.371598][ T5310] usb 2-1: Manufacturer: syz [ 468.390789][ T5310] usb 2-1: SerialNumber: syz [ 468.421216][T20434] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 468.654796][ T5310] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 468.694765][ T5310] usb 2-1: USB disconnect, device number 52 [ 469.343037][T20467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6820'. [ 470.053025][T20489] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 471.024628][T20523] netlink: 'syz.0.6848': attribute type 1 has an invalid length. [ 471.174088][T20531] netlink: 'syz.0.6852': attribute type 2 has an invalid length. [ 471.243698][T20536] netlink: 'syz.4.6854': attribute type 3 has an invalid length. [ 471.263961][T20536] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6854'. [ 471.292586][T20536] netlink: 'syz.4.6854': attribute type 3 has an invalid length. [ 471.523963][ T8] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 471.630916][T20548] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6859'. [ 471.764340][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 471.773968][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.804312][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.835229][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 471.874381][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 471.893574][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.915890][ T8] usb 2-1: config 0 descriptor?? [ 472.029358][T20561] program syz.4.6867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.331420][ T8] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 472.353637][ T8] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 472.360893][ T8] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 472.383809][ T8] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 472.391068][ T8] microsoft 0003:045E:07DA.0070: unknown main item tag 0x0 [ 472.420473][ T8] microsoft 0003:045E:07DA.0070: unknown main item tag 0x5 [ 472.433640][ T8] microsoft 0003:045E:07DA.0070: report is too long [ 472.456064][ T8] microsoft 0003:045E:07DA.0070: item 0 0 0 8 parsing failed [ 472.474342][ T8] microsoft 0003:045E:07DA.0070: parse failed [ 472.480745][ T8] microsoft 0003:045E:07DA.0070: probe with driver microsoft failed with error -22 [ 472.613613][ T46] usb 2-1: USB disconnect, device number 53 [ 473.353836][T20587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6879'. [ 473.925523][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 473.937552][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 473.947659][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 473.975457][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 473.989362][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 473.998465][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 474.337107][ T82] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.405860][T20615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6890'. [ 474.581262][ T82] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.706691][T20623] VFS: could not find a valid V7 on nullb0. [ 474.898728][ T82] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.226325][ T82] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.444650][T20600] chnl_net:caif_netlink_parms(): no params data found [ 475.734417][T20658] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 475.777229][ T82] bridge_slave_1: left allmulticast mode [ 475.782928][ T82] bridge_slave_1: left promiscuous mode [ 475.853789][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.878644][ T82] bridge_slave_0: left allmulticast mode [ 475.909437][ T82] bridge_slave_0: left promiscuous mode [ 475.925385][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.087516][ T5244] Bluetooth: hci6: command tx timeout [ 477.077152][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.089860][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.102445][ T82] bond0 (unregistering): Released all slaves [ 477.129076][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6912'. [ 477.144424][T20667] veth1_macvtap: left promiscuous mode [ 477.151429][T20667] macsec0: entered allmulticast mode [ 477.331301][T20600] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.373694][T20600] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.394573][T20600] bridge_slave_0: entered allmulticast mode [ 477.402030][T20600] bridge_slave_0: entered promiscuous mode [ 477.451862][T20690] ALSA: mixer_oss: invalid OSS volume '' [ 477.601893][T20600] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.609418][T20600] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.625447][T20600] bridge_slave_1: entered allmulticast mode [ 477.646359][T20600] bridge_slave_1: entered promiscuous mode [ 477.992325][T20600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.047209][T20600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.166346][ T5244] Bluetooth: hci6: command tx timeout [ 478.287209][ T82] hsr_slave_0: left promiscuous mode [ 478.329986][ T82] hsr_slave_1: left promiscuous mode [ 478.366208][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.391294][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.433262][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.441782][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.533881][ T82] veth1_macvtap: left promiscuous mode [ 478.549733][ T82] veth0_macvtap: left promiscuous mode [ 478.570085][ T82] veth1_vlan: left promiscuous mode [ 478.584252][ T82] veth0_vlan: left promiscuous mode [ 480.252801][ T5244] Bluetooth: hci6: command tx timeout [ 480.321053][ T82] team0 (unregistering): Port device team_slave_1 removed [ 480.495097][ T82] team0 (unregistering): Port device team_slave_0 removed [ 481.168380][T20600] team0: Port device team_slave_0 added [ 481.187857][T20600] team0: Port device team_slave_1 added [ 481.236402][T20769] netlink: 'syz.1.6956': attribute type 1 has an invalid length. [ 481.263952][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6956'. [ 481.437858][T20600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.454266][T20600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.521532][T20600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.608008][T20600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.642822][T20600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.724149][T20600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.837851][ T29] audit: type=1400 audit(1725632065.201:234): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=20789 comm="syz.3.6966" dest=20002 netif=wpan0 [ 481.863038][T20600] hsr_slave_0: entered promiscuous mode [ 481.881113][T20600] hsr_slave_1: entered promiscuous mode [ 481.909777][T20600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.938217][T20600] Cannot create hsr debugfs directory [ 482.324581][ T5244] Bluetooth: hci6: command tx timeout [ 482.731071][T20823] netem: incorrect gi model size [ 482.747847][T20823] netem: change failed [ 482.753167][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6982'. [ 483.063057][T20600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 483.088181][T20600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 483.134163][T20600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 483.160067][T20841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6989'. [ 483.165068][T20600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 483.398762][ T5278] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 483.409135][T20600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.446225][T20600] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.477635][ T2511] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.484854][ T2511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.540393][ T2511] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.547576][ T2511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.549686][T20854] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6996'. [ 483.603053][ T5278] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 483.623049][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.656209][ T5278] usb 5-1: Product: syz [ 483.676851][ T5278] usb 5-1: Manufacturer: syz [ 483.698074][ T5278] usb 5-1: SerialNumber: syz [ 483.714712][ T5278] usb 5-1: config 0 descriptor?? [ 483.940413][T20600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.944415][ T5278] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 484.078038][T20600] veth0_vlan: entered promiscuous mode [ 484.120255][T20600] veth1_vlan: entered promiscuous mode [ 484.191874][T20600] veth0_macvtap: entered promiscuous mode [ 484.228190][T20600] veth1_macvtap: entered promiscuous mode [ 484.260964][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.275924][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.286625][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.297144][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.306989][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.333627][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.342019][ T5278] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 484.374138][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.393635][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.413658][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.444454][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.464693][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.489424][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.515685][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.561808][ T5278] usb 5-1: USB disconnect, device number 65 [ 484.567065][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.615307][T20600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.656800][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.688083][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.712701][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.743605][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.774934][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.794140][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.816053][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.834769][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.854354][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.866572][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.876872][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.888594][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.900822][T20600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.915870][T20600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.929412][T20600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.972730][T20600] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.984764][T20600] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.993482][T20600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.011669][ T8] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 485.019491][T20600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.082000][T20896] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7008'. [ 485.209393][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.224115][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 485.231515][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.233614][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.265641][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.278851][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.281695][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.304283][ T8] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 485.313460][T20898] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.7009'. [ 485.334811][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.367156][ T8] usb 2-1: config 0 descriptor?? [ 485.511127][T20905] loop8: detected capacity change from 0 to 6 [ 485.526434][T20907] vlan2: entered promiscuous mode [ 485.531525][T20907] vlan2: entered allmulticast mode [ 485.542150][T20905] Dev loop8: unable to read RDB block 6 [ 485.570486][T20905] loop8: unable to read partition table [ 485.601023][T20905] loop8: partition table beyond EOD, truncated [ 485.623632][T20905] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 485.623632][T20905] ) failed (rc=-5) [ 485.724298][ T1850] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 485.783030][T20891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.804342][T20891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.934900][ T1850] usb 4-1: Using ep0 maxpacket: 32 [ 