last executing test programs: 1m19.8765727s ago: executing program 2 (id=1657): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = userfaultfd(0x1) madvise(&(0x7f00002ed000/0x4000)=nil, 0x4000, 0xc) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1m19.802935237s ago: executing program 2 (id=1659): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0x11000) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x80003fb) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m19.607144897s ago: executing program 2 (id=1661): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendmsg$unix(0xffffffffffffffff, 0x0, 0x14004090) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="310300000000070000000900000008000333", @ANYRES32, @ANYBLOB='\b', @ANYRES32], 0x24}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000280)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 1m19.10278282s ago: executing program 2 (id=1663): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m18.170810227s ago: executing program 2 (id=1674): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x3, [{}, {}, {}]}, 0x54) 1m18.091510647s ago: executing program 2 (id=1675): unshare(0x2040400) r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m17.737879128s ago: executing program 32 (id=1675): unshare(0x2040400) r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.556277794s ago: executing program 0 (id=2419): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000440)=""/193, 0x100}], 0x1, 0x0, 0x0) 3.338144996s ago: executing program 1 (id=2414): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x13, 0x0, 0x0, 0x4, 0x6a, &(0x7f0000000340)=""/106, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010001000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="4200330080000000ffffffffffff0802110000000802110000000000fff50000000000000100800000000301990406060194e34a00050304dd0576060702410006000000080057"], 0x68}}, 0x0) 3.21762431s ago: executing program 0 (id=2415): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) 3.126842787s ago: executing program 3 (id=2416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x9) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x400, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x4, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x4, 0x8, 0x9}]}}}}}}}}, 0x0) 3.115654927s ago: executing program 1 (id=2417): r0 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x12361, 0x1, {0x1}}) io_uring_enter(r0, 0x3517, 0x173d, 0x42, 0x0, 0x0) 3.078611993s ago: executing program 0 (id=2418): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbb}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d00, 0x0, 0x9}]}) 2.982816189s ago: executing program 3 (id=2421): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000240)=[0x7], &(0x7f00000000c0)=[r3], &(0x7f0000000240), 0x0, 0x300}) 2.871519844s ago: executing program 3 (id=2422): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0x35fe7901]}) 2.834162009s ago: executing program 5 (id=2424): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001080)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x3) 2.794594808s ago: executing program 1 (id=2425): fsopen(&(0x7f0000001480)='ceph\x00', 0x0) r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000140)={0x2, 0x0, {0x0, 0x0, 0x0, 0x18, 0x0, 0x60}}) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000001e40)={0x2020}, 0x4) 2.718860093s ago: executing program 0 (id=2426): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) 2.586267599s ago: executing program 1 (id=2428): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="a758", 0x2}, {&(0x7f0000000100)="236fec4e3164242d11c6f14437851f0a2db7", 0x12}], 0x2}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f00000002c0)="f6584496", 0x4, 0x0, 0x0, 0x0) 2.498857897s ago: executing program 0 (id=2429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.498649739s ago: executing program 3 (id=2430): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00147c000000d1d515"], 0x0, 0x0, 0x0, 0x0}) 2.440052955s ago: executing program 5 (id=2431): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff30"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = io_uring_setup(0x74f8, &(0x7f00000005c0)) close_range(r2, 0xffffffffffffffff, 0x0) pread64(r1, &(0x7f00000061c0)=""/4126, 0x101e, 0x1000060000003) 2.426662417s ago: executing program 0 (id=2432): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 2.358612702s ago: executing program 1 (id=2434): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2.024193995s ago: executing program 1 (id=2436): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="0005040000009d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002ac0)={0x1c, &(0x7f00000001c0)={0x20, 0x14, 0x9, "e7ee0c90e4b8058048"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000680)={0x40, 0xf, 0x4, "e7b90010"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 950.891215ms ago: executing program 4 (id=2439): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) 841.754559ms ago: executing program 4 (id=2440): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0x3, 0xa, 0x0, 0x0, 0xfffffffffffffffc}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000080071000040"]) 720.510236ms ago: executing program 5 (id=2441): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)}], 0x1}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$netlink(r1, 0x10e, 0x1, 0x0, &(0x7f0000000080)) 639.235937ms ago: executing program 4 (id=2442): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100cebd70020500000004fffe000800090002"], 0x48}}, 0x0) 633.195221ms ago: executing program 5 (id=2443): r0 = landlock_create_ruleset(&(0x7f00000003c0)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000002000)={0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x4) 502.828536ms ago: executing program 5 (id=2444): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 498.33746ms ago: executing program 4 (id=2445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000001140)={"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"}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0xff}) 384.070577ms ago: executing program 5 (id=2446): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) syz_usb_disconnect(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0) 335.64029ms ago: executing program 4 (id=2447): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 67.132464ms ago: executing program 3 (id=2448): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000001040168b800000000000000000004000500010001"], 0x1c}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 24.926108ms ago: executing program 4 (id=2449): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 0s ago: executing program 3 (id=2450): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): dget.1 gadget.1: fail, usb_ep_enable returned -22 [ 214.765349][ T5881] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 214.774975][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.799920][ T5881] usb 5-1: config 0 descriptor?? [ 214.809140][ T5881] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 214.986673][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 214.986676][ T10] usb 2-1: USB disconnect, device number 16 [ 214.986805][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 215.088474][ T9277] xt_connbytes: Forcing CT accounting to be enabled [ 215.143557][ T9277] Cannot find del_set index 2 as target [ 215.229770][ T5881] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 215.636076][ T5881] gspca_cpia1: usb_control_msg 02, error -32 [ 215.676746][ T5881] gspca_cpia1: usb_control_msg 02, error -71 [ 215.692068][ T5881] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 215.716235][ T5881] usb 5-1: USB disconnect, device number 24 [ 215.756698][ T9299] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1385'. [ 216.352519][ T9313] loop6: detected capacity change from 0 to 63 [ 216.371086][ T9313] buffer_io_error: 18 callbacks suppressed [ 216.371114][ T9313] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.389938][ T9313] Buffer I/O error on dev loop6, logical block 1, async page read [ 216.407190][ T9313] Buffer I/O error on dev loop6, logical block 2, async page read [ 216.441544][ T9313] Buffer I/O error on dev loop6, logical block 3, async page read [ 216.473078][ T9313] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.509459][ T9313] Buffer I/O error on dev loop6, logical block 1, async page read [ 216.513323][ T10] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 216.554350][ T9313] Buffer I/O error on dev loop6, logical block 2, async page read [ 216.587385][ T9313] Buffer I/O error on dev loop6, logical block 3, async page read [ 216.597699][ T6146] Buffer I/O error on dev loop6, logical block 0, async page read [ 216.608267][ T6146] Buffer I/O error on dev loop6, logical block 1, async page read [ 216.693374][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 216.710185][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.753274][ T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 216.762355][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.808536][ T10] usb 1-1: config 0 descriptor?? [ 217.242357][ T9331] loop6: detected capacity change from 0 to 63 [ 217.543436][ T5881] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 217.705345][ T5881] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 217.717958][ T5881] usb 5-1: config 179 has no interface number 0 [ 217.724670][ T5881] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 217.742919][ T5881] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 217.743483][ T10] kye 0003:0458:5010.001F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 217.767298][ T5881] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 217.779401][ T5881] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 217.791717][ T10] kye 0003:0458:5010.001F: unknown main item tag 0x0 [ 217.798893][ T10] kye 0003:0458:5010.001F: unknown main item tag 0x0 [ 217.805887][ T5881] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 217.819446][ T10] kye 0003:0458:5010.001F: unknown main item tag 0x0 [ 217.826329][ T10] kye 0003:0458:5010.001F: unknown main item tag 0x0 [ 217.833521][ T5881] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 217.842582][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.850978][ T10] kye 0003:0458:5010.001F: unknown main item tag 0x0 [ 217.861229][ T10] kye 0003:0458:5010.001F: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 217.873839][ T10] kye 0003:0458:5010.001F: tablet-enabling feature report not found [ 217.884238][ T9335] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 217.891599][ T9335] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 217.899177][ T10] kye 0003:0458:5010.001F: tablet enabling failed [ 218.041892][ T5878] usb 1-1: USB disconnect, device number 23 [ 218.151989][ T53] usb 5-1: USB disconnect, device number 25 [ 218.152005][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 218.166886][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 218.969342][ T9346] macvlan2: entered promiscuous mode [ 219.003522][ T9346] macvlan2: entered allmulticast mode [ 219.009871][ T9346] team_slave_0: entered promiscuous mode [ 219.015808][ T9346] team_slave_1: entered promiscuous mode [ 219.031711][ T9346] team0: entered allmulticast mode [ 219.050556][ T9346] team_slave_0: entered allmulticast mode [ 219.077957][ T9346] team_slave_1: entered allmulticast mode [ 219.103329][ T9346] team0: entered promiscuous mode [ 219.138052][ T9346] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 219.149798][ T9346] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 219.895152][ T5878] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 219.923598][ T9387] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 220.055068][ T5878] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 220.076722][ T5878] usb 4-1: config 179 has no interface number 0 [ 220.086161][ T5878] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 220.102877][ T9391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1430'. [ 220.111929][ T5878] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 220.144309][ T5878] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 220.159987][ T5878] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 220.172392][ T5878] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 220.231764][ T5878] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 220.275979][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.305439][ T9376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.312828][ T9376] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 220.333268][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 220.515363][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 220.586687][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.630944][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.652308][ T5881] usb 4-1: USB disconnect, device number 21 [ 220.652437][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 220.666633][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 220.678671][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 220.722558][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 220.735824][ T10] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 220.754635][ T10] usb 5-1: Manufacturer: syz [ 220.769285][ T10] usb 5-1: config 0 descriptor?? [ 220.903329][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 221.089338][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.113533][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.143379][ T9] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 221.152528][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.180120][ T9] usb 1-1: config 0 descriptor?? [ 221.198487][ T10] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 221.218657][ T10] appleir 0003:05AC:8243.0020: No inputs registered, leaving [ 221.253749][ T10] appleir 0003:05AC:8243.0020: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 221.506765][ T5881] usb 5-1: USB disconnect, device number 26 [ 221.619365][ T9] hid-led 0003:0FC5:B080.0021: unknown main item tag 0x0 [ 221.711324][ T9414] warning: `syz.3.1431' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 221.733922][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 221.913294][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 221.930899][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 221.948893][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.981770][ T10] usb 2-1: config 0 descriptor?? [ 222.011189][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 222.235147][ T9] usb 1-1: USB disconnect, device number 24 [ 223.019883][ T10] gspca_sonixj: reg_w1 err -71 [ 223.046947][ T10] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 223.072302][ T10] usb 2-1: USB disconnect, device number 17 [ 223.208006][ T53] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 223.252431][ T53] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 224.020577][ T9471] input: syz1 as /devices/virtual/input/input29 [ 225.002456][ T9484] syzkaller1: entered promiscuous mode [ 225.017470][ T9484] syzkaller1: entered allmulticast mode [ 225.324662][ T5878] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 225.521690][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.553271][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.572542][ T5878] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 225.594163][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.628509][ T5878] usb 3-1: config 0 descriptor?? [ 225.920914][ T9] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 225.940584][ T9] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 226.470918][ T5878] hid-led 0003:27B8:01ED.0024: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 226.541167][ T5878] hid-led 0003:27B8:01ED.0024: ThingM blink(1) v1 initialized [ 226.616412][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 226.632242][ T9541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1484'. [ 226.689036][ T5878] usb 3-1: USB disconnect, device number 22 [ 226.783409][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 226.790812][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 226.793504][ T53] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 226.800306][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.821491][ T9] usb 5-1: config 0 descriptor?? [ 226.964846][ T53] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 226.974108][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.984501][ T53] usb 2-1: config 0 descriptor?? [ 226.995267][ T53] cp210x 2-1:0.0: cp210x converter detected [ 227.033846][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 227.303002][ T5880] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 227.318793][ T5880] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 227.413941][ T53] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 227.645008][ T53] usb 2-1: cp210x converter now attached to ttyUSB0 [ 227.858127][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 227.874289][ T5880] usb 2-1: USB disconnect, device number 18 [ 227.877432][ T9] asix 5-1:0.0: probe with driver asix failed with error -71 [ 227.900559][ T9] usb 5-1: USB disconnect, device number 27 [ 227.922098][ T5880] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 227.967468][ T5880] cp210x 2-1:0.0: device disconnected [ 228.452783][ T5880] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 228.483550][ T5880] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 228.558630][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 228.558648][ T30] audit: type=1326 audit(1746557494.714:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 228.564756][ T53] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 228.605615][ T30] audit: type=1326 audit(1746557494.714:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 228.696344][ T30] audit: type=1326 audit(1746557494.754:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 228.721556][ T53] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 228.730005][ T53] usb 3-1: config 0 has no interface number 0 [ 228.739381][ T53] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 228.748784][ T30] audit: type=1326 audit(1746557494.754:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 228.757725][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.781075][ T53] usb 3-1: Product: syz [ 228.785766][ T53] usb 3-1: Manufacturer: syz [ 228.790503][ T53] usb 3-1: SerialNumber: syz [ 228.830049][ T30] audit: type=1326 audit(1746557494.754:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 228.859233][ T53] usb 3-1: config 0 descriptor?? [ 228.869674][ T30] audit: type=1326 audit(1746557494.754:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 228.903635][ T5880] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 228.931728][ T30] audit: type=1326 audit(1746557494.754:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 228.959752][ T30] audit: type=1326 audit(1746557494.754:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 229.008369][ T30] audit: type=1326 audit(1746557494.754:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 229.051405][ T30] audit: type=1326 audit(1746557494.784:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9576 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=301 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 229.098566][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 229.110014][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.130228][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 229.153267][ T5880] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 229.162440][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.182698][ T5880] usb 2-1: config 0 descriptor?? [ 229.292435][ T53] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 229.303579][ T53] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 229.333733][ T53] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 229.351796][ T53] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 229.367369][ T53] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 229.504782][ T53] usb 3-1: USB disconnect, device number 23 [ 229.529791][ T53] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 229.546047][ T53] keyspan 3-1:0.133: device disconnected [ 229.606845][ T5880] cherry 0003:046A:0023.0027: unbalanced collection at end of report description [ 229.634444][ T5880] cherry 0003:046A:0023.0027: probe with driver cherry failed with error -22 [ 229.830017][ T5884] usb 2-1: USB disconnect, device number 19 [ 229.945876][ T9612] unknown channel width for channel at 909000KHz? [ 230.027349][ T9] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 230.217718][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.230797][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.252636][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.263008][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.272288][ T9] usb 5-1: Product: syz [ 230.277476][ T9] usb 5-1: Manufacturer: syz [ 230.282178][ T9] usb 5-1: SerialNumber: syz [ 230.307271][ T5884] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 230.468563][ T5884] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 230.505479][ T5884] usb 1-1: config 179 has no interface number 0 [ 230.514858][ T53] usb 5-1: USB disconnect, device number 28 [ 230.521156][ T5884] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 230.563653][ T9632] openvswitch: netlink: Tunnel attr 32 out of range max 16 [ 230.570955][ T5884] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 230.600719][ T5884] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 230.653601][ T5884] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 230.665148][ T5884] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 230.709376][ T5884] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 230.729041][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.750804][ T9616] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 230.758573][ T9616] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 231.057603][ T5884] usb 1-1: USB disconnect, device number 25 [ 231.057660][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 231.071916][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 231.883386][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 232.073506][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 232.087353][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 232.105895][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 232.124832][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.143142][ T9] usb 2-1: Product: syz [ 232.148843][ T9] usb 2-1: Manufacturer: syz [ 232.163231][ T9] usb 2-1: SerialNumber: syz [ 232.174304][ T9] usb 2-1: config 0 descriptor?? [ 232.618588][ T9] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 232.748940][ T9691] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 233.046513][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1558'. [ 233.204010][ T53] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 233.231064][ T9] usb 2-1: USB disconnect, device number 20 [ 233.333345][ T5880] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 233.374512][ T53] usb 1-1: Using ep0 maxpacket: 16 [ 233.384577][ T53] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 233.394071][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.402121][ T53] usb 1-1: Product: syz [ 233.407001][ T53] usb 1-1: Manufacturer: syz [ 233.411628][ T53] usb 1-1: SerialNumber: syz [ 233.424424][ T53] usb 1-1: config 0 descriptor?? [ 233.439930][ T53] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 233.507480][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.538991][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.551751][ T5880] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 233.569062][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.584457][ T5880] usb 5-1: config 0 descriptor?? [ 233.763538][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 233.925369][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 233.965303][ T9] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 233.983649][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.997255][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 234.016992][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 234.025256][ T5880] hid-led 0003:0FC5:B080.0028: unknown main item tag 0x0 [ 234.038705][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.072709][ T9] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 234.102420][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.131129][ T9] usb 3-1: Product: syz [ 234.142581][ T9] usb 3-1: Manufacturer: syz [ 234.149509][ T9] usb 3-1: SerialNumber: syz [ 234.165452][ T9] usb 3-1: config 0 descriptor?? [ 234.177211][ T9] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 234.473090][ T53] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 234.492280][ T53] usb 1-1: USB disconnect, device number 26 [ 234.506485][ T9738] sctp: [Deprecated]: syz.1.1571 (pid 9738) Use of int in max_burst socket option deprecated. [ 234.506485][ T9738] Use struct sctp_assoc_value instead [ 234.671929][ T5881] usb 5-1: USB disconnect, device number 29 [ 234.986990][ T9] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 235.210254][ T9] usb 3-1: USB disconnect, device number 24 [ 235.340308][ T30] kauditd_printk_skb: 225 callbacks suppressed [ 235.340332][ T30] audit: type=1326 audit(1746557501.494:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 235.421652][ T30] audit: type=1326 audit(1746557501.534:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 235.456376][ T30] audit: type=1326 audit(1746557501.534:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 235.778006][ T30] audit: type=1326 audit(1746557501.534:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 235.868472][ T30] audit: type=1326 audit(1746557501.544:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 235.982519][ T30] audit: type=1326 audit(1746557501.544:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe3558 code=0x7ffc0000 [ 236.070504][ T30] audit: type=1326 audit(1746557501.544:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe3558 code=0x7ffc0000 [ 236.104245][ T30] audit: type=1326 audit(1746557501.544:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe3558 code=0x7ffc0000 [ 236.151191][ T30] audit: type=1326 audit(1746557501.544:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe3558 code=0x7ffc0000 [ 236.251637][ T30] audit: type=1326 audit(1746557501.544:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9751 comm="syz.4.1577" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fe3558 code=0x7ffc0000 [ 237.783725][ T53] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 237.957496][ T53] usb 4-1: Using ep0 maxpacket: 8 [ 237.985451][ T53] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 238.003318][ T53] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.033266][ T53] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.056531][ T53] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.078577][ T53] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.105704][ T53] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.116851][ T53] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.351841][ T53] usb 4-1: usb_control_msg returned -32 [ 238.363594][ T53] usbtmc 4-1:16.0: can't read capabilities [ 238.542352][ T9818] loop8: detected capacity change from 0 to 8 [ 238.583464][ T9818] Dev loop8: unable to read RDB block 8 [ 238.603299][ T9818] loop8: unable to read partition table [ 238.609173][ T9818] loop8: partition table beyond EOD, truncated [ 238.633495][ T9818] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 238.905909][ T9831] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1610'. [ 238.926027][ T5880] usb 4-1: USB disconnect, device number 22 [ 239.095449][ T53] IPVS: starting estimator thread 0... [ 239.213402][ T9837] IPVS: using max 28 ests per chain, 67200 per kthread [ 239.318812][ T9846] raw_sendmsg: syz.1.1616 forgot to set AF_INET. Fix it! [ 241.108314][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1640'. [ 241.863271][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 242.025613][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.043688][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 242.054572][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.063896][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 242.076413][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 242.091628][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.101305][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.110594][ T9] usb 2-1: Product: syz [ 242.115627][ T9] usb 2-1: Manufacturer: syz [ 242.130868][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 242.136302][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 242.142898][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 242.149242][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 242.243631][ T9942] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 242.263800][ T9942] (unnamed net_device) (uninitialized): option mode: invalid value (119) [ 242.364194][ T53] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 242.447840][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 242.449020][ T5880] usb 2-1: USB disconnect, device number 21 [ 242.454727][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 