485.958847][ T1850] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 485.998515][ T1850] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 486.024125][ T1850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.036443][ T8] usb 2-1: string descriptor 0 read error: -71 [ 486.048872][ T1850] usb 4-1: Product: syz [ 486.053062][ T1850] usb 4-1: Manufacturer: syz [ 486.078308][ T1850] usb 4-1: SerialNumber: syz [ 486.079405][ T8] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 486.099995][ T8] letsketch 0003:6161:4D15.0071: probe with driver letsketch failed with error -32 [ 486.118786][ T1850] usb 4-1: config 0 descriptor?? [ 486.150567][ T8] usb 2-1: USB disconnect, device number 54 [ 486.157108][T20902] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 486.193210][ T1850] hub 4-1:0.0: bad descriptor, ignoring hub [ 486.199470][ T1850] hub 4-1:0.0: probe with driver hub failed with error -5 [ 486.216725][ T1850] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input84 [ 486.281788][T20925] tap0: tun_chr_ioctl cmd 1074025677 [ 486.297420][T20925] tap0: linktype set to 6 [ 486.583956][ T8] usb 4-1: USB disconnect, device number 55 [ 486.584027][ C1] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 487.383289][ T5281] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 487.586169][ T5281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.607764][ T5281] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 487.635552][ T5281] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 487.655525][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.682227][ T5281] usb 3-1: config 0 descriptor?? [ 487.909119][T20975] Bluetooth: hci3: unsupported parameter 64512 [ 487.910133][ T5281] usb 3-1: USB disconnect, device number 60 [ 487.920640][T20975] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 488.533728][ T46] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 488.678574][T21000] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7056'. [ 488.703710][T21002] program syz.2.7057 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.743720][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 488.756988][ T46] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 488.779305][ T46] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 488.814139][ T46] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 488.853705][ T46] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 488.893625][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 488.903088][ T46] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 488.934367][ T46] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 488.942815][ T46] usb 5-1: Product: syz [ 488.960615][ T46] usb 5-1: Manufacturer: syz [ 488.977284][ T46] usb 5-1: SerialNumber: syz [ 489.003042][ T46] usb 5-1: config 0 descriptor?? [ 489.016474][ T46] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 489.055667][ T46] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 489.124224][ T8] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 489.259927][ T46] usb 5-1: USB disconnect, device number 66 [ 489.278194][ T46] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 489.325742][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 489.335904][ T8] usb 3-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 489.357017][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.381835][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 101, changing to 10 [ 489.396983][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24675, setting to 1024 [ 489.414137][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.442133][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 489.459595][ T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 489.473351][ T8] usb 3-1: Manufacturer: syz [ 489.485153][ T8] usb 3-1: config 0 descriptor?? [ 489.496811][ T8] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 489.504262][ T8] mceusb 3-1:0.0: probe with driver mceusb failed with error -12 [ 489.515024][ T8] usbhid 3-1:0.0: can't add hid device: -22 [ 489.524482][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 489.760219][ T5281] usb 3-1: USB disconnect, device number 61 [ 490.933652][ T8] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 491.000159][T21052] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 491.137453][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 491.157968][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 491.186115][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 491.223670][ T8] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 491.267880][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.283625][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.293798][ T8] usb 2-1: Product: syz [ 491.297992][ T8] usb 2-1: Manufacturer: syz [ 491.304631][ T8] usb 2-1: SerialNumber: syz [ 491.749683][ T8] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 491.892215][T21072] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 492.183836][T21078] bpf: Bad value for 'uid' [ 492.231259][ T8] usb 2-1: USB disconnect, device number 55 [ 492.420430][T21089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7094'. [ 492.474670][T21088] vxcan1: tx address claim with dlc 1 [ 492.696024][T21102] overlayfs: missing 'workdir' [ 493.051849][ T5244] Bluetooth: hci0: command tx timeout [ 493.758639][T21149] netlink: 172 bytes leftover after parsing attributes in process `syz.2.7122'. [ 493.833768][ T5277] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 494.065533][ T5277] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 494.095384][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 494.132240][ T5277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 494.156964][ T5277] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.199407][ T5277] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 494.228893][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.252528][ T5277] usb 5-1: Product: syz [ 494.261335][ T5277] usb 5-1: Manufacturer: syz [ 494.270444][ T5277] usb 5-1: SerialNumber: syz [ 494.289485][ T5277] usb 5-1: config 0 descriptor?? [ 494.307121][ T5277] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 494.343312][ T5277] em28xx 5-1:0.0: Video interface 0 found: isoc [ 494.569521][T21180] tipc: Started in network mode [ 494.581890][T21180] tipc: Node identity 663a20300a74797, cluster identity 4711 [ 494.609211][ T5277] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 494.610076][T21180] tipc: Enabling of bearer rejected, failed to enable media [ 494.709533][ T5277] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 494.723456][ T5277] em28xx 5-1:0.0: board has no eeprom [ 494.813729][ T5277] em28xx 5-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 494.844899][ T5277] em28xx 5-1:0.0: analog set to isoc mode. [ 494.850931][T21188] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7140'. [ 494.851282][ T8] em28xx 5-1:0.0: Registering V4L2 extension [ 494.884114][ T5277] usb 5-1: USB disconnect, device number 67 [ 494.895224][ T5277] em28xx 5-1:0.0: Disconnecting em28xx [ 494.994134][ T5381] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 495.006596][ T8] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 495.033088][ T8] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 495.046750][ T8] em28xx 5-1:0.0: No AC97 audio processor [ 495.069683][ T8] usb 5-1: Decoder not found [ 495.083651][ T8] em28xx 5-1:0.0: failed to create media graph [ 495.090153][ T8] em28xx 5-1:0.0: V4L2 device video71 deregistered [ 495.115459][ T8] em28xx 5-1:0.0: Remote control support is not available for this card. [ 495.134190][ T5277] em28xx 5-1:0.0: Closing input extension [ 495.142558][T21199] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 495.176219][T21199] overlayfs: conflicting lowerdir path [ 495.190202][ T5277] em28xx 5-1:0.0: Freeing device [ 495.190968][ T5381] usb 3-1: Using ep0 maxpacket: 8 [ 495.234707][ T5381] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 495.264169][ T5381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.285338][ T5381] usb 3-1: Product: syz [ 495.289526][ T5381] usb 3-1: Manufacturer: syz [ 495.313597][ T5381] usb 3-1: SerialNumber: syz [ 495.325234][ T5381] usb 3-1: config 0 descriptor?? [ 495.335704][ T5381] gspca_main: sq930x-2.14.0 probing 2770:930c [ 495.673263][T21213] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 495.845808][T21220] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7155'. [ 495.883728][T21220] netlink: 'syz.4.7155': attribute type 6 has an invalid length. [ 495.999748][T21222] tun0: tun_chr_ioctl cmd 1074025677 [ 496.018402][T21222] tun0: linktype set to 805 [ 496.169680][ T5381] gspca_sq930x: ucbus_write failed -71 [ 496.175536][ T5381] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 496.206591][ T5381] usb 3-1: USB disconnect, device number 62 [ 496.317630][ T29] audit: type=1326 audit(1725632079.681:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21233 comm="syz.1.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 496.370228][ T29] audit: type=1326 audit(1725632079.681:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21233 comm="syz.1.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 496.391197][T21240] netlink: 43 bytes leftover after parsing attributes in process `syz.4.7165'. [ 496.430779][ T29] audit: type=1326 audit(1725632079.681:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21233 comm="syz.1.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 496.467377][ T29] audit: type=1326 audit(1725632079.681:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21233 comm="syz.1.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 496.522299][ T29] audit: type=1326 audit(1725632079.681:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21233 comm="syz.1.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 496.544302][T21247] netlink: 'syz.4.7168': attribute type 12 has an invalid length. [ 499.114372][T21335] ip6gretap0: entered promiscuous mode [ 499.151924][T21335] ip6gretap0: left promiscuous mode [ 499.293295][T21339] pimreg: entered allmulticast mode [ 499.883636][ T5281] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 500.013791][ T8] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 500.093636][ T5281] usb 4-1: Using ep0 maxpacket: 16 [ 500.102077][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.134297][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.153876][ T5281] usb 4-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 500.163065][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.201187][ T5281] usb 4-1: config 0 descriptor?? [ 500.206397][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 500.224622][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 500.254269][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 500.285729][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 500.317734][ T8] usb 3-1: New USB device found, idVendor=0458, idProduct=5005, bcdDevice= 0.00 [ 500.334178][T21384] netlink: 'syz.0.7228': attribute type 1 has an invalid length. [ 500.352157][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.363076][ T8] usb 3-1: config 0 descriptor?? [ 500.430811][T21387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.819124][T21368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.842647][T21368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.945726][ T8] input: HID 0458:5005 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5005.0073/input/input87 [ 500.978402][T21402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7235'. [ 501.039108][ T46] usb 4-1: USB disconnect, device number 56 [ 501.040711][ T8] input: HID 0458:5005 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5005.0073/input/input88 [ 501.184109][ T8] kye 0003:0458:5005.0073: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5005] on usb-dummy_hcd.2-1/input0 [ 501.209004][T21410] vcan0: entered allmulticast mode [ 501.237558][ T8] usb 3-1: USB disconnect, device number 63 [ 501.688439][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.694909][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.800474][T21433] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7249'. [ 502.208280][T21446] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 502.503239][T21456] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7260'. [ 502.624512][T21460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7262'. [ 502.851775][T21468] ceph: missing cluster fsid [ 502.861008][T21468] ceph: separator ':' missing in source [ 503.851448][ T5310] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 504.073627][ T5310] usb 2-1: Using ep0 maxpacket: 8 [ 504.082226][ T5310] usb 2-1: config 0 interface 0 has no altsetting 0 [ 504.101146][T21518] syz.0.7288[21518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.101381][T21518] syz.0.7288[21518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.129925][ T5310] usb 2-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 504.170310][ T5310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.188676][ T5310] usb 2-1: Product: syz [ 504.192873][ T5310] usb 2-1: Manufacturer: syz [ 504.207691][ T5310] usb 2-1: SerialNumber: syz [ 504.224522][ T5310] usb 2-1: config 0 descriptor?? [ 504.232062][ T5310] usb 2-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 504.413666][ T5310] usb 2-1: reset high-speed USB device number 56 using dummy_hcd [ 505.104228][ T5310] usb 2-1: device descriptor read/64, error -71 [ 505.373757][ T5310] usb 2-1: reset high-speed USB device number 56 using dummy_hcd [ 506.019687][ T5310] usb 2-1: [UEAGLE-ATM] interface 1 not found [ 506.037746][ T5310] ueagle-atm 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 506.060828][ T5310] usb 2-1: USB disconnect, device number 56 [ 506.205182][ T29] audit: type=1326 audit(1725632089.571:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21584 comm="syz.4.7317" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86db97cef9 code=0x0 [ 507.133659][ T5310] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 507.211319][T21613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7328'. [ 507.325661][ T5310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.358957][ T5310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.383755][ T5310] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 507.399563][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 507.418033][ T5310] usb 2-1: SerialNumber: syz [ 507.493736][ T5277] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 507.637001][ T5310] usb 2-1: 0:2 : does not exist [ 507.664704][ T5310] usb 2-1: USB disconnect, device number 57 [ 507.723755][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 507.743082][ T5277] usb 5-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 507.764700][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.781297][ T5277] usb 5-1: Product: syz [ 507.802651][ T5277] usb 5-1: Manufacturer: syz [ 507.813753][ T5277] usb 5-1: SerialNumber: syz [ 507.825501][ T5277] usb 5-1: config 0 descriptor?? [ 508.100205][ T5277] kaweth 5-1:0.0: Firmware present in device. [ 508.126880][ T5277] kaweth 5-1:0.0: Error reading configuration (-71), no net device created [ 508.155050][ T5277] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 508.184030][ T5277] usb 5-1: USB disconnect, device number 68 [ 509.798662][T21692] gretap0: entered promiscuous mode [ 509.849106][T21692] gretap0: left promiscuous mode [ 510.275048][T21714] trusted_key: syz.0.7375 sent an empty control message without MSG_MORE. [ 510.784064][T21736] Bluetooth: hci3: unsupported parameter 1025 [ 510.819952][T21736] Bluetooth: hci3: invalid length 0, exp 2 for type 9 [ 511.180759][T21756] netlink: 'syz.2.7393': attribute type 1 has an invalid length. [ 511.223857][T21756] netlink: 'syz.2.7393': attribute type 2 has an invalid length. [ 511.657962][T21779] netlink: 'syz.3.7403': attribute type 1 has an invalid length. [ 511.703700][T21779] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.7403'. [ 511.746714][T21779] netlink: 'syz.3.7403': attribute type 1 has an invalid length. [ 511.819794][T21784] sp0: Synchronizing with TNC [ 512.054472][T21789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7408'. [ 512.313671][ T5277] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 512.513686][ T5277] usb 4-1: Using ep0 maxpacket: 8 [ 512.529728][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.548055][T21811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7418'. [ 512.558566][ T5277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.570758][T21811] netlink: 124 bytes leftover after parsing attributes in process `syz.0.7418'. [ 512.582082][ T5277] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 512.603051][ T5277] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 512.644035][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.662199][ T5277] usb 4-1: config 0 descriptor?? [ 513.111130][ T5277] logitech 0003:046D:C29C.0074: report_id 35679 is invalid [ 513.115668][T21832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7428'. [ 513.132947][ T5277] logitech 0003:046D:C29C.0074: item 0 2 1 8 parsing failed [ 513.152006][ T5277] logitech 0003:046D:C29C.0074: parse failed [ 513.158564][ T5277] logitech 0003:046D:C29C.0074: probe with driver logitech failed with error -22 [ 513.180792][T21832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7428'. [ 513.288967][T21835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7429'. [ 513.380832][ T5310] usb 4-1: USB disconnect, device number 57 [ 513.545184][T21843] netlink: 'syz.1.7433': attribute type 21 has an invalid length. [ 513.564559][T21843] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7433'. [ 513.593677][T21843] netlink: 'syz.1.7433': attribute type 4 has an invalid length. [ 513.604319][T21843] netlink: 'syz.1.7433': attribute type 5 has an invalid length. [ 513.623659][T21843] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7433'. [ 513.815837][ T5381] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 514.013766][ T5381] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.030137][ T5381] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.051777][ T5381] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 514.068404][ T5381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 514.097637][ T5381] usb 3-1: SerialNumber: syz [ 514.354525][ T5381] usb 3-1: 0:2 : does not exist [ 514.388961][ T5381] usb 3-1: USB disconnect, device number 64 [ 514.618886][ T29] audit: type=1326 audit(1725632097.981:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21877 comm="syz.4.7449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86db97cef9 code=0x0 [ 514.824011][ T5281] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 515.033847][ T5281] usb 2-1: Using ep0 maxpacket: 16 [ 515.048761][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.080329][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.093936][ T5281] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 515.103198][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.131238][ T5281] usb 2-1: config 0 descriptor?? [ 515.388793][T21903] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 515.568550][ T5281] corsair 0003:1B1C:1B02.0075: unknown main item tag 0x0 [ 515.596505][ T5281] corsair 0003:1B1C:1B02.0075: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 515.778097][ T5281] corsair 0003:1B1C:1B02.0075: Read invalid backlight brightness: db. [ 515.978775][ T5310] usb 2-1: USB disconnect, device number 58 [ 516.103687][ T29] audit: type=1326 audit(1725632099.461:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.3.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 516.154156][ T29] audit: type=1326 audit(1725632099.461:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.3.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 516.193665][ T29] audit: type=1326 audit(1725632099.461:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.3.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 516.235153][ T29] audit: type=1326 audit(1725632099.461:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.3.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 516.296090][ T29] audit: type=1326 audit(1725632099.461:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.3.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 516.336294][ T29] audit: type=1326 audit(1725632099.461:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.3.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 516.360103][ T29] audit: type=1326 audit(1725632099.461:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.3.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 516.407357][ T29] audit: type=1326 audit(1725632099.461:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.3.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 516.470256][ T29] audit: type=1326 audit(1725632099.461:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21931 comm="syz.3.7475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 516.631143][T21951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7485'. [ 516.792604][T21959] netlink: 'syz.1.7488': attribute type 1 has an invalid length. [ 516.812748][T21959] netlink: 9364 bytes leftover after parsing attributes in process `syz.1.7488'. [ 516.822552][T21959] netlink: 'syz.1.7488': attribute type 2 has an invalid length. [ 516.839938][T21959] netlink: 'syz.1.7488': attribute type 1 has an invalid length. [ 516.848417][ T5310] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 517.012065][ T1850] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 517.056031][ T5310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.067638][ T5310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.081299][ T5310] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 517.114109][ T5310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.136041][ T5310] usb 5-1: config 0 descriptor?? [ 517.204304][ T1850] usb 3-1: Using ep0 maxpacket: 16 [ 517.212084][ T1850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 517.224991][ T1850] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 517.234958][ T1850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.242989][ T1850] usb 3-1: Product: syz [ 517.264288][ T1850] usb 3-1: Manufacturer: syz [ 517.268941][ T1850] usb 3-1: SerialNumber: syz [ 517.278042][ T1850] usb 3-1: config 0 descriptor?? [ 517.298846][ T1850] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 517.311737][ T1850] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 517.570548][ T5310] aquacomputer_d5next 0003:0C70:F011.0076: item fetching failed at offset 0/5 [ 517.589052][ T5310] aquacomputer_d5next 0003:0C70:F011.0076: probe with driver aquacomputer_d5next failed with error -22 [ 517.832272][ T5310] usb 5-1: USB disconnect, device number 69 [ 517.934924][ T1850] em28xx 3-1:0.0: chip ID is em2800 [ 518.208477][ T1850] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 518.238762][ T1850] em28xx 3-1:0.0: board has no eeprom [ 518.241142][T21989] 9p: Unknown access argument 18446744073709551615: -34 [ 518.374075][ T1850] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 518.402259][ T1850] em28xx 3-1:0.0: dvb set to bulk mode. [ 518.422820][ T5310] em28xx 3-1:0.0: Binding DVB extension [ 518.464217][ T1850] usb 3-1: USB disconnect, device number 65 [ 518.471101][ T1850] em28xx 3-1:0.0: Disconnecting em28xx [ 518.582651][ T5310] em28xx 3-1:0.0: Registering input extension [ 518.605992][ T1850] em28xx 3-1:0.0: Closing input extension [ 518.637673][ T1850] em28xx 3-1:0.0: Freeing device [ 518.961720][T22005] netlink: 'syz.4.7509': attribute type 10 has an invalid length. [ 518.981725][T22005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.007950][T22005] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 519.065160][T22005] syz.4.7509 (22005) used greatest stack depth: 18384 bytes left [ 519.174898][T22015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7513'. [ 519.210414][T22015] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.218869][T22015] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.372392][T22067] wg1: entered promiscuous mode [ 520.393770][T22067] wg1: entered allmulticast mode [ 520.399168][T22067] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 520.566717][T22081] program syz.2.7545 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.001650][T22097] bpf: Bad value for 'gid' [ 521.703498][ C0] sched: RT throttling activated [ 524.048662][T22187] netlink: 203452 bytes leftover after parsing attributes in process `syz.0.7591'. [ 524.085666][T22187] netlink: 'syz.0.7591': attribute type 2 has an invalid length. [ 524.093442][T22187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7591'. [ 524.477663][T22198] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7597'. [ 524.510136][T22198] netlink: 'syz.1.7597': attribute type 2 has an invalid length. [ 524.523754][T22198] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7597'. [ 524.727743][T22203] bridge0: port 3(erspan0) entered blocking state [ 524.792150][T22203] bridge0: port 3(erspan0) entered