242.466576][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 242.478927][ C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 242.565610][ T53] usb 1-1: Using ep0 maxpacket: 32 [ 242.586009][ T53] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 242.599368][ T53] usb 1-1: config 0 has no interface number 0 [ 242.615466][ T53] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 242.632609][ T53] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.641341][ T53] usb 1-1: Product: syz [ 242.663396][ T53] usb 1-1: Manufacturer: syz [ 242.668064][ T53] usb 1-1: SerialNumber: syz [ 242.686020][ T53] usb 1-1: config 0 descriptor?? [ 242.700480][ T53] smsc95xx v2.0.0 [ 243.507088][ T53] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 243.720479][ T53] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 243.745792][ T53] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 243.761364][ T53] usb 1-1: USB disconnect, device number 27 [ 244.763845][ T5880] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 244.840206][ T9999] input: syz0 as /devices/virtual/input/input31 [ 244.894062][ T12] veth1_to_bridge: left allmulticast mode [ 244.900179][ T12] veth1_to_bridge: left promiscuous mode [ 244.924746][ T12] bridge0: port 3(veth1_to_bridge) entered disabled state [ 244.948503][ T5880] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.957917][ T5884] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 244.963225][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 245.014388][ T5880] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 245.025578][ T12] bridge_slave_1: left allmulticast mode [ 245.031248][ T12] bridge_slave_1: left promiscuous mode [ 245.041559][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.053538][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.073239][ T5880] usb 1-1: SerialNumber: syz [ 245.099137][ T12] bridge_slave_0: left allmulticast mode [ 245.109067][ T12] bridge_slave_0: left promiscuous mode [ 245.123319][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 245.137732][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.145604][ T5884] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 245.167107][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.204026][ T5884] usb 4-1: config 0 descriptor?? [ 245.326781][ T5880] usb 1-1: 0:2 : does not exist [ 245.400793][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.413831][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.421935][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.430671][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.438656][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.455536][ T5884] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 245.455667][ T5880] usb 1-1: USB disconnect, device number 28 [ 245.507937][ T5826] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.526174][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.533613][ T5826] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.545094][ T5826] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.553738][ T5826] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.646860][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.711178][ T5884] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 245.768416][ T5884] usb 4-1: media controller created [ 245.811841][ T6146] udevd[6146]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.846657][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.925884][ T5884] az6027: usb out operation failed. (-71) [ 245.950901][ T5884] az6027: usb out operation failed. (-71) [ 245.966910][ T5884] stb0899_attach: Driver disabled by Kconfig [ 245.982372][ T5884] az6027: no front-end attached [ 245.982372][ T5884] [ 246.001694][ T5884] az6027: usb out operation failed. (-71) [ 246.021636][ T5884] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 246.058954][ T5884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 246.126566][ T5884] dvb-usb: schedule remote query interval to 400 msecs. [ 246.151416][ T5884] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 246.199167][ T5884] usb 4-1: USB disconnect, device number 23 [ 246.388687][ T5884] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 246.483411][ T5881] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 246.565384][ T12] bond0 (unregistering): left promiscuous mode [ 246.571701][ T12] bond_slave_0: left promiscuous mode [ 246.586646][ T12] bond_slave_1: left promiscuous mode [ 246.643416][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 246.652997][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.666134][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.686664][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.699563][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.714515][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 246.727094][ T12] bond0 (unregistering): Released all slaves [ 246.733509][ T5881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 246.773367][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.816492][ T5881] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 246.855723][ T5881] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 246.893686][ T5881] usb 1-1: Manufacturer: syz [ 246.918816][ T5881] usb 1-1: config 0 descriptor?? [ 247.273886][ T5881] rc_core: IR keymap rc-hauppauge not found [ 247.289480][ T5881] Registered IR keymap rc-empty [ 247.305366][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.333315][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.365231][ T5881] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 247.398155][ T5881] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 247.496399][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.507069][ C0] mceusb 1-1:0.0: long-range (0x14) receiver active [ 247.580862][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.595282][ T5826] Bluetooth: hci0: command tx timeout [ 247.624029][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.689672][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.733402][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.804597][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.838360][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.883304][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.892838][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1697'. [ 247.923709][T10072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1697'. [ 247.933330][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 247.957629][ T5881] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 248.001918][ T5881] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 248.022182][ T12] hsr_slave_0: left promiscuous mode [ 248.040561][ T5881] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x14 active) [ 248.113367][ T12] hsr_slave_1: left promiscuous mode [ 248.127449][ T5881] usb 1-1: USB disconnect, device number 29 [ 248.134291][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.149489][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.225319][ T12] pimreg (unregistering): left allmulticast mode [ 248.314281][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 248.393697][ T5884] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 248.476567][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 248.486464][ T9] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 248.497189][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.517904][ T9] usb 4-1: config 0 has no interface number 0 [ 248.526238][ T9] usb 4-1: config 0 interface 49 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 248.552636][ T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 248.570153][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 248.584098][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.595574][ T5884] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 248.615392][ T9] usb 4-1: Product: syz [ 248.619593][ T9] usb 4-1: Manufacturer: syz [ 248.625506][ T5884] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 248.637369][ T9] usb 4-1: SerialNumber: syz [ 248.648477][ T5884] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 248.658639][ T5884] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 248.680080][ T9] usb 4-1: config 0 descriptor?? [ 248.685485][ T5884] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 248.701439][ T5884] usb 5-1: config 0 has no interface number 0 [ 248.707994][ T5884] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 248.726282][ T5884] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 248.760201][ T5884] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 248.773302][ T5884] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.808638][ T5884] usb 5-1: config 0 interface 125 has no altsetting 0 [ 248.822611][ T5884] usb 5-1: config 0 interface 125 has no altsetting 2 [ 248.861642][ T5884] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 248.898973][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.909474][ T5884] usb 5-1: Product: syz [ 248.919078][ T5884] usb 5-1: Manufacturer: syz [ 248.939314][ T5884] usb 5-1: SerialNumber: syz [ 248.952281][ T5884] usb 5-1: config 0 descriptor?? [ 248.980935][ T5884] usb 5-1: selecting invalid altsetting 2 [ 249.021192][ T9] qmi_wwan 4-1:0.49: probe with driver qmi_wwan failed with error -22 [ 249.064645][ T9] usb 4-1: USB disconnect, device number 24 [ 249.179923][ T12] team0 (unregistering): Port device team_slave_1 removed [ 249.260748][ T12] team0 (unregistering): Port device team_slave_0 removed [ 249.676420][ T5826] Bluetooth: hci0: command tx timeout [ 250.037551][ T5884] usb 5-1: USB disconnect, device number 30 [ 250.202690][T10102] veth0_to_bridge: entered promiscuous mode [ 250.211572][T10101] veth0_to_bridge: left promiscuous mode [ 250.278287][T10015] chnl_net:caif_netlink_parms(): no params data found [ 250.688107][T10131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1715'. [ 250.718365][T10131] netlink: 'syz.4.1715': attribute type 7 has an invalid length. [ 250.753364][T10131] netlink: 'syz.4.1715': attribute type 8 has an invalid length. [ 250.761156][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 250.784840][T10015] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.792481][T10015] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.805338][T10015] bridge_slave_0: entered allmulticast mode [ 250.825378][T10015] bridge_slave_0: entered promiscuous mode [ 250.844119][T10015] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.851273][T10015] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.883805][T10015] bridge_slave_1: entered allmulticast mode [ 250.916435][T10015] bridge_slave_1: entered promiscuous mode [ 251.109226][T10015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.160240][T10015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.327633][T10015] team0: Port device team_slave_0 added [ 251.408187][T10015] team0: Port device team_slave_1 added [ 251.565990][T10015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.573006][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.605414][T10015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.658767][T10015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.673023][T10015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.706051][T10015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.753235][ T5826] Bluetooth: hci0: command tx timeout [ 252.207400][T10015] hsr_slave_0: entered promiscuous mode [ 252.233307][ T5880] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 252.245243][T10015] hsr_slave_1: entered promiscuous mode [ 252.278960][T10015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.298247][T10015] Cannot create hsr debugfs directory [ 252.430447][ T5880] usb 4-1: Using ep0 maxpacket: 16 [ 252.450491][ T5880] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 252.469362][ T5880] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 252.492800][ T5880] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 252.510955][ T5880] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 252.563309][ T5880] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 252.592595][ T5880] usb 4-1: config 0 has no interface number 0 [ 252.634588][ T5880] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 252.689579][ T5880] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 252.725032][ T5880] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 252.736077][ T5880] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.773991][ T5880] usb 4-1: config 0 interface 125 has no altsetting 0 [ 252.786107][ T5880] usb 4-1: config 0 interface 125 has no altsetting 2 [ 252.860832][ T5880] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 252.880401][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.893238][ T5880] usb 4-1: Product: syz [ 252.897430][ T5880] usb 4-1: Manufacturer: syz [ 252.930791][ T5880] usb 4-1: SerialNumber: syz [ 252.968580][ T5880] usb 4-1: config 0 descriptor?? [ 253.011965][ T5880] usb 4-1: selecting invalid altsetting 2 [ 253.340730][T10015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 253.431999][T10015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 253.454221][T10015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 253.483906][T10015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 253.795269][T10015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.833915][ T5826] Bluetooth: hci0: command tx timeout [ 253.857182][T10015] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.896390][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.903640][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.945903][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.953115][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.023575][ T53] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 254.077050][ T9] usb 4-1: USB disconnect, device number 25 [ 254.086590][ T30] kauditd_printk_skb: 241 callbacks suppressed [ 254.086608][ T30] audit: type=1326 audit(1746557520.244:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10229 comm="syz.4.1746" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fe3539 code=0x0 [ 254.175207][T10015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.215265][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.234458][ T53] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.255772][ T53] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.255798][T10015] veth0_vlan: entered promiscuous mode [ 254.284139][ T53] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.290481][T10015] veth1_vlan: entered promiscuous mode [ 254.308686][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.320988][ T53] usb 1-1: config 0 descriptor?? [ 254.384510][T10015] veth0_macvtap: entered promiscuous