disabled state [ 524.824278][T22203] erspan0: entered allmulticast mode [ 524.861456][T22203] erspan0: entered promiscuous mode [ 524.915801][T22203] bridge0: port 3(erspan0) entered blocking state [ 524.922446][T22203] bridge0: port 3(erspan0) entered forwarding state [ 525.612101][T22231] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.660687][T22231] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.723610][T22237] netlink: 'syz.0.7612': attribute type 2 has an invalid length. [ 525.773731][T22237] netlink: 'syz.0.7612': attribute type 1 has an invalid length. [ 526.946310][ T5310] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 527.156034][ T5310] usb 5-1: unable to get BOS descriptor or descriptor too short [ 527.186185][ T5310] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 527.195440][ T5310] usb 5-1: can't read configurations, error -71 [ 529.348879][T22377] ebtables: ebtables: counters copy to user failed while replacing table [ 530.318199][T22421] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 530.983884][ T29] audit: type=1326 audit(1725632114.341:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22448 comm="syz.4.7707" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86db97cef9 code=0x0 [ 531.438829][T22467] program syz.0.7714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 531.771024][T22477] vivid-001: disconnect [ 531.789654][T22476] vivid-001: reconnect [ 532.374280][T22503] netlink: 'syz.0.7730': attribute type 25 has an invalid length. [ 532.824118][ T5310] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 532.932765][T22526] tap0: tun_chr_ioctl cmd 2148553947 [ 532.950966][T22532] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7745'. [ 533.005825][ T5310] usb 5-1: config 0 has no interfaces? [ 533.011432][ T5310] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.026789][ T5310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.041255][ T5310] usb 5-1: config 0 descriptor?? [ 533.260598][ T5381] usb 5-1: USB disconnect, device number 72 [ 533.476317][T22552] binder: 22551:22552 ioctl c018620c 200005c0 returned -1 [ 533.515027][ T5310] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 533.714563][ T5310] usb 2-1: Using ep0 maxpacket: 8 [ 533.721663][ T5310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 533.732374][ T5310] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 533.747522][ T5310] usb 2-1: config 8 has no interface number 0 [ 533.761046][ T5310] usb 2-1: config 8 interface 255 has no altsetting 0 [ 533.778597][ T5310] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 533.800949][ T5310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.826389][ T5310] usb 2-1: Product: syz [ 533.830612][ T5310] usb 2-1: Manufacturer: syz [ 533.865014][ T5310] usb 2-1: SerialNumber: syz [ 533.872503][ T29] audit: type=1400 audit(1725632117.231:252): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=22561 comm="syz.3.7760" dest=20000 netif=wpan0 [ 534.234247][ T46] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 534.429689][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.453711][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2048, setting to 64 [ 534.498333][ T46] usb 3-1: New USB device found, idVendor=01ac, idProduct=0000, bcdDevice= 1.00 [ 534.531810][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.565533][ T46] usb 3-1: config 0 descriptor?? [ 534.737111][ T5310] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00. [ 534.791779][T22570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.817638][ T5310] usb 2-1: USB disconnect, device number 59 [ 534.831337][T22570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.868412][ T46] usbhid 3-1:0.0: can't add hid device: -71 [ 534.884644][ T46] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 534.914760][ T46] usb 3-1: USB disconnect, device number 66 [ 535.079952][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7770'. [ 535.129682][T22585] ipvlan2: entered allmulticast mode [ 535.143735][T22585] veth0_vlan: entered allmulticast mode [ 535.485553][ T46] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 535.619589][T22603] netlink: 'syz.3.7778': attribute type 6 has an invalid length. [ 535.679135][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 535.696995][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.734122][ T46] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 535.743182][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.785727][ T46] usb 3-1: config 0 descriptor?? [ 535.912741][ T46] rc_core: IR keymap rc-xbox-dvd not found [ 535.929262][T22618] netlink: 'syz.0.7785': attribute type 9 has an invalid length. [ 535.934505][ T46] Registered IR keymap rc-empty [ 535.954092][T22618] netlink: 335 bytes leftover after parsing attributes in process `syz.0.7785'. [ 535.954191][ T46] rc rc0: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 536.006555][ T46] input: Xbox DVD USB Remote Control(045e,0284) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input90 [ 536.054271][ T46] xbox_remote 3-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 536.077875][ T46] input: failed to attach handler kbd to device input90, error: -5 [ 536.102856][ T4665] xbox_remote 3-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 536.122680][ T46] usb 3-1: USB disconnect, device number 67 [ 536.136536][ T4665] xbox_remote 3-1:0.0: xbox_remote_rc_open: usb_submit_urb failed! [ 536.685086][T22643] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7796'. [ 536.915885][T22654] gfs2: gfs2 mount does not exist [ 537.104530][T22662] program syz.0.7805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 537.182283][T22667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7807'. [ 537.206642][T22667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7807'. [ 537.570327][T22685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7816'. [ 537.699721][T22692] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7820'. [ 537.724752][T22692] netlink: 'syz.2.7820': attribute type 1 has an invalid length. [ 538.639591][T22719] cifs: Unknown parameter 'mode' [ 538.817883][T22725] mkiss: ax0: crc mode is auto. [ 540.976437][T22811] netlink: 'syz.1.7875': attribute type 1 has an invalid length. [ 541.003676][T22811] netlink: 9236 bytes leftover after parsing attributes in process `syz.1.7875'. [ 541.029313][T22811] netlink: 'syz.1.7875': attribute type 1 has an invalid length. [ 541.055343][T22811] netlink: 'syz.1.7875': attribute type 2 has an invalid length. [ 541.124111][ T5278] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 541.326476][ T5278] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 541.350371][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.372912][ T5278] usb 5-1: config 0 descriptor?? [ 541.594852][ T5278] [drm] vendor descriptor length:6 data:06 5f 14 24 49 ef 00 00 00 00 00 [ 541.614933][ T5278] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 541.615351][T22829] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 541.805751][ T5278] [drm:udl_init] *ERROR* Selecting channel failed [ 541.828406][ T5278] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 541.842796][ T5278] [drm] Initialized udl on minor 2 [ 541.849494][T22833] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7885'. [ 541.869373][T22833] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 541.879546][ T5278] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 541.893826][ T5278] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 541.903113][ T5277] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 541.928931][ T5277] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 541.941333][ T5278] usb 5-1: USB disconnect, device number 73 [ 541.949782][ T5277] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 542.585150][T22858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7896'. [ 542.614934][T22858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7896'. [ 543.103911][ T8] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 543.293932][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 543.316406][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.332487][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.347784][ T8] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 543.362608][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.379313][ T8] usb 5-1: config 0 descriptor?? [ 543.819698][ T8] playstation 0003:054C:0CE6.0077: unknown main item tag 0x0 [ 543.840944][ T8] playstation 0003:054C:0CE6.0077: unknown main item tag 0x0 [ 543.857296][ T8] playstation 0003:054C:0CE6.0077: unknown main item tag 0x0 [ 543.883865][ T8] playstation 0003:054C:0CE6.0077: unknown main item tag 0x0 [ 543.891559][ T8] playstation 0003:054C:0CE6.0077: unknown main item tag 0x0 [ 543.910639][ T8] playstation 0003:054C:0CE6.0077: unknown main item tag 0x0 [ 543.929887][ T8] playstation 0003:054C:0CE6.0077: unknown main item tag 0x0 [ 543.954069][ T8] playstation 0003:054C:0CE6.0077: hidraw0: USB HID v0.00 Device [HID 054c:0ce6] on usb-dummy_hcd.4-1/input0 [ 544.064074][ T8] playstation 0003:054C:0CE6.0077: Failed to retrieve feature with reportID 9: -71 [ 544.084674][ T8] playstation 0003:054C:0CE6.0077: Failed to retrieve DualSense pairing info: -71 [ 544.116285][ T8] playstation 0003:054C:0CE6.0077: Failed to get MAC address from DualSense [ 544.153626][ T8] playstation 0003:054C:0CE6.0077: Failed to create dualsense. [ 544.183396][ T8] playstation 0003:054C:0CE6.0077: probe with driver playstation failed with error -71 [ 544.231241][ T8] usb 5-1: USB disconnect, device number 74 [ 544.926343][T22934] netlink: 1136 bytes leftover after parsing attributes in process `syz.4.7930'. [ 545.291551][T22951] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 545.643080][T22969] netlink: 'syz.3.7944': attribute type 64 has an invalid length. [ 545.693134][T22969] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 546.504981][T23007] program syz.4.7961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.929071][T23028] Bluetooth: hci3: invalid length 0, exp 2 for type 1 [ 547.065975][ T8] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 547.228752][T23040] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 547.279082][ T8] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 547.291150][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.316092][ T8] usb 3-1: Product: syz [ 547.331962][ T8] usb 3-1: Manufacturer: syz [ 547.343675][ T8] usb 3-1: SerialNumber: syz [ 547.361985][ T8] usb 3-1: config 0 descriptor?? [ 547.522755][ T29] audit: type=1326 audit(1725632130.881:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23015 comm="syz.1.7966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7fc00000 [ 547.668392][ T8] usb 3-1: USB disconnect, device number 68 [ 547.842323][ T29] audit: type=1326 audit(1725632131.201:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23061 comm="syz.1.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 547.883592][ T29] audit: type=1326 audit(1725632131.201:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23061 comm="syz.1.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 547.937578][ T29] audit: type=1326 audit(1725632131.231:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23061 comm="syz.1.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 547.973102][T23066] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7988'. [ 547.988926][ T29] audit: type=1326 audit(1725632131.231:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23061 comm="syz.1.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 548.044834][ T29] audit: type=1326 audit(1725632131.231:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23061 comm="syz.1.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 548.082830][ T29] audit: type=1326 audit(1725632131.271:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23061 comm="syz.1.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 548.105230][ T5278] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 548.123802][ T29] audit: type=1326 audit(1725632131.271:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23061 comm="syz.1.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 548.146244][ T29] audit: type=1326 audit(1725632131.271:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23061 comm="syz.1.