mode [ 254.397516][T10015] veth1_macvtap: entered promiscuous mode [ 254.429265][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.447039][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.461624][T10015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.485634][T10015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.496473][T10015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.508853][T10015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.524920][T10015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.533956][T10015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.550520][T10015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.560770][T10015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.746886][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.757004][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.776011][ T53] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 254.821035][ T53] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 254.935794][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.990132][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.056190][T10251] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1751'. [ 255.069098][T10251] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1751'. [ 255.092161][T10252] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:2 [ 255.108204][ T53] usb 1-1: USB disconnect, device number 30 [ 255.510528][T10270] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 255.575562][ T30] audit: type=1326 audit(1746557521.714:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 255.665411][ T30] audit: type=1326 audit(1746557521.714:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 255.714127][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.720535][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.756773][ T30] audit: type=1326 audit(1746557521.714:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 255.789967][ T30] audit: type=1326 audit(1746557521.714:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 255.846253][ T30] audit: type=1326 audit(1746557521.714:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 255.869570][ T30] audit: type=1326 audit(1746557521.714:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 255.891715][ T30] audit: type=1326 audit(1746557521.714:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 255.928335][ T30] audit: type=1326 audit(1746557521.714:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e558 code=0x7ffc0000 [ 256.042059][ T30] audit: type=1326 audit(1746557521.714:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.1.1754" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000 [ 256.173587][T10289] syz_tun: entered promiscuous mode [ 256.182384][T10289] syz_tun: left promiscuous mode [ 257.103048][T10326] loop8: detected capacity change from 0 to 8 [ 257.149166][T10326] Dev loop8: unable to read RDB block 8 [ 257.171977][T10326] loop8: unable to read partition table [ 257.193500][T10326] loop8: partition table beyond EOD, truncated [ 257.212149][T10326] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 257.353730][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 257.524463][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 257.566849][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 257.594368][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.626727][ T9] usb 2-1: Product: syz [ 257.630942][ T9] usb 2-1: Manufacturer: syz [ 257.661326][ T9] usb 2-1: SerialNumber: syz [ 257.708488][ T9] usb 2-1: config 0 descriptor?? [ 257.726568][ T9] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 258.463289][ T5884] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 258.618946][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.651240][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.670726][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 258.684167][ T5884] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 258.693375][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.738519][ T5884] usb 1-1: config 0 descriptor?? [ 258.749983][ T9] gspca_sonixj: reg_w err -71 [ 258.755155][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 258.789698][ T9] usb 2-1: USB disconnect, device number 22 [ 259.192132][ T5884] plantronics 0003:047F:FFFF.002A: reserved main item tag 0xd [ 259.223295][ T5884] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 259.242204][ T5884] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 259.276670][ T5884] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 259.495860][ T5884] usb 1-1: USB disconnect, device number 31 [ 260.077004][T10412] syz_tun: entered promiscuous mode [ 260.107801][T10412] syz_tun: left promiscuous mode [ 260.218346][T10418] input: syz1 as /devices/virtual/input/input34 [ 260.446493][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 260.446509][ T30] audit: type=1326 audit(1746557526.604:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 260.498816][ T30] audit: type=1326 audit(1746557526.604:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 260.583082][ T30] audit: type=1326 audit(1746557526.604:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 260.672495][ T30] audit: type=1326 audit(1746557526.604:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 260.709350][ T30] audit: type=1326 audit(1746557526.634:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 260.746666][ T30] audit: type=1326 audit(1746557526.634:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 260.775387][ T30] audit: type=1326 audit(1746557526.634:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 260.803138][ T30] audit: type=1326 audit(1746557526.634:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 260.848348][ T30] audit: type=1326 audit(1746557526.634:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 260.884190][ T30] audit: type=1326 audit(1746557526.634:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10423 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf703e558 code=0x7ffc0000 [ 261.146630][T10437] kvm: apic: phys broadcast and lowest prio [ 261.353535][ T5884] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 261.533307][ T5884] usb 4-1: Using ep0 maxpacket: 8 [ 261.542442][ T5884] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 261.574210][ T5884] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.601446][ T5884] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.633562][ T5884] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.655035][ T5884] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.669467][ T5884] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 261.679380][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.863479][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 261.915164][ T5884] usb 4-1: usb_control_msg returned -32 [ 261.920806][ T5884] usbtmc 4-1:16.0: can't read capabilities [ 262.021444][T10468] binder: 10467:10468 ioctl c0306201 80000540 returned -14 [ 262.033680][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 262.041461][ T9] usb 6-1: config 0 has an invalid interface number: 49 but max is 0 [ 262.070939][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.107057][ T9] usb 6-1: config 0 has no interface number 0 [ 262.123539][ T9] usb 6-1: config 0 interface 49 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 262.159515][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 262.169458][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.181155][ T9] usb 6-1: Product: syz [ 262.185562][ T9] usb 6-1: Manufacturer: syz [ 262.190529][ T9] usb 6-1: SerialNumber: syz [ 262.193282][ T5878] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 262.208537][ T9] usb 6-1: config 0 descriptor?? [ 262.301834][T10475] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 262.318269][ T977] usb 4-1: USB disconnect, device number 26 [ 262.375480][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.393376][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 262.415593][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 262.440512][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 262.464056][ T5878] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 262.500081][ T5878] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 262.519622][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 262.539987][ T5878] usb 5-1: Product: syz [ 262.551848][ T5878] usb 5-1: Manufacturer: syz [ 262.570141][ T5878] usb 5-1: SerialNumber: syz [ 262.572034][ T9] qmi_wwan 6-1:0.49: probe with driver qmi_wwan failed with error -22 [ 262.584233][ T5878] usb 5-1: config 0 descriptor?? [ 262.611847][ T9] usb 6-1: USB disconnect, device number 2 [ 262.805874][ T5878] radio-si470x 5-1:0.0: DeviceID=0x726e ChipID=0x6500 [ 263.006892][ T5878] radio-si470x 5-1:0.0: software version 114, hardware version 110 [ 263.207548][ T5878] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 263.227719][ T5878] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 263.264736][ T5878] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 263.305124][ T5878] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 263.351401][ T5878] usb 5-1: USB disconnect, device number 31 [ 263.666782][T10503] fuse: Bad value for 'fd' [ 263.703295][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 263.863828][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 263.881991][ T9] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 263.906977][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 263.927116][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 263.951733][ T9] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 263.961989][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 263.990885][ T9] usb 1-1: config 0 has no interface number 0 [ 264.006768][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 264.020311][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 264.040376][ T9] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 264.059066][ T9] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 264.076337][ T9] usb 1-1: config 0 interface 125 has no altsetting 0 [ 264.086209][ T9] usb 1-1: config 0 interface 125 has no altsetting 2 [ 264.101757][ T9] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 264.111840][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.122847][ T9] usb 1-1: Product: syz [ 264.127877][ T9] usb 1-1: Manufacturer: syz [ 264.135803][ T9] usb 1-1: SerialNumber: syz [ 264.145816][ T9] usb 1-1: config 0 descriptor?? [ 264.161374][ T9] usb 1-1: selecting invalid altsetting 2 [ 264.283534][ T5884] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 264.453249][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 264.493713][ T5884] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 264.506345][ T5884] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.517936][ T5884] usb 2-1: config 0 has no interface number 0 [ 264.530952][ T5884] usb 2-1: config 0 interface 49 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 264.549617][ T5884] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 264.560045][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.576403][ T5884] usb 2-1: Product: syz [ 264.593113][ T5884] usb 2-1: Manufacturer: syz [ 264.600322][ T5884] usb 2-1: SerialNumber: syz [ 264.639004][ T5884] usb 2-1: config 0 descriptor?? [ 264.804976][T10534] input: syz0 as /devices/virtual/input/input35 [ 264.820228][T10534] input: failed to attach handler leds to device input35, error: -6 [ 264.997392][ T5884] qmi_wwan 2-1:0.49: probe with driver qmi_wwan failed with error -22 [ 265.026547][ T5884] usb 2-1: USB disconnect, device number 23 [ 265.246368][ T5884] usb 1-1: USB disconnect, device number 32 [ 266.353270][ T5884] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 266.413708][T10598] batadv_slave_0: entered promiscuous mode [ 266.421318][T10597] batadv_slave_0: left promiscuous mode [ 266.523249][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 266.547896][ T5884] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 266.587204][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.617035][ T5884] usb 5-1: config 0 has no interface number 0 [ 266.642244][ T5884] usb 5-1: config 0 interface 49 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 266.681366][ T5884] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 266.711421][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.731081][ T5884] usb 5-1: Product: syz [ 266.754240][ T5884] usb 5-1: Manufacturer: syz [ 266.773432][ T5884] usb 5-1: SerialNumber: syz [ 266.790429][ T5884] usb 5-1: config 0 descriptor?? [ 267.231224][ T5884] qmi_wwan 5-1:0.49: probe with driver qmi_wwan failed with error -22 [ 267.277404][ T5884] usb 5-1: USB disconnect, device number 32 [ 267.393532][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 267.563269][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 267.570220][ T9] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 267.593330][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.601519][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.623305][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 267.631496][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 267.653216][ T9] usb 2-1: config 0 has no interface number 0 [ 267.659336][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 267.670888][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 267.681168][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 267.691901][ T9] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.705249][ T9] usb 2-1: config 0 interface 125 has no altsetting 0 [ 267.712052][ T9] usb 2-1: config 0 interface 125 has no altsetting 2 [ 267.722078][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 267.731636][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.742687][ T9] usb 2-1: Product: syz [ 267.749529][ T9] usb 2-1: Manufacturer: syz [ 267.754995][ T9] usb 2-1: SerialNumber: syz [ 267.774192][ T9] usb 2-1: config 0 descriptor?? [ 267.784014][ T9] usb 2-1: selecting invalid altsetting 2 [ 267.867012][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 267.867028][ T30] audit: type=1326 audit(1746557534.024:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10627 comm="syz.5.1889" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 268.839531][ T53] usb 2-1: USB disconnect, device number 24 [ 268.991300][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.153594][ T53] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 270.261520][T10709] netlink: 'syz.1.1908': attribute type 6 has an invalid length. [ 270.326267][ T53] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 270.358447][ T53] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 270.372387][ T53] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 270.380830][ T53] usb 6-1: SerialNumber: syz [ 271.164091][ T53] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 271.447316][ T5878] usb 6-1: USB disconnect, device number 3 [ 271.484549][ T5878] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 272.213353][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 272.403356][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 272.418444][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 272.431639][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.451857][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.511737][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.550110][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.607975][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 272.636416][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.899140][ T9] usb 5-1: usb_control_msg returned -32 [ 272.916214][ T9] usbtmc 5-1:16.0: can't read capabilities [ 273.295638][T10799] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 273.304892][ T5878] usb 5-1: USB disconnect, device number 33 [ 275.313283][ T5880] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 275.536216][ T5880] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 275.568109][ T5880] usb 2-1: config 0 has no interface number 0 [ 275.598514][ T5880] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 275.624420][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.652976][ T5880] usb 2-1: config 0 descriptor?? [ 275.677198][ T5880] usb 2-1: selecting invalid altsetting 1 [ 275.715358][ T5880] dvb_ttusb_budget: ttusb_init_controller: error [ 275.732085][ T5880] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 275.900024][ T5880] DVB: Unable to find symbol cx22700_attach() [ 275.951147][ T5880] DVB: Unable to find symbol tda10046_attach() [ 275.957610][ T5880] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 276.007872][ T5880] usb 2-1: USB disconnect, device number 25 [ 276.325152][T10906] netlink: 'syz.5.1954': attribute type 10 has an invalid length. [ 276.353841][T10906] syz_tun: entered promiscuous mode [ 276.380523][T10906] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 277.273677][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 277.459139][ T9] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 277.517624][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.528874][ T9] usb 6-1: Product: syz [ 277.537324][ T9] usb 6-1: Manufacturer: syz [ 277.541948][ T9] usb 6-1: SerialNumber: syz [ 277.584340][ T9] usb 6-1: config 0 descriptor?? [ 278.018741][ T9] usb 6-1: Firmware: major: 108, minor: 98, hardware type: RZUSB (3) [ 278.212014][T10972] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 278.235631][ T9] usb 6-1: no permanent extended address found, random address set [ 278.312169][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1986'. [ 278.462122][ T9] usb 6-1: USB disconnect, device number 4 [ 278.648996][T10991] netlink: 'syz.4.1990': attribute type 4 has an invalid length. [ 278.675431][T10991] netlink: 'syz.4.1990': attribute type 4 has an invalid length. [ 278.684821][T10991] netlink: 'syz.4.1990': attribute type 4 has an invalid length. [ 278.705558][T10991] netlink: 'syz.4.1990': attribute type 4 has an invalid length. [ 278.719899][T10991] netlink: 'syz.4.1990': attribute type 4 has an invalid length. [ 278.733410][T10991] netlink: 'syz.4.1990': attribute type 4 has an invalid length. [ 278.745581][T10991] netlink: 'syz.4.1990': attribute type 4 has an invalid length. [ 278.760946][T10991] netlink: 'syz.4.1990': attribute type 4 has an invalid length. [ 278.770540][T10991] netlink: 'syz.4.1990': attribute type 4 has an invalid length. [ 278.863427][ T5878] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 279.046127][ T5878] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 279.078673][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.106896][ T5878] usb 2-1: config 0 descriptor?? [ 279.131399][ T5878] gspca_main: spca508-2.14.0 probing 8086:0110 [ 279.338431][ T5878] gspca_spca508: reg_read err -32 [ 279.344420][ T5878] gspca_spca508: reg_read err -32 [ 279.350558][ T5878] gspca_spca508: reg_read err -32 [ 279.360289][ T5878] gspca_spca508: reg_read err -32 [ 279.568240][ T5878] gspca_spca508: reg write: error -71 [ 279.593633][ T5878] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 279.605915][ T5878] usb 2-1: USB disconnect, device number 26 [ 280.054238][ T53] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 280.246023][ T53] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.273316][ T53] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 280.313673][ T53] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.363418][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.393818][T11032] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 280.416438][ T53] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.498928][T11055] vivid-001: ================= START STATUS ================= [ 280.509025][T11055] vivid-001: Radio HW Seek Mode: Bounded [ 280.520307][T11055] vivid-001: Radio Programmable HW Seek: false [ 280.530446][T11055] vivid-001: RDS Rx I/O Mode: Block I/O [ 280.545036][T11055] vivid-001: Generate RBDS Instead of RDS: false [ 280.551429][T11055] vivid-001: RDS Reception: true [ 280.584469][T11055] vivid-001: RDS Program Type: 0 inactive [ 280.590345][T11055] vivid-001: RDS PS Name: inactive [ 280.684287][ T5880] usb 1-1: USB disconnect, device number 33 [ 280.706844][T11055] vivid-001: RDS Radio Text: inactive [ 280.753365][T11055] vivid-001: RDS Traffic Announcement: false inactive [ 280.762700][T11055] vivid-001: RDS Traffic Program: false inactive [ 280.804667][T11055] vivid-001: RDS Music: false inactive [ 280.829595][T11055] vivid-001: ================== END STATUS ================== [ 282.083406][ C0] Unknown status report in ack skb [ 282.123337][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 282.303870][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 282.332293][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 282.380282][ T10] usb 4-1: config 0 has no interface number 0 [ 282.393550][ T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 282.424808][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 282.437610][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.453434][ T10] usb 4-1: Product: syz [ 282.459288][ T10] usb 4-1: Manufacturer: syz [ 282.498341][ T10] usb 4-1: SerialNumber: syz [ 282.520816][ T10] usb 4-1: config 0 descriptor?? [ 282.532986][ T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 282.573800][ T10] em28xx 4-1:0.132: Video interface 132 found: [ 282.864527][ T30] audit: type=1326 audit(1746557549.014:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.0.2040" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 282.959482][ T10] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 283.223429][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 283.373690][ T10] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=0) [ 283.392226][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 283.405347][ T10] em28xx 4-1:0.132: board has no eeprom [ 283.422914][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 283.445041][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 283.463872][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.494927][T11126] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 283.514150][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 283.633965][ T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 283.665933][ T10] em28xx 4-1:0.132: analog set to bulk mode. [ 283.672712][ T9] em28xx 4-1:0.132: Registering V4L2 extension [ 283.720156][ T5880] usb 2-1: USB disconnect, device number 27 [ 283.722531][ T10] usb 4-1: USB disconnect, device number 27 [ 283.774827][ T10] em28xx 4-1:0.132: Disconnecting em28xx [ 283.952062][ T9] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 283.959583][ T9] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 283.976768][ T9] em28xx 4-1:0.132: No AC97 audio processor [ 283.990235][ T9] usb 4-1: Decoder not found [ 284.002370][ T9] em28xx 4-1:0.132: failed to create media graph [ 284.019014][ T9] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 284.038444][ T9] em28xx 4-1:0.132: Remote control support is not available for this card. [ 284.063357][ T10] em28xx 4-1:0.132: Closing input extension [ 284.091429][ T10] em28xx 4-1:0.132: Freeing device [ 284.453279][ T5880] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 284.624434][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 284.645586][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.681568][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.714476][ T5880] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 284.743437][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.809193][ T5880] usb 6-1: config 0 descriptor?? [ 285.315162][ T5880] savu 0003:1E7D:2D5A.002B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 285.585701][ T53] usb 6-1: USB disconnect, device number 5 [ 285.638246][T11176] syzkaller1: entered promiscuous mode [ 285.653264][T11176] syzkaller1: entered allmulticast mode [ 286.097903][ T30] audit: type=1326 audit(1746557552.254:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.4.2064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7fc00000 [ 286.143302][ T5880] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 286.322756][ T5880] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 286.362956][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.372612][ T5880] usb 4-1: Product: syz [ 286.377309][ T5880] usb 4-1: Manufacturer: syz [ 286.382090][ T5880] usb 4-1: SerialNumber: syz [ 286.402641][ T5880] usb 4-1: config 0 descriptor?? [ 286.420415][ T5880] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 286.833532][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2070'. [ 286.866210][ T30] audit: type=1326 audit(1746557553.014:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.4.2064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fe3539 code=0x7fc00000 [ 286.904829][ T30] audit: type=1326 audit(1746557553.014:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.4.2064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7fc00000 [ 286.927571][ T30] audit: type=1326 audit(1746557553.014:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.4.2064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7fc00000 [ 286.953282][ T30] audit: type=1326 audit(1746557553.014:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.4.2064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7fc00000 [ 286.974670][T11204] bond1: entered promiscuous mode [ 286.979932][ T30] audit: type=1326 audit(1746557553.014:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.4.2064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7fc00000 [ 287.002872][ T30] audit: type=1326 audit(1746557553.024:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.4.2064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7fc00000 [ 287.021206][T11204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.033366][ T30] audit: type=1326 audit(1746557553.024:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.4.2064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7fc00000 [ 287.082031][ T30] audit: type=1326 audit(1746557553.024:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.4.2064" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7fc00000 [ 287.138051][T11206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.145473][T11206] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 287.157346][T11206] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 287.629646][ T5880] gspca_sunplus: reg_r err -71 [ 287.637812][ T5880] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 287.660344][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 287.660628][ T5880] usb 4-1: USB disconnect, device number 28 [ 287.845962][ T10] usb 5-1: config 0 has no interfaces? [ 287.864519][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.887692][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.910696][ T10] usb 5-1: config 0 descriptor?? [ 287.993407][ T53] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 288.130019][ T5880] usb 5-1: USB disconnect, device number 34 [ 288.184819][ T53] usb 6-1: Using ep0 maxpacket: 32 [ 288.218837][ T53] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 288.248836][ T53] usb 6-1: config 0 has no interface number 0 [ 288.269297][ T53] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 288.298736][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.322569][ T53] usb 6-1: Product: syz [ 288.328899][ T53] usb 6-1: Manufacturer: syz [ 288.337286][ T53] usb 6-1: SerialNumber: syz [ 288.359237][ T53] usb 6-1: config 0 descriptor?? [ 288.367881][ T53] smsc95xx v2.0.0 [ 288.473443][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 288.647858][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 288.678432][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.729032][ T9] usb 4-1: Product: syz [ 288.742697][ T9] usb 4-1: Manufacturer: syz [ 288.768378][ T9] usb 4-1: SerialNumber: syz [ 288.807296][ T9] usb 4-1: config 0 descriptor?? [ 289.229032][ T9] usb 4-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (2) [ 289.252437][ T9] usb 4-1: Firmware version (0.0) predates our first public release. [ 289.280935][ T9] usb 4-1: Please update to version 0.2 or newer [ 289.387504][ T53] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 289.407306][ T53] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 289.435487][ T53] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 289.463523][ T53] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 289.485864][ T53] usb 6-1: USB disconnect, device number 6 [ 289.536311][ T9] usb 4-1: USB disconnect, device number 29 [ 291.460251][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2117'. [ 291.485238][T11314] validate_nla: 43 callbacks suppressed [ 291.485256][T11314] netlink: 'syz.3.2117': attribute type 5 has an invalid length. [ 291.516622][T11314] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.525657][T11314] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.534454][T11314] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.543192][T11314] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.552891][T11314] vxlan0: entered promiscuous mode [ 291.621193][T11321] all: renamed from bridge_slave_0 (while UP) [ 291.702030][T11325] input: syz0 as /devices/virtual/input/input36 [ 292.164265][ T53] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 292.188637][ T53] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 292.597460][T11355] syzkaller1: entered promiscuous mode [ 292.624949][T11355] syzkaller1: entered allmulticast