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 548.201788][ T29] audit: type=1326 audit(1725632131.271:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23061 comm="syz.1.7987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fbb8ab7cef9 code=0x7ffc0000 [ 548.354062][ T5278] usb 5-1: Using ep0 maxpacket: 32 [ 548.362013][T23079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7995'. [ 548.373324][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 548.407089][ T5278] usb 5-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 548.426982][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.463979][ T5278] usb 5-1: Product: syz [ 548.468174][ T5278] usb 5-1: Manufacturer: syz [ 548.472771][ T5278] usb 5-1: SerialNumber: syz [ 548.499215][ T5278] usb 5-1: config 0 descriptor?? [ 548.551379][T23083] sctp: [Deprecated]: syz.0.7997 (pid 23083) Use of int in max_burst socket option deprecated. [ 548.551379][T23083] Use struct sctp_assoc_value instead [ 548.745038][ T5278] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 548.773910][ T5278] usb 5-1: USB disconnect, device number 75 [ 548.774172][ T5381] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 548.822466][T23093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8001'. [ 548.843615][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8001'. [ 549.000179][ T5381] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 549.020779][ T5381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.062807][ T5381] usb 2-1: config 0 descriptor?? [ 549.074476][ T5381] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 549.311180][T23106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8007'. [ 549.467133][T23113] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8010'. [ 549.503381][T23113] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 549.685401][ T5381] gspca_cpia1: usb_control_msg 01, error -71 [ 549.691726][ T5381] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 549.735796][ T5381] usb 2-1: USB disconnect, device number 60 [ 550.295317][T23152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8027'. [ 550.708691][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8034'. [ 550.726636][T23166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8034'. [ 551.284433][T23187] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 552.109586][T23211] sctp: [Deprecated]: syz.1.8053 (pid 23211) Use of struct sctp_assoc_value in delayed_ack socket option. [ 552.109586][T23211] Use struct sctp_sack_info instead [ 552.238521][T23215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8054'. [ 552.667976][T23225] netlink: 'syz.4.8060': attribute type 10 has an invalid length. [ 552.684474][T23225] hsr0: entered promiscuous mode [ 552.692374][T23225] hsr0: entered allmulticast mode [ 552.706499][T23225] hsr_slave_0: entered allmulticast mode [ 552.712325][T23225] hsr_slave_1: entered allmulticast mode [ 552.721536][T23225] bridge0: port 1(hsr0) entered blocking state [ 552.739073][T23225] bridge0: port 1(hsr0) entered disabled state [ 552.750845][T23225] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 552.767587][T23227] netlink: 'syz.2.8061': attribute type 9 has an invalid length. [ 552.796655][T23227] bond_slave_0: entered promiscuous mode [ 552.803010][T23227] bond_slave_1: entered promiscuous mode [ 552.823462][T23227] macvlan3: entered promiscuous mode [ 552.839008][T23227] bond0: entered promiscuous mode [ 552.851730][T23227] macvlan3: entered allmulticast mode [ 552.862998][T23227] bond0: entered allmulticast mode [ 552.868831][T23227] bond_slave_0: entered allmulticast mode [ 552.893645][T23227] bond_slave_1: entered allmulticast mode [ 552.909125][T23227] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 552.931722][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 552.931736][ T29] audit: type=1326 audit(1725632136.291:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23229 comm="syz.4.8062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86db97cef9 code=0x7ffc0000 [ 552.959783][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.964272][ T46] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 553.012201][ T29] audit: type=1326 audit(1725632136.331:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23229 comm="syz.4.8062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86db97cef9 code=0x7ffc0000 [ 553.080712][ T29] audit: type=1326 audit(1725632136.341:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23229 comm="syz.4.8062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86db97cef9 code=0x7ffc0000 [ 553.164266][ T29] audit: type=1326 audit(1725632136.341:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23229 comm="syz.4.8062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86db97cef9 code=0x7ffc0000 [ 553.204380][ T46] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 553.212879][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.234187][ T29] audit: type=1326 audit(1725632136.341:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23229 comm="syz.4.8062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86db97cef9 code=0x7ffc0000 [ 553.281268][ T46] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 553.301771][ T46] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 553.313328][ T29] audit: type=1326 audit(1725632136.351:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23229 comm="syz.4.8062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f86db97cef9 code=0x7ffc0000 [ 553.344126][ T46] usb 4-1: Manufacturer: syz [ 553.359943][ T46] usb 4-1: config 0 descriptor?? [ 553.394638][ T29] audit: type=1326 audit(1725632136.351:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23229 comm="syz.4.8062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86db97cef9 code=0x7ffc0000 [ 553.444292][ T29] audit: type=1326 audit(1725632136.351:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23229 comm="syz.4.8062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f86db973ea7 code=0x7ffc0000 [ 553.497336][ T29] audit: type=1326 audit(1725632136.351:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23229 comm="syz.4.8062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f86db918859 code=0x7ffc0000 [ 553.544432][ T46] rc_core: IR keymap rc-hauppauge not found [ 553.560574][ T46] Registered IR keymap rc-empty [ 553.575488][ T46] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 553.595062][ T29] audit: type=1326 audit(1725632136.351:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23229 comm="syz.4.8062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f86db97cef9 code=0x7ffc0000 [ 553.631974][ T46] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input92 [ 553.648651][T23228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.677743][T23228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.846341][ T8] usb 4-1: USB disconnect, device number 58 [ 555.164102][ T46] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 555.378951][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 555.418344][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.445804][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.485343][ T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 555.504563][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.535645][ T46] usb 2-1: config 0 descriptor?? [ 555.918520][T23345] use of bytesused == 0 is deprecated and will be removed in the future, [ 555.968630][ T46] apple 0003:05AC:0247.0078: unknown main item tag 0x0 [ 555.986620][ T46] apple 0003:05AC:0247.0078: unknown main item tag 0x0 [ 556.003715][ T46] apple 0003:05AC:0247.0078: item fetching failed at offset 2/160 [ 556.016000][T23345] use the actual size instead. [ 556.023833][ T46] apple 0003:05AC:0247.0078: parse failed [ 556.039893][ T46] apple 0003:05AC:0247.0078: probe with driver apple failed with error -22 [ 556.178888][ T5280] usb 2-1: USB disconnect, device number 61 [ 556.952120][T23371] input: syz0 as /devices/virtual/input/input93 [ 557.594011][T23377] netlink: 'syz.2.8125': attribute type 11 has an invalid length. [ 557.611562][T23377] __nla_validate_parse: 1 callbacks suppressed [ 557.611577][T23377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8125'. [ 557.683926][T23380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8127'. [ 558.600467][T23409] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8141'. [ 558.615021][T23410] netlink: 392 bytes leftover after parsing attributes in process `syz.4.8139'. [ 558.633597][T23409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8141'. [ 558.798233][T23415] input: syz0 as /devices/virtual/input/input94 [ 559.924598][ T5281] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 560.114296][ T5281] usb 4-1: Using ep0 maxpacket: 8 [ 560.172858][ T5281] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 560.183626][ T5244] Bluetooth: hci6: command tx timeout [ 560.189236][ T5281] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.215148][ T5281] usb 4-1: Product: syz [ 560.234113][ T5281] usb 4-1: Manufacturer: syz [ 560.238786][ T5281] usb 4-1: SerialNumber: syz [ 560.240829][T23456] netlink: 372 bytes leftover after parsing attributes in process `syz.2.8161'. [ 560.619571][ T5281] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 560.801139][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 560.801155][ T29] audit: type=1400 audit(1725632144.161:290): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=23481 comm="syz.2.8172" dest=20002 netif=wpan0 [ 560.889726][ T5281] usb 4-1: USB disconnect, device number 59 [ 560.905662][T23486] netlink: 'syz.2.8174': attribute type 21 has an invalid length. [ 560.910272][ T5281] usblp0: removed [ 560.916867][T23486] netlink: 'syz.2.8174': attribute type 1 has an invalid length. [ 561.111205][T23494] program syz.2.8178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.290032][T23498] io-wq is not configured for unbound workers [ 561.503262][T23508] netlink: 'syz.4.8184': attribute type 16 has an invalid length. [ 561.564097][T23508] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8184'. [ 561.794473][T23517] netlink: 'syz.3.8187': attribute type 1 has an invalid length. [ 561.839951][T23517] netlink: 'syz.3.8187': attribute type 2 has an invalid length. [ 561.870451][T23517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8187'. [ 562.174741][T23528] input: syz0 as /devices/virtual/input/input95 [ 562.237445][T23531] netlink: 'syz.1.8195': attribute type 1 has an invalid length. [ 562.287737][T23531] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.8195'. [ 562.327805][T23531] netlink: 'syz.1.8195': attribute type 1 has an invalid length. [ 562.619294][T23548] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 562.953275][T23558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8207'. [ 563.129346][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.137948][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.191242][T23569] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 563.201558][T23569] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 563.583413][T23587] netpci0: tun_chr_ioctl cmd 1074025677 [ 563.596188][T23587] netpci0: linktype set to 0 [ 563.604045][ T5278] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 563.815918][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 563.831456][ T5278] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 563.854329][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.882239][ T5278] usb 5-1: Product: syz [ 563.888309][ T5278] usb 5-1: Manufacturer: syz [ 563.892923][ T5278] usb 5-1: SerialNumber: syz [ 563.904806][ T5278] usb 5-1: config 0 descriptor?? [ 563.913366][ T5278] gspca_main: sq930x-2.14.0 probing 2770:930c [ 564.020742][T23603] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8230'. [ 564.744517][ T5278] gspca_sq930x: ucbus_write failed -71 [ 564.994298][ T5278] gspca_sq930x: Sensor ov9630 not yet treated [ 565.006200][ T5278] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 565.040987][ T5278] usb 5-1: USB disconnect, device number 76 [ 565.402968][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8254'. [ 565.412776][ T29] audit: type=1326 audit(1725632148.771:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23659 comm="syz.2.8255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab617cef9 code=0x7ffc0000 [ 565.427754][T23658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8254'. [ 565.493809][ T29] audit: type=1326 audit(1725632148.771:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23659 comm="syz.2.8255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fdab617cef9 code=0x7ffc0000 [ 565.538231][ T29] audit: type=1326 audit(1725632148.771:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23659 comm="syz.2.8255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab617cef9 code=0x7ffc0000 [ 565.562143][ T29] audit: type=1326 audit(1725632148.771:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23659 comm="syz.2.8255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdab617cef9 code=0x7ffc0000 [ 566.604358][T23699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8275'. [ 566.676745][T23702] netlink: 'syz.2.8276': attribute type 4 has an invalid length. [ 566.774900][T23705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8277'. [ 566.827980][T23706] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 567.994368][T23761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8303'. [ 568.343196][ T29] audit: type=1400 audit(1725632151.681:295): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=23773 comm="syz.2.8309" name="282" dev="tmpfs" ino=1446 [ 568.514225][T23784] delete_channel: no stack [ 568.526896][T23779] delete_channel: no stack [ 568.807003][ T29] audit: type=1326 audit(1725632152.171:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23790 comm="syz.3.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 568.880096][ T29] audit: type=1326 audit(1725632152.171:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23790 comm="syz.3.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 568.969859][ T29] audit: type=1326 audit(1725632152.211:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23790 comm="syz.3.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 569.047219][ T29] audit: type=1326 audit(1725632152.211:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23790 comm="syz.3.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 569.120132][ T29] audit: type=1326 audit(1725632152.211:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23790 comm="syz.3.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 569.200092][ T29] audit: type=1326 audit(1725632152.231:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23790 comm="syz.3.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 569.200140][ T29] audit: type=1326 audit(1725632152.231:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23790 comm="syz.3.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7ffc0000 [ 569.200181][ T29] audit: type=1326 audit(1725632152.231:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23790 comm="syz.3.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c68573ea7 code=0x7ffc0000 [ 569.200220][ T29] audit: type=1326 audit(1725632152.231:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23790 comm="syz.3.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c68518859 code=0x7ffc0000 [ 569.355175][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.493684][T23806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8323'. [ 569.725553][T23812] program syz.3.8325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 569.889421][T23817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8329'. [ 570.114548][ T5310] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 570.324433][ T5238] Bluetooth: hci4: command 0x0419 tx timeout [ 570.335513][ T5310] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 570.351999][ T5310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.382228][ T5310] usb 5-1: config 0 descriptor?? [ 570.403341][ T5310] gspca_main: spca508-2.14.0 probing 8086:0110 [ 570.605930][ T5310] gspca_spca508: reg_read err -32 [ 570.615475][ T5310] gspca_spca508: reg_read err -32 [ 570.828250][ T5310] gspca_spca508: reg_read err -71 [ 570.839205][ T5310] gspca_spca508: reg_read err -71 [ 570.860546][ T5310] gspca_spca508: reg write: error -71 [ 570.877485][ T5310] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 570.892371][ T5310] usb 5-1: USB disconnect, device number 77 [ 571.013905][ T8] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 571.206458][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 571.242326][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.268622][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.293567][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 571.326917][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 571.343831][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.354277][ T8] usb 4-1: config 0 descriptor?? [ 571.796370][ T8] microsoft 0003:045E:07DA.0079: nested delimiters [ 571.823326][ T8] microsoft 0003:045E:07DA.0079: item 0 4 2 10 parsing failed [ 571.841807][ T8] microsoft 0003:045E:07DA.0079: parse failed [ 571.860779][ T8] microsoft 0003:045E:07DA.0079: probe with driver microsoft failed with error -22 [ 572.035782][ T8] usb 4-1: USB disconnect, device number 60 [ 572.658657][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8362'. [ 572.678503][T23896] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8362'. [ 572.871974][T23902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 573.090727][T23910] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 573.323905][ T5278] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 573.531611][ T5278] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 573.551421][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.575957][ T5278] usb 2-1: Product: syz [ 573.589901][ T5278] usb 2-1: Manufacturer: syz [ 573.601903][ T5278] usb 2-1: SerialNumber: syz [ 573.615767][ T5278] usb 2-1: config 0 descriptor?? [ 573.906309][T23926] wg1: entered promiscuous mode [ 573.912069][ T5278] usb 2-1: USB disconnect, device number 62 [ 573.940993][T23926] wg1: entered allmulticast mode [ 575.011382][T23977] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8403'. [ 575.113301][T23982] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 575.290393][T23990] program syz.3.8409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.448228][T23996] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8412'. [ 576.288865][T24029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8428'. [ 576.324519][T24029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8428'. [ 576.345685][T24029] sch_fq: defrate 0 ignored. [ 576.527890][T24033] cannot load conntrack support for proto=3 [ 576.712800][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 576.712817][ T29] audit: type=1400 audit(1725632160.071:320): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24039 comm="syz.4.8432" daddr=255.255.255.255 dest=20002 netif=wpan0 [ 577.734449][ T5310] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 577.966813][ T5310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.986696][ T5310] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.016953][ T5310] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 578.038066][ T5310] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.068554][ T5310] usb 4-1: config 0 descriptor?? [ 578.182500][T24086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.522663][ T5310] cp2112 0003:10C4:EA90.007A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 578.694366][ T5310] cp2112 0003:10C4:EA90.007A: error requesting version [ 578.710405][ T5310] cp2112 0003:10C4:EA90.007A: probe with driver cp2112 failed with error -71 [ 578.766646][ T5310] usb 4-1: USB disconnect, device number 61 [ 578.879761][T24104] pim6reg: tun_chr_ioctl cmd 1074025677 [ 578.901375][T24104] pim6reg: linktype set to 769 [ 579.359559][ T29] audit: type=1400 audit(1725632162.721:321): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24123 comm="syz.0.8472" dest=20000 netif=wpan0 [ 579.419822][ T29] audit: type=1400 audit(1725632162.741:322): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=24123 comm="syz.0.8472" dest=20000 netif=wpan0 [ 579.994846][ T5278] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 580.227683][ T5278] usb 3-1: Using ep0 maxpacket: 8 [ 580.256553][ T5278] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 580.286310][ T5278] usb 3-1: config 179 has no interface number 0 [ 580.315933][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 580.358297][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 580.393704][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 580.424210][ T5278] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 580.462576][ T5278] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 580.509089][ T5278] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 580.528606][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.544858][T24143] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 580.819469][ T29] audit: type=1326 audit(1725632164.181:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24180 comm="syz.4.8495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86db97cef9 code=0x7ffc0000 [ 580.873706][ T5278] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input96 [ 580.903601][ T29] audit: type=1326 audit(1725632164.181:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24180 comm="syz.4.8495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f86db97cef9 code=0x7ffc0000 [ 580.966886][ T29] audit: type=1326 audit(1725632164.181:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24180 comm="syz.4.8495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86db97cef9 code=0x7ffc0000 [ 580.988430][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.019639][ T29] audit: type=1326 audit(1725632164.221:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24180 comm="syz.4.8495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86db97cef9 code=0x7ffc0000 [ 581.041180][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.048431][ T5280] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 581.068011][ T5281] usb 3-1: USB disconnect, device number 69 [ 581.073949][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 581.073992][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 581.097209][ T5281] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 581.244178][ T5280] usb 2-1: Using ep0 maxpacket: 8 [ 581.274338][ T5280] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 581.295815][ T5280] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 581.326360][ T5280] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 581.346696][ T5280] usb 2-1: Product: syz [ 581.351025][ T5280] usb 2-1: Manufacturer: syz [ 581.355900][ T5280] usb 2-1: SerialNumber: syz [ 581.585669][ T5280] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 581.606516][ T5280] usb 2-1: Handspring Visor / Palm OS: port 2, is for unknown use [ 581.636925][ T5280] usb 2-1: Handspring Visor / Palm OS: port 11, is for unknown use [ 581.665638][ T5280] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 581.788273][ T5280] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 581.826611][ T5280] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 581.886709][ T5280] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 582.034438][ T5278] usb 2-1: USB disconnect, device number 63 [ 582.064655][ T5278] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 582.089571][ T5278] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 582.109714][ T5278] visor 2-1:1.0: device disconnected [ 583.590114][T24260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 583.830741][ T29] audit: type=1326 audit(1725632167.191:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24269 comm="syz.3.8537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7fc00000 [ 583.931640][ T29] audit: type=1326 audit(1725632167.191:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24269 comm="syz.3.8537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f9c6857cef9 code=0x7fc00000 [ 583.994558][ T29] audit: type=1326 audit(1725632167.191:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24269 comm="syz.3.8537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7fc00000 [ 584.123947][ T29] audit: type=1326 audit(1725632167.191:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24269 comm="syz.3.8537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7fc00000 [ 584.302730][ T29] audit: type=1326 audit(1725632167.191:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24269 comm="syz.3.8537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7fc00000 [ 584.431376][ T29] audit: type=1326 audit(1725632167.191:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24269 comm="syz.3.8537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7fc00000 [ 584.477814][ T29] audit: type=1326 audit(1725632167.191:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24269 comm="syz.3.8537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7fc00000 [ 584.515460][ T29] audit: type=1326 audit(1725632167.191:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24269 