mode [ 292.879824][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2143'. [ 292.953776][ T53] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 293.086074][T11371] bridge0: port 3(macvlan1) entered blocking state [ 293.105780][T11371] bridge0: port 3(macvlan1) entered disabled state [ 293.112505][T11371] macvlan1: entered allmulticast mode [ 293.123673][ T53] usb 2-1: Using ep0 maxpacket: 32 [ 293.126856][T11371] veth1_vlan: entered allmulticast mode [ 293.135256][ T53] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 293.138957][T11371] macvlan1: entered promiscuous mode [ 293.149145][ T53] usb 2-1: config 0 has no interface number 0 [ 293.158952][T11371] bridge0: port 3(macvlan1) entered blocking state [ 293.163394][ T53] usb 2-1: config 0 interface 184 has no altsetting 0 [ 293.166762][T11371] bridge0: port 3(macvlan1) entered forwarding state [ 293.186971][ T53] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 293.193760][T11374] macvlan1: left allmulticast mode [ 293.197771][ T53] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.203299][T11374] veth1_vlan: left allmulticast mode [ 293.220489][ T53] usb 2-1: Product: syz [ 293.228251][ T53] usb 2-1: Manufacturer: syz [ 293.232938][ T53] usb 2-1: SerialNumber: syz [ 293.237677][ T5880] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 293.237764][T11374] macvlan1: left promiscuous mode [ 293.266981][T11374] bridge0: port 3(macvlan1) entered disabled state [ 293.274985][ T53] usb 2-1: config 0 descriptor?? [ 293.287359][ T53] smsc75xx v1.0.0 [ 293.413449][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 293.424279][ T5880] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 293.448108][ T5880] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 293.456714][ T5880] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 293.476327][ T5880] usb 5-1: config 250 has no interface number 0 [ 293.482798][ T5880] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 293.503479][ T5880] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 293.523331][ T5880] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 293.542374][ T5880] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 293.579343][ T5880] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 293.620939][ T5880] usb 5-1: config 250 interface 228 has no altsetting 0 [ 293.635339][ T5880] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 293.647748][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 293.656407][ T5880] usb 5-1: Product: syz [ 293.660621][ T5880] usb 5-1: SerialNumber: syz [ 293.666996][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 293.705840][ T5880] hub 5-1:250.228: bad descriptor, ignoring hub [ 293.719594][ T5880] hub 5-1:250.228: probe with driver hub failed with error -5 [ 293.909781][ T5880] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 35 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 294.133412][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 294.293306][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 294.303002][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2162'. [ 294.308391][ T9] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 294.334539][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.347579][ T9] usb 1-1: Product: syz [ 294.351787][ T9] usb 1-1: Manufacturer: syz [ 294.358120][ T9] usb 1-1: SerialNumber: syz [ 294.369487][ T9] usb 1-1: config 0 descriptor?? [ 294.387551][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 294.497585][T11369] usb 5-1: reset high-speed USB device number 35 using dummy_hcd [ 294.548005][ T53] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 294.563702][ T53] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 294.573434][ T53] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 294.584996][ T53] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 294.594699][ T53] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 294.605080][ T53] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 294.614966][ T53] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 294.631061][ T53] usb 2-1: USB disconnect, device number 28 [ 294.763273][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 294.823309][ T977] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 294.886043][ C1] usblp0: nonzero read bulk status received: -71 [ 294.913232][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 294.920024][ T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.929964][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.940037][ T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 294.950147][ T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.963292][ T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.972369][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.985956][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.997616][ T977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.008008][ T977] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 295.021456][ T977] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.030984][ T977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.042164][ T977] usb 6-1: config 0 descriptor?? [ 295.115351][ T53] usb 5-1: USB disconnect, device number 35 [ 295.143847][ T53] usblp0: removed [ 295.202727][ T10] usb 4-1: GET_CAPABILITIES returned 0 [ 295.208552][ T10] usbtmc 4-1:16.0: can't read capabilities [ 295.418607][ T5881] usb 4-1: USB disconnect, device number 30 [ 295.476522][ T977] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 295.513727][ T977] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 295.600889][ T9] gspca_topro: reg_w err -71 [ 295.643806][ T9] gspca_topro: Sensor soi763a [ 295.663786][ T9] usb 1-1: USB disconnect, device number 34 [ 295.735774][ T5880] usb 6-1: USB disconnect, device number 7 [ 295.745511][ T53] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 295.950385][ T53] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.962499][ T53] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.976484][ T53] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.986343][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.113409][ T977] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 296.202660][T11445] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3939452899 (63031246384 ns) > initial count (46017005824 ns). Using initial count to start timer. [ 296.224646][ T53] usb 2-1: usb_control_msg returned -32 [ 296.233525][ T53] usbtmc 2-1:16.0: can't read capabilities [ 296.310708][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 296.319755][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.344293][ T977] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 296.360483][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.382822][ T977] usb 5-1: config 0 descriptor?? [ 296.809525][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2184'. [ 296.837252][ T977] mcp2221 0003:04D8:00DD.002E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 297.241321][ T977] usb 5-1: USB disconnect, device number 36 [ 297.727710][T11488] syzkaller1: entered promiscuous mode [ 297.734618][T11488] syzkaller1: entered allmulticast mode [ 298.002612][T11500] loop2: detected capacity change from 0 to 7 [ 298.012196][T11500] Dev loop2: unable to read RDB block 7 [ 298.022792][T11500] loop2: AHDI p3 p4 [ 298.023517][T11502] input: syz0 as /devices/virtual/input/input37 [ 298.027375][T11500] loop2: partition table partially beyond EOD, truncated [ 298.193231][T11508] syz.3.2204: attempt to access beyond end of device [ 298.193231][T11508] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 298.507477][ T977] usb 2-1: USB disconnect, device number 29 [ 298.663255][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 298.823312][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 298.829969][ T9] usb 4-1: config 252 has an invalid interface number: 15 but max is 0 [ 298.838535][ T9] usb 4-1: config 252 has no interface number 0 [ 298.844977][ T9] usb 4-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 298.858898][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 298.868790][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.877492][ T9] usb 4-1: Product: syz [ 298.881769][ T9] usb 4-1: Manufacturer: syz [ 298.886445][ T9] usb 4-1: SerialNumber: syz [ 298.921426][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 299.033638][ T977] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 299.114063][ T1110] usb 4-1: Failed to submit usb control message: -71 [ 299.115231][ T9] usb 4-1: USB disconnect, device number 31 [ 299.121049][ T1110] usb 4-1: unable to send the bmi data to the device: -71 [ 299.155365][ T1110] usb 4-1: unable to get target info from device [ 299.177464][ T1110] usb 4-1: could not get target info (-71) [ 299.203272][ T1110] usb 4-1: could not probe fw (-71) [ 299.238243][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 299.256589][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.299514][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.324361][ T977] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 299.335923][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.364643][ T977] usb 2-1: config 0 descriptor?? [ 299.648545][T11562] loop2: detected capacity change from 0 to 7 [ 299.697636][T11562] Dev loop2: unable to read RDB block 7 [ 299.703571][T11562] loop2: unable to read partition table [ 299.719887][T11562] loop2: partition table beyond EOD, truncated [ 299.736377][T11562] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 299.811688][ T977] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.002F/input/input38 [ 299.952169][ T977] appleir 0003:05AC:8241.002F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 300.601448][ T53] usb 2-1: USB disconnect, device number 30 [ 300.813374][ T977] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 300.983208][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 301.000206][ T977] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 301.027979][ T977] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.051519][ T977] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 301.076118][ T977] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.090509][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.108677][ T977] usb 5-1: Product: syz [ 301.123087][ T977] usb 5-1: Manufacturer: syz [ 301.133224][ T977] usb 5-1: SerialNumber: syz [ 301.313305][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 301.463325][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 301.480519][ T9] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 301.499014][ T9] usb 6-1: config 0 has no interface number 0 [ 301.531803][ T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 301.561979][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.580331][ T9] usb 6-1: Product: syz [ 301.590460][ T9] usb 6-1: Manufacturer: syz [ 301.597114][ T9] usb 6-1: SerialNumber: syz [ 301.605185][ T977] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 301.605683][ T9] usb 6-1: config 0 descriptor?? [ 301.632535][ T9] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 301.703275][ T5880] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 301.842225][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 301.859476][ T5880] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.862982][ T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 301.875295][ T5880] usb 4-1: config 0 has no interface number 0 [ 301.894253][ T5880] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 301.909997][ T5880] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 301.921422][ T5880] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 301.971702][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.194381][ T5880] usb 4-1: config 0 descriptor?? [ 302.231031][T11602] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 302.246154][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 302.248594][ T5878] usb 6-1: USB disconnect, device number 8 [ 302.284013][ T5880] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 302.319746][ T5878] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 302.381004][ T5878] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 302.400339][ T5878] quatech2 6-1:0.51: device disconnected [ 302.495510][ T9] usb 4-1: USB disconnect, device number 32 [ 302.501513][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 302.519044][ T977] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 302.582549][ T977] usb 5-1: USB disconnect, device number 37 [ 302.618460][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.827247][T11618] bridge0: port 3(macvlan1) entered blocking state [ 302.838837][T11618] bridge0: port 3(macvlan1) entered disabled state [ 302.846398][T11618] macvlan1: entered allmulticast mode [ 302.852131][T11618] veth1_vlan: entered allmulticast mode [ 302.867758][T11618] macvlan1: entered promiscuous mode [ 302.890392][T11618] macvlan1: left allmulticast mode [ 302.897108][T11618] veth1_vlan: left allmulticast mode [ 302.902482][T11618] macvlan1: left promiscuous mode [ 302.912793][T11618] bridge0: port 3(macvlan1) entered disabled state [ 303.558382][T11635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'. [ 303.873598][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 304.073322][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 304.109516][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 304.118566][ T9] usb 2-1: config 2 has an invalid interface number: 147 but max is 0 [ 304.118676][T11650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2272'. [ 304.135803][ T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 304.180848][ T9] usb 2-1: config 2 has no interface number 0 [ 304.203580][ T9] usb 2-1: config 2 interface 147 has no altsetting 0 [ 304.237860][T11653] bridge0: port 1(macvlan1) entered blocking state [ 304.238308][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=c8.8e [ 304.260404][T11653] bridge0: port 1(macvlan1) entered disabled state [ 304.267004][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.267026][ T9] usb 2-1: Product: syz [ 304.267039][ T9] usb 2-1: Manufacturer: syz [ 304.267053][ T9] usb 2-1: SerialNumber: syz [ 304.293359][T11651] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3939452899 (63031246384 ns) > initial count (46017005824 ns). Using initial count to start timer. [ 304.385060][T11653] macvlan1: entered allmulticast mode [ 304.424786][T11653] veth1_vlan: entered allmulticast mode [ 304.459200][T11653] macvlan1: entered promiscuous mode [ 304.496521][ T9] ims_pcu 2-1:2.147: Missing CDC union descriptor [ 304.508164][T11653] bridge0: port 1(macvlan1) entered blocking state [ 304.514854][T11653] bridge0: port 1(macvlan1) entered forwarding state [ 304.522111][ T9] ims_pcu 2-1:2.147: probe with driver ims_pcu failed with error -22 [ 304.571958][ T9] usb 2-1: USB disconnect, device number 31 [ 304.578124][T11655] macvlan1: left allmulticast mode [ 304.603281][T11655] veth1_vlan: left allmulticast mode [ 304.650430][T11655] macvlan1: left promiscuous mode [ 304.676080][T11655] bridge0: port 1(macvlan1) entered disabled state [ 304.857971][T11667] tipc: Started in network mode [ 304.873452][T11667] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 304.897543][T11667] tipc: Enabled bearer , priority 10 [ 304.934657][T11673] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2268'. [ 304.987503][T11673] tipc: Disabling bearer [ 305.144436][ T5878] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 305.367663][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 305.390866][ T5878] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 305.413567][ T5878] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 305.479728][ T5878] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 305.503495][ T5878] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.537433][ T5878] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 305.572038][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.583779][ T53] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 305.756898][ T53] usb 1-1: Using ep0 maxpacket: 32 [ 305.795982][ T53] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 305.812384][ T5878] usb 6-1: GET_CAPABILITIES returned 0 [ 305.822511][ T5878] usbtmc 6-1:16.0: can't read capabilities [ 305.832673][ T53] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 305.854427][ T53] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 305.875359][ T53] usb 1-1: Product: syz [ 305.888782][ T53] usb 1-1: Manufacturer: syz [ 305.903774][ T53] usb 1-1: SerialNumber: syz [ 305.925424][ T53] usb 1-1: config 0 descriptor?? [ 305.940068][T11683] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 306.018450][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.027876][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.036991][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.046084][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.064448][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.073554][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.082633][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.106944][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.116161][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.125239][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.134318][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.148544][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.157629][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.166688][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.175749][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.200873][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 306.213670][T11683] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 306.228676][ T53] usb 1-1: USB disconnect, device number 35 [ 306.250989][ T10] usb 6-1: USB disconnect, device number 9 [ 306.823566][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 306.997741][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.061881][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.080724][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.097602][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.135646][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.187958][ T10] usb 2-1: config 0 descriptor?? [ 307.611553][ T10] plantronics 0003:047F:FFFF.0030: No inputs registered, leaving [ 307.648422][ T10] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 308.302516][T11763] netlink: 'syz.4.2310': attribute type 10 has an invalid length. [ 308.324787][T11763] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 308.367949][T11763] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 309.685001][ T5881] usb 2-1: USB disconnect, device number 32 [ 309.723373][ T5878] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 309.906430][ T5878] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 309.925594][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.947256][ T5878] usb 5-1: Product: syz [ 309.953192][ T5878] usb 5-1: Manufacturer: syz [ 309.963702][ T5878] usb 5-1: SerialNumber: syz [ 309.979520][ T5878] usb 5-1: config 0 descriptor?? [ 310.113747][ T5880] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 310.293290][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 310.307808][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.338230][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.362230][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 310.375908][ T5880] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 310.385379][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.414376][ T5878] usb 5-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (2) [ 310.428812][ T5878] usb 5-1: Firmware version (0.0) predates our first public release. [ 310.432617][T11829] syzkaller1: entered promiscuous mode [ 310.448593][ T5880] usb 1-1: config 0 descriptor?? [ 310.453854][ T5878] usb 5-1: Please update to version 0.2 or newer [ 310.473288][T11829] syzkaller1: entered allmulticast mode [ 310.491834][T11832] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 310.663370][ T5884] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 310.701578][ T5878] usb 5-1: USB disconnect, device number 38 [ 310.835407][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.858333][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.869514][ T5884] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.883934][ T5880] microsoft 0003:045E:07DA.0031: ignoring exceeding usage max [ 310.889115][ T5884] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.901382][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.928252][ T5880] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0031/input/input39 [ 310.928434][ T5884] usb 6-1: config 0 descriptor?? [ 311.046805][T11844] netlink: 'syz.3.2344': attribute type 11 has an invalid length. [ 311.157648][ T5880] microsoft 0003:045E:07DA.0031: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 311.204024][ T5880] usb 1-1: USB disconnect, device number 36 [ 311.392659][ T5884] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 311.425032][ T5884] plantronics 0003:047F:FFFF.0032: No inputs registered, leaving [ 311.465118][ T5884] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 311.684810][T11853] loop2: detected capacity change from 0 to 7 [ 311.703893][T11853] Dev loop2: unable to read RDB block 7 [ 311.709576][T11853] loop2: unable to read partition table [ 311.739970][T11853] loop2: partition table beyond EOD, truncated [ 311.767032][T11853] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 312.093358][ T5878] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 312.276424][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 312.291798][ T5878] usb 1-1: config 0 has no interfaces? [ 312.302770][ T5878] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 312.326127][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.350064][ T5878] usb 1-1: config 0 descriptor?? [ 312.421787][T11873] tipc: Enabled bearer , priority 10 [ 312.583733][T11858] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2350'. [ 312.601694][ T5884] usb 1-1: USB disconnect, device number 37 [ 312.724567][ T977] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 312.864517][ T5881] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 312.883358][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 312.890401][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.901912][ T5878] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 312.909864][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.920172][ T977] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 312.930203][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.941184][ T977] usb 4-1: config 0 descriptor?? [ 312.950026][ T977] hub 4-1:0.0: USB hub found [ 313.003757][ T5881] usb 6-1: device descriptor read/64, error -32 [ 313.073230][ T5878] usb 5-1: Using ep0 maxpacket: 8 [ 313.080397][ T5878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.091707][ T5878] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 313.101268][ T5880] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 313.109026][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.124597][ T5878] usb 5-1: config 0 descriptor?? [ 313.150847][ T977] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 313.243338][ T5881] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 313.282905][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.297203][ T5880] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.313060][ T5880] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 313.323456][ T5880] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 313.333678][ T5880] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.362593][ T5880] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 313.373276][ T5881] usb 6-1: device descriptor read/64, error -32 [ 313.374233][ T5878] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 313.404169][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.413699][ T5880] usb 2-1: Product: syz [ 313.417895][ T5880] usb 2-1: Manufacturer: syz [ 313.422520][ T5880] usb 2-1: SerialNumber: syz [ 313.555095][ T5878] tipc: Node number set to 43690 [ 313.574730][ T977] hid-generic 0003:046D:C31C.0033: item fetching failed at offset 0/1 [ 313.585388][ T977] hid-generic 0003:046D:C31C.0033: probe with driver hid-generic failed with error -22 [ 313.589569][T11896] netlink: 'syz.0.2366': attribute type 10 has an invalid length. [ 313.613544][ T5881] usb 6-1: reset high-speed USB device number 10 using dummy_hcd [ 313.631798][T11896] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 313.653793][ T5881] usb 6-1: device descriptor read/8, error -32 [ 313.903615][ T977] usb 4-1: USB disconnect, device number 33 [ 313.943764][ T10] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 314.096459][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 314.105029][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 314.116356][ T10] usb 1-1: config 0 has no interface number 0 [ 314.125080][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 314.134425][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.142447][ T10] usb 1-1: Product: syz [ 314.147387][ T10] usb 1-1: Manufacturer: syz [ 314.152024][ T10] usb 1-1: SerialNumber: syz [ 314.159324][ T10] usb 1-1: config 0 descriptor?? [ 314.171022][ T10] smsc95xx v2.0.0 [ 314.473015][ T5880] cdc_mbim 2-1:1.0: bind() failure [ 314.496626][ T5880] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 314.507510][ T5880] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 314.517937][ T5880] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 314.537082][ T5884] usb 6-1: USB disconnect, device number 10 [ 314.547721][ T5880] usb 2-1: USB disconnect, device number 33 [ 315.396522][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 315.426227][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 315.446701][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 315.472067][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 315.544718][ T10] usb 1-1: USB disconnect, device number 38 [ 315.703013][ T5884] usb 5-1: USB disconnect, device number 39 [ 316.063205][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 316.063222][ T30] audit: type=1326 audit(1746557582.214:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 316.176660][ T30] audit: type=1326 audit(1746557582.214:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 316.204413][ T30] audit: type=1326 audit(1746557582.224:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 316.226668][ T30] audit: type=1326 audit(1746557582.224:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 316.290145][ T30] audit: type=1326 audit(1746557582.224:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 316.354595][ T30] audit: type=1326 audit(1746557582.224:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 316.384946][ T30] audit: type=1326 audit(1746557582.224:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 316.414152][ T30] audit: type=1326 audit(1746557582.224:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 316.447551][ T30] audit: type=1326 audit(1746557582.224:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 316.509859][ T30] audit: type=1326 audit(1746557582.224:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11955 comm="syz.4.2391" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3539 code=0x7ffc0000 [ 317.121912][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.128543][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.223626][ T977] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 317.376687][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.389001][ T977] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 317.398413][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.409919][ T977] usb 5-1: config 0 descriptor?? [ 317.419583][ T977] pwc: Askey VC010 type 2 USB webcam detected. [ 318.022323][ T977] pwc: recv_control_msg error -32 req 02 val 2700 [ 318.031264][ T977] pwc: recv_control_msg error -71 req 02 val 2c00 [ 318.039672][ T977] pwc: recv_control_msg error -71 req 04 val 1000 [ 318.046529][ T977] pwc: recv_control_msg error -71 req 04 val 1300 [ 318.053383][ T977] pwc: recv_control_msg error -71 req 04 val 1400 [ 318.060153][ T977] pwc: recv_control_msg error -71 req 02 val 2000 [ 318.066999][ T977] pwc: recv_control_msg error -71 req 02 val 2100 [ 318.076891][ T977] pwc: recv_control_msg error -71 req 04 val 1500 [ 318.083857][ T977] pwc: recv_control_msg error -71 req 02 val 2500 [ 318.090666][ T977] pwc: recv_control_msg error -71 req 02 val 2400 [ 318.098490][ T977] pwc: recv_control_msg error -71 req 02 val 2600 [ 318.105344][ T977] pwc: recv_control_msg error -71 req 02 val 2900 [ 318.112065][ T977] pwc: recv_control_msg error -71 req 02 val 2800 [ 318.119181][ T977] pwc: recv_control_msg error -71 req 04 val 1100 [ 318.125910][ T977] pwc: recv_control_msg error -71 req 04 val 1200 [ 318.134424][ T977] pwc: Registered as video103. [ 318.141822][ T977] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40 [ 318.167981][ T977] usb 5-1: USB disconnect, device number 40 [ 318.842815][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2413'. [ 319.845977][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2435'. [ 319.883216][ T977] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 319.973302][ T5884] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 320.003218][ T5880] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 