comm="syz.3.8537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7fc00000 [ 584.560165][ T29] audit: type=1326 audit(1725632167.191:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24269 comm="syz.3.8537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7fc00000 [ 584.611944][ T29] audit: type=1326 audit(1725632167.191:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24269 comm="syz.3.8537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6857cef9 code=0x7fc00000 [ 584.636926][T24305] netlink: 'syz.1.8551': attribute type 1 has an invalid length. [ 584.819541][T24315] netlink: 'syz.2.8556': attribute type 1 has an invalid length. [ 584.857719][T24315] netlink: 9116 bytes leftover after parsing attributes in process `syz.2.8556'. [ 584.880386][T24315] netlink: 'syz.2.8556': attribute type 1 has an invalid length. [ 584.899836][T24315] netlink: 209 bytes leftover after parsing attributes in process `syz.2.8556'. [ 585.440652][T24338] ɶƣ0GC¦!: entered promiscuous mode [ 586.093346][T24373] loop6: detected capacity change from 0 to 524288000 [ 586.326163][T24384] input: syz1 as /devices/virtual/input/input97 [ 586.659756][T24402] vlan3: entered promiscuous mode [ 586.684976][T24402] gretap0: entered promiscuous mode [ 587.091161][T24426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8607'. [ 587.613641][ T5280] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 587.850128][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 587.868803][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.897975][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.931043][ T5280] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 587.956631][ T5280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.984500][ T5280] usb 3-1: config 0 descriptor?? [ 588.395332][T24468] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8625'. [ 588.434977][ T5280] input: HID 041e:3100 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.007B/input/input98 [ 588.453595][T24468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8625'. [ 588.518917][T24472] netlink: 'syz.1.8628': attribute type 1 has an invalid length. [ 588.536390][T24472] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.8628'. [ 588.568201][T24472] netlink: 'syz.1.8628': attribute type 2 has an invalid length. [ 588.571099][ T5280] creative-sb0540 0003:041E:3100.007B: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.2-1/input0 [ 588.604624][T24472] netlink: 'syz.1.8628': attribute type 1 has an invalid length. [ 588.774824][ T5278] usb 3-1: USB disconnect, device number 70 [ 589.263594][ T46] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 589.496205][ T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 589.526969][ T46] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 589.536930][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.558717][ T46] usb 4-1: config 0 descriptor?? [ 589.567009][ T46] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 589.971995][ T8] usb 4-1: USB disconnect, device number 62 [ 590.414616][T24542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8659'. [ 590.595300][T24548] @: renamed from vlan0 (while UP) [ 590.725421][T24552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 591.075165][T24568] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 591.223239][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 591.223256][ T29] audit: type=1326 audit(1725632174.581:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24573 comm="syz.1.8675" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb8ab7cef9 code=0x0 [ 591.449955][T24584] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 592.611999][ T29] audit: type=1326 audit(1725632175.971:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24624 comm="syz.0.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165c37cef9 code=0x7ffc0000 [ 592.664435][ T29] audit: type=1326 audit(1725632176.001:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24624 comm="syz.0.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165c37cef9 code=0x7ffc0000 [ 592.737664][ T29] audit: type=1326 audit(1725632176.001:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24624 comm="syz.0.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f165c37cef9 code=0x7ffc0000 [ 592.776756][ T29] audit: type=1326 audit(1725632176.001:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24624 comm="syz.0.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165c37cef9 code=0x7ffc0000 [ 592.832777][ T29] audit: type=1326 audit(1725632176.001:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24624 comm="syz.0.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165c37cef9 code=0x7ffc0000 [ 592.873104][ T29] audit: type=1326 audit(1725632176.001:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24624 comm="syz.0.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f165c37cef9 code=0x7ffc0000 [ 592.874964][T24629] netlink: 136 bytes leftover after parsing attributes in process `syz.4.8698'. [ 592.930340][ T29] audit: type=1326 audit(1725632176.001:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24624 comm="syz.0.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f165c37cef9 code=0x7ffc0000 [ 592.940560][T24629] netlink: 89 bytes leftover after parsing attributes in process `syz.4.8698'. [ 592.982579][ T29] audit: type=1326 audit(1725632176.001:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24624 comm="syz.0.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f165c373ea7 code=0x7ffc0000 [ 593.014872][ T29] audit: type=1326 audit(1725632176.001:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24624 comm="syz.0.8696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f165c318859 code=0x7ffc0000 [ 593.118878][T24634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8700'. [ 593.160682][T24634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8700'. [ 593.426654][T24644] syz.3.8705 (24644) used greatest stack depth: 17720 bytes left [ 593.569672][ T35] Bluetooth: hci7: Frame reassembly failed (-84) [ 593.579081][T24652] fuse: Bad value for 'user_id' [ 593.604491][T24652] fuse: Bad value for 'user_id' [ 593.786928][T24663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.911712][T24667] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8717'. [ 594.334578][ T46] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 594.539925][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 594.578069][ T46] usb 5-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 594.602585][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 594.623331][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.643892][ T46] usb 5-1: Product: syz [ 594.648087][ T46] usb 5-1: Manufacturer: syz [ 594.671813][ T46] usb 5-1: SerialNumber: syz [ 594.686251][ T46] usb 5-1: config 0 descriptor?? [ 594.934499][ T46] usb 5-1: USB disconnect, device number 78 [ 595.603857][ T5238] Bluetooth: hci7: command 0x1003 tx timeout [ 595.612461][ T5244] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 595.745848][ T35] bond0: (slave bond_slave_0): interface is now down [ 595.755355][ T35] bond0: (slave bond_slave_1): interface is now down [ 595.776460][ T3070] bond0: (slave bond_slave_0): interface is now down [ 595.783166][ T3070] bond0: (slave bond_slave_1): interface is now down [ 595.858088][ T3070] bond0: now running without any active interface! [ 595.948282][T24733] netlink: 'syz.2.8747': attribute type 42 has an invalid length. [ 595.981364][ T5280] kernel write not supported for file /3175/projid_map (pid: 5280 comm: kworker/1:4) [ 596.007424][T24738] [ 596.009767][T24738] ===================================================== [ 596.016687][T24738] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 596.024126][T24738] 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 Not tainted [ 596.031230][T24738] ----------------------------------------------------- [ 596.038180][T24738] syz.1.8751/24738 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 596.045899][T24738] ffff88802510a600 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x19e/0x4d0 [ 596.054601][T24738] [ 596.054601][T24738] and this task is already holding: [ 596.061954][T24738] ffff88802a6b6230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 596.071617][T24738] which would create a new lock dependency: [ 596.077495][T24738] (&dev->event_lock#2){..-.}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 596.085417][T24738] [ 596.085417][T24738] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 596.094849][T24738] (&dev->event_lock#2){..-.}-{2:2} [ 596.094882][T24738] [ 596.094882][T24738] ... which became SOFTIRQ-irq-safe at: [ 596.107774][T24738] lock_acquire+0x1ed/0x550 [ 596.112444][T24738] _raw_spin_lock_irqsave+0xd5/0x120 [ 596.117808][T24738] input_inject_event+0xc5/0x340 [ 596.122902][T24738] led_trigger_event+0x138/0x210 [ 596.127912][T24738] kbd_bh+0x1b5/0x290 [ 596.131964][T24738] tasklet_action_common+0x321/0x4d0 [ 596.137330][T24738] handle_softirqs+0x2c4/0x970 [ 596.142172][T24738] __irq_exit_rcu+0xf4/0x1c0 [ 596.146927][T24738] irq_exit_rcu+0x9/0x30 [ 596.151249][T24738] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 596.156962][T24738] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.163015][T24738] __tasklet_schedule_common+0x1fd/0x270 [ 596.168724][T24738] vt_set_leds_compute_shiftstate+0x68/0x90 [ 596.174696][T24738] redraw_screen+0x97c/0xe90 [ 596.179359][T24738] complete_change_console+0xd1/0x730 [ 596.184803][T24738] console_callback+0x17b/0x460 [ 596.189726][T24738] process_scheduled_works+0xa2c/0x1830 [ 596.195358][T24738] worker_thread+0x86d/0xd10 [ 596.200029][T24738] kthread+0x2f0/0x390 [ 596.204178][T24738] ret_from_fork+0x4b/0x80 [ 596.208675][T24738] ret_from_fork_asm+0x1a/0x30 [ 596.213517][T24738] [ 596.213517][T24738] to a SOFTIRQ-irq-unsafe lock: [ 596.220516][T24738] (tasklist_lock){.+.+}-{2:2} [ 596.220540][T24738] [ 596.220540][T24738] ... which became SOFTIRQ-irq-unsafe at: [ 596.233236][T24738] ... [ 596.233243][T24738] lock_acquire+0x1ed/0x550 [ 596.240433][T24738] _raw_read_lock+0x36/0x50 [ 596.245024][T24738] __do_wait+0x12d/0x850 [ 596.249342][T24738] do_wait+0x1e9/0x560 [ 596.253489][T24738] kernel_wait+0xe9/0x240 [ 596.257905][T24738] call_usermodehelper_exec_work+0xbd/0x230 [ 596.263885][T24738] process_scheduled_works+0xa2c/0x1830 [ 596.269599][T24738] worker_thread+0x86d/0xd10 [ 596.274271][T24738] kthread+0x2f0/0x390 [ 596.278417][T24738] ret_from_fork+0x4b/0x80 [ 596.282906][T24738] ret_from_fork_asm+0x1a/0x30 [ 596.287747][T24738] [ 596.287747][T24738] other info that might help us debug this: [ 596.287747][T24738] [ 596.297958][T24738] Chain exists of: [ 596.297958][T24738] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 596.297958][T24738] [ 596.310899][T24738] Possible interrupt unsafe locking scenario: [ 596.310899][T24738] [ 596.319198][T24738] CPU0 CPU1 [ 596.324546][T24738] ---- ---- [ 596.329894][T24738] lock(tasklist_lock); [ 596.334127][T24738] local_irq_disable(); [ 596.340863][T24738] lock(&dev->event_lock#2); [ 596.348057][T24738] lock(&new->fa_lock); [ 596.354809][T24738] [ 596.358245][T24738] lock(&dev->event_lock#2); [ 596.363089][T24738] [ 596.363089][T24738] *** DEADLOCK *** [ 596.363089][T24738] [ 596.371214][T24738] 6 locks held by syz.1.8751/24738: [ 596.376393][T24738] #0: ffff88802b498110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x272/0x7c0 [ 596.385524][T24738] #1: ffff88802a6b6230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 596.395614][T24738] #2: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 596.405260][T24738] #3: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8f/0x860 [ 596.414821][T24738] #4: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: mousedev_notify_readers+0x2a/0xc80 [ 596.424902][T24738] #5: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x55/0x4d0 [ 596.433947][T24738] [ 596.433947][T24738] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 596.444430][T24738] -> (&dev->event_lock#2){..-.}-{2:2} { [ 596.449992][T24738] IN-SOFTIRQ-W at: [ 596.453964][T24738] lock_acquire+0x1ed/0x550 [ 596.460204][T24738] _raw_spin_lock_irqsave+0xd5/0x120 [ 596.467130][T24738] input_inject_event+0xc5/0x340 [ 596.473712][T24738] led_trigger_event+0x138/0x210 [ 596.480286][T24738] kbd_bh+0x1b5/0x290 [ 596.485905][T24738] tasklet_action_common+0x321/0x4d0 [ 596.492834][T24738] handle_softirqs+0x2c4/0x970 [ 596.499237][T24738] __irq_exit_rcu+0xf4/0x1c0 [ 596.505466][T24738] irq_exit_rcu+0x9/0x30 [ 596.511346][T24738] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 596.518622][T24738] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.526241][T24738] __tasklet_schedule_common+0x1fd/0x270 [ 596.533511][T24738] vt_set_leds_compute_shiftstate+0x68/0x90 [ 596.541053][T24738] redraw_screen+0x97c/0xe90 [ 596.547279][T24738] complete_change_console+0xd1/0x730 [ 596.554296][T24738] console_callback+0x17b/0x460 [ 596.560797][T24738] process_scheduled_works+0xa2c/0x1830 [ 596.567981][T24738] worker_thread+0x86d/0xd10 [ 596.574208][T24738] kthread+0x2f0/0x390 [ 596.579918][T24738] ret_from_fork+0x4b/0x80 [ 596.585975][T24738] ret_from_fork_asm+0x1a/0x30 [ 596.592379][T24738] INITIAL USE at: [ 596.596261][T24738] lock_acquire+0x1ed/0x550 [ 596.602316][T24738] _raw_spin_lock_irqsave+0xd5/0x120 [ 596.609240][T24738] input_inject_event+0xc5/0x340 [ 596.615731][T24738] kbd_led_trigger_activate+0xb8/0x100 [ 596.622744][T24738] led_trigger_set+0x582/0x9c0 [ 596.629058][T24738] led_trigger_set_default+0x229/0x260 [ 596.636066][T24738] led_classdev_register_ext+0x6e6/0x8a0 [ 596.643248][T24738] input_leds_connect+0x489/0x630 [ 596.649826][T24738] input_register_device+0xd3b/0x1110 [ 596.656753][T24738] atkbd_connect+0x752/0xa00 [ 596.662895][T24738] serio_driver_probe+0x7f/0xa0 [ 596.669295][T24738] really_probe+0x2b8/0xad0 [ 596.675346][T24738] __driver_probe_device+0x1a2/0x390 [ 596.682177][T24738] driver_probe_device+0x50/0x430 [ 596.688753][T24738] __driver_attach+0x45f/0x710 [ 596.695065][T24738] bus_for_each_dev+0x239/0x2b0 [ 596.701465][T24738] serio_handle_event+0x1c7/0x920 [ 596.708040][T24738] process_scheduled_works+0xa2c/0x1830 [ 596.715138][T24738] worker_thread+0x86d/0xd10 [ 596.721278][T24738] kthread+0x2f0/0x390 [ 596.726900][T24738] ret_from_fork+0x4b/0x80 [ 596.732869][T24738] ret_from_fork_asm+0x1a/0x30 [ 596.739184][T24738] } [ 596.741666][T24738] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 596.750683][T24738] [ 596.750683][T24738] the dependencies between the lock to be acquired [ 596.750693][T24738] and SOFTIRQ-irq-unsafe lock: [ 596.764190][T24738] -> (tasklist_lock){.+.+}-{2:2} { [ 596.769481][T24738] HARDIRQ-ON-R at: [ 596.773619][T24738] lock_acquire+0x1ed/0x550 [ 596.780108][T24738] _raw_read_lock+0x36/0x50 [ 596.786600][T24738] __do_wait+0x12d/0x850 [ 596.792824][T24738] do_wait+0x1e9/0x560 [ 596.798875][T24738] kernel_wait+0xe9/0x240 [ 596.805185][T24738] call_usermodehelper_exec_work+0xbd/0x230 [ 596.813061][T24738] process_scheduled_works+0xa2c/0x1830 [ 596.820592][T24738] worker_thread+0x86d/0xd10 [ 596.827166][T24738] kthread+0x2f0/0x390 [ 596.833221][T24738] ret_from_fork+0x4b/0x80 [ 596.839621][T24738] ret_from_fork_asm+0x1a/0x30 [ 596.846371][T24738] SOFTIRQ-ON-R at: [ 596.850519][T24738] lock_acquire+0x1ed/0x550 [ 596.857010][T24738] _raw_read_lock+0x36/0x50 [ 596.863505][T24738] __do_wait+0x12d/0x850 [ 596.869739][T24738] do_wait+0x1e9/0x560 [ 596.875792][T24738] kernel_wait+0xe9/0x240 [ 596.882104][T24738] call_usermodehelper_exec_work+0xbd/0x230 [ 596.889983][T24738] process_scheduled_works+0xa2c/0x1830 [ 596.897514][T24738] worker_thread+0x86d/0xd10 [ 596.904089][T24738] kthread+0x2f0/0x390 [ 596.910146][T24738] ret_from_fork+0x4b/0x80 [ 596.916550][T24738] ret_from_fork_asm+0x1a/0x30 [ 596.923301][T24738] INITIAL USE at: [ 596.927355][T24738] lock_acquire+0x1ed/0x550 [ 596.933762][T24738] _raw_write_lock_irq+0xd3/0x120 [ 596.940680][T24738] copy_process+0x228b/0x3dc0 [ 596.947255][T24738] kernel_clone+0x223/0x880 [ 596.953662][T24738] user_mode_thread+0x132/0x1a0 [ 596.960425][T24738] rest_init+0x23/0x300 [ 596.966484][T24738] start_kernel+0x47a/0x500 [ 596.972888][T24738] x86_64_start_reservations+0x2a/0x30 [ 596.980243][T24738] x86_64_start_kernel+0x9f/0xa0 [ 596.987079][T24738] common_startup_64+0x13e/0x147 [ 596.993918][T24738] INITIAL READ USE at: [ 596.998405][T24738] lock_acquire+0x1ed/0x550 [ 597.005244][T24738] _raw_read_lock+0x36/0x50 [ 597.012082][T24738] __do_wait+0x12d/0x850 [ 597.018656][T24738] do_wait+0x1e9/0x560 [ 597.025054][T24738] kernel_wait+0xe9/0x240 [ 597.031714][T24738] call_usermodehelper_exec_work+0xbd/0x230 [ 597.039939][T24738] process_scheduled_works+0xa2c/0x1830 [ 597.047821][T24738] worker_thread+0x86d/0xd10 [ 597.054750][T24738] kthread+0x2f0/0x390 [ 597.061155][T24738] ret_from_fork+0x4b/0x80 [ 597.067910][T24738] ret_from_fork_asm+0x1a/0x30 [ 597.075014][T24738] } [ 597.077673][T24738] ... key at: [] tasklist_lock+0x18/0x40 [ 597.085556][T24738] ... acquired at: [ 597.089515][T24738] lock_acquire+0x1ed/0x550 [ 597.094184][T24738] _raw_read_lock+0x36/0x50 [ 597.098851][T24738] send_sigio+0xfc/0x360 [ 597.103251][T24738] dnotify_handle_event+0x13c/0x440 [ 597.108614][T24738] fsnotify+0x18ab/0x1f70 [ 597.113104][T24738] fsnotify_change+0x24f/0x2a0 [ 597.118029][T24738] notify_change+0xc0c/0xe90 [ 597.122779][T24738] chmod_common+0x2ab/0x4c0 [ 597.127443][T24738] __x64_sys_fchmod+0xf8/0x160 [ 597.132363][T24738] do_syscall_64+0xf3/0x230 [ 597.137026][T24738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.143081][T24738] [ 597.145391][T24738] -> (&f->f_owner.lock){....}-{2:2} { [ 597.150855][T24738] INITIAL USE at: [ 597.154820][T24738] lock_acquire+0x1ed/0x550 [ 597.161052][T24738] _raw_write_lock_irq+0xd3/0x120 [ 597.167803][T24738] f_modown+0x38/0x340 [ 597.173599][T24738] generic_setlease+0xbdb/0x15a0 [ 597.180259][T24738] fcntl_setlease+0x404/0x540 [ 597.186655][T24738] do_fcntl+0x28f/0x1730 [ 597.192622][T24738] __se_sys_fcntl+0xd2/0x1c0 [ 597.198935][T24738] do_syscall_64+0xf3/0x230 [ 597.205163][T24738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.212782][T24738] INITIAL READ USE at: [ 597.217203][T24738] lock_acquire+0x1ed/0x550 [ 597.223893][T24738] _raw_read_lock_irqsave+0xdd/0x130 [ 597.231365][T24738] send_sigurg+0x29/0x3c0 [ 597.237862][T24738] sk_send_sigurg+0x75/0x2f0 [ 597.244612][T24738] queue_oob+0x572/0x730 [ 597.251015][T24738] unix_stream_sendmsg+0xd24/0xf80 [ 597.258289][T24738] __sock_sendmsg+0x221/0x270 [ 597.265128][T24738] ____sys_sendmsg+0x525/0x7d0 [ 597.272055][T24738] __sys_sendmsg+0x2b0/0x3a0 [ 597.278806][T24738] do_syscall_64+0xf3/0x230 [ 597.285479][T24738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.293547][T24738] } [ 597.296120][T24738] ... key at: [] init_file.__key+0x0/0x20 [ 597.304009][T24738] ... acquired at: [ 597.307892][T24738] lock_acquire+0x1ed/0x550 [ 597.312564][T24738] _raw_read_lock_irqsave+0xdd/0x130 [ 597.318019][T24738] send_sigio+0x33/0x360 [ 597.322427][T24738] kill_fasync+0x23a/0x4d0 [ 597.327007][T24738] mousedev_write+0x993/0x9e0 [ 597.331844][T24738] vfs_writev+0x5af/0xbb0 [ 597.336335][T24738] do_writev+0x1b1/0x350 [ 597.340739][T24738] do_syscall_64+0xf3/0x230 [ 597.345404][T24738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.351460][T24738] [ 597.353770][T24738] -> (&new->fa_lock){....}-{2:2} { [ 597.358887][T24738] INITIAL USE at: [ 597.362765][T24738] lock_acquire+0x1ed/0x550 [ 597.368825][T24738] _raw_write_lock_irq+0xd3/0x120 [ 597.375404][T24738] fasync_remove_entry+0xff/0x1d0 [ 597.381985][T24738] lease_modify+0x1a0/0x390 [ 597.388038][T24738] locks_remove_file+0x57d/0x10c0 [ 597.394612][T24738] __fput+0x1ab/0x8a0 [ 597.400144][T24738] task_work_run+0x24f/0x310 [ 597.406282][T24738] syscall_exit_to_user_mode+0x168/0x370 [ 597.413469][T24738] do_syscall_64+0x100/0x230 [ 597.419612][T24738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.427060][T24738] INITIAL READ USE at: [ 597.431374][T24738] lock_acquire+0x1ed/0x550 [ 597.437866][T24738] _raw_read_lock_irqsave+0xdd/0x130 [ 597.445142][T24738] kill_fasync+0x19e/0x4d0 [ 597.451552][T24738] mousedev_write+0x993/0x9e0 [ 597.458218][T24738] vfs_writev+0x5af/0xbb0 [ 597.464540][T24738] do_writev+0x1b1/0x350 [ 597.470775][T24738] do_syscall_64+0xf3/0x230 [ 597.477269][T24738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.485152][T24738] } [ 597.487634][T24738] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 597.496299][T24738] ... acquired at: [ 597.500084][T24738] lock_acquire+0x1ed/0x550 [ 597.504752][T24738] _raw_read_lock_irqsave+0xdd/0x130 [ 597.510205][T24738] kill_fasync+0x19e/0x4d0 [ 597.514788][T24738] mousedev_notify_readers+0x719/0xc80 [ 597.520407][T24738] mousedev_event+0x5d9/0x1390 [ 597.525332][T24738] input_handler_events_default+0x107/0x1c0 [ 597.531388][T24738] input_pass_values+0x286/0x860 [ 597.536488][T24738] input_event_dispose+0x30f/0x600 [ 597.541760][T24738] input_handle_event+0xa71/0xbe0 [ 597.546942][T24738] input_inject_event+0x22f/0x340 [ 597.552126][T24738] evdev_write+0x672/0x7c0 [ 597.556703][T24738] vfs_write+0x2a2/0xc90 [ 597.561112][T24738] ksys_write+0x1a0/0x2c0 [ 597.565602][T24738] do_syscall_64+0xf3/0x230 [ 597.570270][T24738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.576340][T24738] [ 597.578650][T24738] [ 597.578650][T24738] stack backtrace: [ 597.584530][T24738] CPU: 0 UID: 0 PID: 24738 Comm: syz.1.8751 Not tainted 6.11.0-rc6-syzkaller-00183-gb831f83e40a2 #0 [ 597.595277][T24738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 597.605317][T24738] Call Trace: [ 597.608584][T24738] [ 597.611505][T24738] dump_stack_lvl+0x241/0x360 [ 597.616183][T24738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.621370][T24738] ? __pfx__printk+0x10/0x10 [ 597.625950][T24738] ? print_shortest_lock_dependencies+0xf2/0x160 [ 597.632271][T24738] validate_chain+0x4de0/0x5900 [ 597.637119][T24738] ? __pfx_validate_chain+0x10/0x10 [ 597.642303][T24738] ? __pfx_validate_chain+0x10/0x10 [ 597.647490][T24738] ? validate_chain+0x11e/0x5900 [ 597.652422][T24738] ? __pfx_validate_chain+0x10/0x10 [ 597.657607][T24738] ? register_lock_class+0x102/0x980 [ 597.662883][T24738] ? __pfx_register_lock_class+0x10/0x10 [ 597.668507][T24738] ? mark_lock+0x9a/0x350 [ 597.672839][T24738] __lock_acquire+0x137a/0x2040 [ 597.677703][T24738] lock_acquire+0x1ed/0x550 [ 597.682203][T24738] ? kill_fasync+0x19e/0x4d0 [ 597.686787][T24738] ? __pfx_lock_acquire+0x10/0x10 [ 597.691810][T24738] ? __pfx_lock_acquire+0x10/0x10 [ 597.696828][T24738] _raw_read_lock_irqsave+0xdd/0x130 [ 597.702105][T24738] ? kill_fasync+0x19e/0x4d0 [ 597.706689][T24738] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 597.712580][T24738] kill_fasync+0x19e/0x4d0 [ 597.716986][T24738] ? kill_fasync+0x55/0x4d0 [ 597.721479][T24738] mousedev_notify_readers+0x719/0xc80 [ 597.726932][T24738] ? mousedev_notify_readers+0x2a/0xc80 [ 597.732471][T24738] mousedev_event+0x5d9/0x1390 [ 597.737229][T24738] ? __pfx_mousedev_event+0x10/0x10 [ 597.742415][T24738] input_handler_events_default+0x107/0x1c0 [ 597.748302][T24738] input_pass_values+0x286/0x860 [ 597.753227][T24738] ? input_pass_values+0x8f/0x860 [ 597.758243][T24738] input_event_dispose+0x30f/0x600 [ 597.763343][T24738] input_handle_event+0xa71/0xbe0 [ 597.768357][T24738] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 597.773815][T24738] ? __pfx_input_handle_event+0x10/0x10 [ 597.779352][T24738] input_inject_event+0x22f/0x340 [ 597.784365][T24738] ? input_inject_event+0xd6/0x340 [ 597.789464][T24738] evdev_write+0x672/0x7c0 [ 597.793885][T24738] ? __pfx_evdev_write+0x10/0x10 [ 597.798821][T24738] ? bpf_lsm_file_permission+0x9/0x10 [ 597.804183][T24738] ? security_file_permission+0x7f/0xa0 [ 597.809718][T24738] ? rw_verify_area+0x1d2/0x6b0 [ 597.814560][T24738] ? __pfx_evdev_write+0x10/0x10 [ 597.819486][T24738] vfs_write+0x2a2/0xc90 [ 597.823735][T24738] ? __pfx_vfs_write+0x10/0x10 [ 597.828499][T24738] ? do_futex+0x392/0x560 [ 597.832817][T24738] ? __fget_files+0x29/0x470 [ 597.837396][T24738] ? __fget_files+0x3f6/0x470 [ 597.842053][T24738] ? __fget_files+0x29/0x470 [ 597.846634][T24738] ksys_write+0x1a0/0x2c0 [ 597.850958][T24738] ? __pfx_ksys_write+0x10/0x10 [ 597.855799][T24738] ? do_syscall_64+0x100/0x230 [ 597.860552][T24738] ? do_syscall_64+0xb6/0x230 [ 597.865217][T24738] do_syscall_64+0xf3/0x230 [ 597.869708][T24738] ? clear_bhb_loop+0x35/0x90 [ 597.874379][T24738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.880263][T24738] RIP: 0033:0x7fbb8ab7cef9 [ 597.884672][T24738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.904268][T24738] RSP: 002b:00007fbb8b8bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 597.912672][T24738] RAX: ffffffffffffffda RBX: 00007fbb8ad35f80 RCX: 00007fbb8ab7cef9 [ 597.920635][T24738] RDX: 0000000000000078 RSI: 00000000200003c0 RDI: 0000000000000004 [ 597.928592][T24738] RBP: 00007fbb8abef01e R08: 0000000000000000 R09: 0000000000000000 [ 597.936551][T24738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.944512][T24738] R13: 0000000000000000 R14: 00007fbb8ad35f80 R15: 00007ffd39736498 [ 597.952478][T24738]