320.063350][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 320.070105][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.103213][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.133419][ T977] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 320.142571][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.145145][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 320.183324][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 320.197015][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 320.199012][ T5880] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.224098][ T977] usb 4-1: config 0 descriptor?? [ 320.227773][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 320.252954][ T977] hub 4-1:0.0: USB hub found [ 320.262745][ T5884] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 320.278685][ T5880] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.287226][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.298011][ T5880] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 320.309068][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.327340][ T5884] usb 6-1: Product: syz [ 320.331541][ T5884] usb 6-1: Manufacturer: syz [ 320.339945][ T5880] usb 1-1: config 0 descriptor?? [ 320.343598][ T5884] usb 6-1: SerialNumber: syz [ 320.371359][ T5884] usb 6-1: config 0 descriptor?? [ 320.461286][ T977] hub 4-1:0.0: 1 port detected [ 320.483235][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 320.608531][ T5884] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 320.643477][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 320.660929][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 320.687483][ T9] usb 2-1: config 0 has no interface number 0 [ 320.704121][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 320.728859][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 320.742183][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.751508][ T9] usb 2-1: Product: syz [ 320.757576][ T9] usb 2-1: Manufacturer: syz [ 320.767957][ T5880] HID 045e:07da: Invalid code 65791 type 1 [ 320.768331][ T9] usb 2-1: SerialNumber: syz [ 320.788360][ T9] usb 2-1: config 0 descriptor?? [ 320.805890][ T5880] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0034/input/input41 [ 320.818366][ T9] smsc75xx v1.0.0 [ 320.843675][ T5880] microsoft 0003:045E:07DA.0034: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 320.875287][ T10] usb 6-1: USB disconnect, device number 11 [ 321.088100][ T5880] hub 4-1:0.0: activate --> -90 [ 321.491128][ T10] usb 4-1: USB disconnect, device number 34 [ 321.579872][T12080] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2442'. [ 321.637278][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 321.648675][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 321.670825][ T5880] usb 1-1: USB disconnect, device number 39 [ 321.859766][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 321.881945][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 321.892833][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 321.905116][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 321.928426][ T9] usb 2-1: USB disconnect, device number 34 [ 322.033369][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 322.166688][T12094] [ 322.169072][T12094] ===================================================== [ 322.176024][T12094] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 322.183506][T12094] 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 Not tainted [ 322.190625][T12094] ----------------------------------------------------- [ 322.197551][T12094] syz.3.2450/12094 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 322.205268][T12094] ffff88805cc98210 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 322.213976][T12094] [ 322.213976][T12094] and this task is already holding: [ 322.221516][T12094] ffff8880291fc028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 322.231315][T12094] which would create a new lock dependency: [ 322.237225][T12094] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 322.245355][T12094] [ 322.245355][T12094] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 322.254811][T12094] (&dev->event_lock#2){..-.}-{3:3} [ 322.254856][T12094] [ 322.254856][T12094] ... which became SOFTIRQ-irq-safe at: [ 322.267754][T12094] lock_acquire+0x120/0x360 [ 322.272355][T12094] _raw_spin_lock_irqsave+0xa7/0xf0 [ 322.277665][T12094] input_event+0x7a/0xc0 [ 322.282002][T12094] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 322.287727][T12094] __usb_hcd_giveback_urb+0x417/0x690 [ 322.293196][T12094] dummy_timer+0x862/0x4550 [ 322.297801][T12094] __hrtimer_run_queues+0x529/0xc60 [ 322.303105][T12094] hrtimer_run_softirq+0x187/0x2b0 [ 322.308341][T12094] handle_softirqs+0x283/0x870 [ 322.313198][T12094] __irq_exit_rcu+0xca/0x1f0 [ 322.317881][T12094] irq_exit_rcu+0x9/0x30 [ 322.322244][T12094] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 322.327976][T12094] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.334062][T12094] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 322.339897][T12094] dummy_urb_enqueue+0x58a/0x780 [ 322.344940][T12094] usb_hcd_submit_urb+0x322/0x1aa0 [ 322.350156][T12094] atp_open+0x63/0xc0 [ 322.354236][T12094] input_open_device+0x1c2/0x360 [ 322.359268][T12094] mousedev_open_device+0xcc/0x150 [ 322.364506][T12094] mousedev_open+0x2ec/0x4a0 [ 322.369192][T12094] chrdev_open+0x4c9/0x5e0 [ 322.373715][T12094] do_dentry_open+0xdf0/0x1970 [ 322.378585][T12094] vfs_open+0x3b/0x340 [ 322.382753][T12094] path_openat+0x2ee5/0x3830 [ 322.387432][T12094] do_filp_open+0x1fa/0x410 [ 322.392023][T12094] do_sys_openat2+0x121/0x1c0 [ 322.396801][T12094] __x64_sys_openat+0x138/0x170 [ 322.401747][T12094] do_syscall_64+0xf6/0x210 [ 322.406343][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.412356][T12094] [ 322.412356][T12094] to a SOFTIRQ-irq-unsafe lock: [ 322.419364][T12094] (tasklist_lock){.+.+}-{3:3} [ 322.419392][T12094] [ 322.419392][T12094] ... which became SOFTIRQ-irq-unsafe at: [ 322.432002][T12094] ... [ 322.432010][T12094] lock_acquire+0x120/0x360 [ 322.439173][T12094] _raw_read_lock+0x36/0x50 [ 322.443758][T12094] __do_wait+0xde/0x740 [ 322.448003][T12094] do_wait+0x1f8/0x520 [ 322.452178][T12094] kernel_wait+0xab/0x170 [ 322.456587][T12094] call_usermodehelper_exec_work+0xbe/0x230 [ 322.462564][T12094] process_scheduled_works+0xadb/0x17a0 [ 322.468196][T12094] worker_thread+0x8a0/0xda0 [ 322.472872][T12094] kthread+0x70e/0x8a0 [ 322.477026][T12094] ret_from_fork+0x4b/0x80 [ 322.481528][T12094] ret_from_fork_asm+0x1a/0x30 [ 322.486376][T12094] [ 322.486376][T12094] other info that might help us debug this: [ 322.486376][T12094] [ 322.496691][T12094] Chain exists of: [ 322.496691][T12094] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 322.496691][T12094] [ 322.510269][T12094] Possible interrupt unsafe locking scenario: [ 322.510269][T12094] [ 322.518590][T12094] CPU0 CPU1 [ 322.523958][T12094] ---- ---- [ 322.529324][T12094] lock(tasklist_lock); [ 322.533572][T12094] local_irq_disable(); [ 322.540322][T12094] lock(&dev->event_lock#2); [ 322.547534][T12094] lock(&client->buffer_lock); [ 322.554923][T12094] [ 322.558376][T12094] lock(&dev->event_lock#2); [ 322.563239][T12094] [ 322.563239][T12094] *** DEADLOCK *** [ 322.563239][T12094] [ 322.571380][T12094] 7 locks held by syz.3.2450/12094: [ 322.576573][T12094] #0: ffff8881477f1118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 322.585754][T12094] #1: ffff888141f80230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 322.595866][T12094] #2: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 322.605544][T12094] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 322.615127][T12094] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 322.624276][T12094] #5: ffff8880291fc028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 322.634462][T12094] #6: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 322.643505][T12094] [ 322.643505][T12094] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 322.653895][T12094] -> (&dev->event_lock#2){..-.}-{3:3} { [ 322.659547][T12094] IN-SOFTIRQ-W at: [ 322.663609][T12094] lock_acquire+0x120/0x360 [ 322.669952][T12094] _raw_spin_lock_irqsave+0xa7/0xf0 [ 322.676973][T12094] input_event+0x7a/0xc0 [ 322.683034][T12094] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 322.690501][T12094] __usb_hcd_giveback_urb+0x417/0x690 [ 322.697698][T12094] dummy_timer+0x862/0x4550 [ 322.704052][T12094] __hrtimer_run_queues+0x529/0xc60 [ 322.711097][T12094] hrtimer_run_softirq+0x187/0x2b0 [ 322.718066][T12094] handle_softirqs+0x283/0x870 [ 322.724659][T12094] __irq_exit_rcu+0xca/0x1f0 [ 322.731068][T12094] irq_exit_rcu+0x9/0x30 [ 322.737131][T12094] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 322.744580][T12094] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 322.752375][T12094] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 322.759929][T12094] dummy_urb_enqueue+0x58a/0x780 [ 322.766693][T12094] usb_hcd_submit_urb+0x322/0x1aa0 [ 322.773626][T12094] atp_open+0x63/0xc0 [ 322.779429][T12094] input_open_device+0x1c2/0x360 [ 322.786190][T12094] mousedev_open_device+0xcc/0x150 [ 322.793130][T12094] mousedev_open+0x2ec/0x4a0 [ 322.799545][T12094] chrdev_open+0x4c9/0x5e0 [ 322.805788][T12094] do_dentry_open+0xdf0/0x1970 [ 322.812377][T12094] vfs_open+0x3b/0x340 [ 322.818271][T12094] path_openat+0x2ee5/0x3830 [ 322.824683][T12094] do_filp_open+0x1fa/0x410 [ 322.831011][T12094] do_sys_openat2+0x121/0x1c0 [ 322.837525][T12094] __x64_sys_openat+0x138/0x170 [ 322.844207][T12094] do_syscall_64+0xf6/0x210 [ 322.850547][T12094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.858263][T12094] INITIAL USE at: [ 322.862242][T12094] lock_acquire+0x120/0x360 [ 322.868484][T12094] _raw_spin_lock_irqsave+0xa7/0xf0 [ 322.875438][T12094] input_inject_event+0xab/0x320 [ 322.882132][T12094] kbd_led_trigger_activate+0xbc/0x100 [ 322.889344][T12094] led_trigger_set+0x52a/0x950 [ 322.895856][T12094] led_trigger_set_default+0x215/0x250 [ 322.903065][T12094] led_classdev_register_ext+0x73d/0x930 [ 322.910448][T12094] input_leds_connect+0x517/0x790 [ 322.917219][T12094] input_register_device+0xceb/0x10b0 [ 322.924348][T12094] atkbd_connect+0x70e/0x9c0 [ 322.930726][T12094] serio_driver_probe+0x7f/0xa0 [ 322.937337][T12094] really_probe+0x26a/0x9a0 [ 322.943588][T12094] __driver_probe_device+0x18c/0x2f0 [ 322.950628][T12094] driver_probe_device+0x4f/0x430 [ 322.957423][T12094] __driver_attach+0x452/0x700 [ 322.963928][T12094] bus_for_each_dev+0x230/0x2b0 [ 322.970525][T12094] serio_handle_event+0x1a2/0x860 [ 322.977295][T12094] process_scheduled_works+0xadb/0x17a0 [ 322.984596][T12094] worker_thread+0x8a0/0xda0 [ 322.990931][T12094] kthread+0x70e/0x8a0 [ 322.996746][T12094] ret_from_fork+0x4b/0x80 [ 323.002920][T12094] ret_from_fork_asm+0x1a/0x30 [ 323.009431][T12094] } [ 323.012026][T12094] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 323.021159][T12094] -> (&client->buffer_lock){....}-{3:3} { [ 323.026906][T12094] INITIAL USE at: [ 323.030813][T12094] lock_acquire+0x120/0x360 [ 323.036899][T12094] _raw_spin_lock+0x2e/0x40 [ 323.042969][T12094] evdev_pass_values+0xb9/0xbd0 [ 323.049399][T12094] evdev_events+0x1e6/0x340 [ 323.055486][T12094] input_pass_values+0x285/0x890 [ 323.062012][T12094] input_event_dispose+0x330/0x6b0 [ 323.068694][T12094] input_inject_event+0x1fe/0x320 [ 323.075287][T12094] evdev_write+0x2fc/0x480 [ 323.081277][T12094] vfs_write+0x27b/0xa90 [ 323.087084][T12094] ksys_write+0x145/0x250 [ 323.093002][T12094] __do_fast_syscall_32+0xb4/0x110 [ 323.099688][T12094] do_fast_syscall_32+0x34/0x80 [ 323.106106][T12094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.114004][T12094] } [ 323.116496][T12094] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 323.124653][T12094] ... acquired at: [ 323.128449][T12094] lock_acquire+0x120/0x360 [ 323.133133][T12094] _raw_spin_lock+0x2e/0x40 [ 323.137811][T12094] evdev_pass_values+0xb9/0xbd0 [ 323.142841][T12094] evdev_events+0x1e6/0x340 [ 323.147520][T12094] input_pass_values+0x285/0x890 [ 323.152632][T12094] input_event_dispose+0x330/0x6b0 [ 323.157917][T12094] input_inject_event+0x1fe/0x320 [ 323.163118][T12094] evdev_write+0x2fc/0x480 [ 323.167714][T12094] vfs_write+0x27b/0xa90 [ 323.172128][T12094] ksys_write+0x145/0x250 [ 323.176631][T12094] __do_fast_syscall_32+0xb4/0x110 [ 323.181928][T12094] do_fast_syscall_32+0x34/0x80 [ 323.186957][T12094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.193465][T12094] [ 323.195788][T12094] [ 323.195788][T12094] the dependencies between the lock to be acquired [ 323.195798][T12094] and SOFTIRQ-irq-unsafe lock: [ 323.209303][T12094] -> (tasklist_lock){.+.+}-{3:3} { [ 323.214610][T12094] HARDIRQ-ON-R at: [ 323.218763][T12094] lock_acquire+0x120/0x360 [ 323.225277][T12094] _raw_read_lock+0x36/0x50 [ 323.231778][T12094] __do_wait+0xde/0x740 [ 323.237939][T12094] do_wait+0x1f8/0x520 [ 323.244015][T12094] kernel_wait+0xab/0x170 [ 323.250348][T12094] call_usermodehelper_exec_work+0xbe/0x230 [ 323.258246][T12094] process_scheduled_works+0xadb/0x17a0 [ 323.265830][T12094] worker_thread+0x8a0/0xda0 [ 323.272415][T12094] kthread+0x70e/0x8a0 [ 323.278484][T12094] ret_from_fork+0x4b/0x80 [ 323.284896][T12094] ret_from_fork_asm+0x1a/0x30 [ 323.291659][T12094] SOFTIRQ-ON-R at: [ 323.295817][T12094] lock_acquire+0x120/0x360 [ 323.302331][T12094] _raw_read_lock+0x36/0x50 [ 323.308837][T12094] __do_wait+0xde/0x740 [ 323.314996][T12094] do_wait+0x1f8/0x520 [ 323.321067][T12094] kernel_wait+0xab/0x170 [ 323.327402][T12094] call_usermodehelper_exec_work+0xbe/0x230 [ 323.335311][T12094] process_scheduled_works+0xadb/0x17a0 [ 323.342865][T12094] worker_thread+0x8a0/0xda0 [ 323.349450][T12094] kthread+0x70e/0x8a0 [ 323.355518][T12094] ret_from_fork+0x4b/0x80 [ 323.362013][T12094] ret_from_fork_asm+0x1a/0x30 [ 323.368772][T12094] INITIAL USE at: [ 323.372841][T12094] lock_acquire+0x120/0x360 [ 323.379258][T12094] _raw_write_lock_irq+0xa2/0xf0 [ 323.386121][T12094] copy_process+0x21d5/0x3b80 [ 323.392718][T12094] kernel_clone+0x21e/0x870 [ 323.399141][T12094] user_mode_thread+0xdd/0x140 [ 323.405827][T12094] rest_init+0x23/0x300 [ 323.411897][T12094] start_kernel+0x470/0x4f0 [ 323.418309][T12094] x86_64_start_reservations+0x2a/0x30 [ 323.425692][T12094] x86_64_start_kernel+0x66/0x70 [ 323.432549][T12094] common_startup_64+0x13e/0x147 [ 323.439409][T12094] INITIAL READ USE at: [ 323.443924][T12094] lock_acquire+0x120/0x360 [ 323.450779][T12094] _raw_read_lock+0x36/0x50 [ 323.457641][T12094] __do_wait+0xde/0x740 [ 323.464148][T12094] do_wait+0x1f8/0x520 [ 323.470559][T12094] kernel_wait+0xab/0x170 [ 323.477248][T12094] call_usermodehelper_exec_work+0xbe/0x230 [ 323.485487][T12094] process_scheduled_works+0xadb/0x17a0 [ 323.493383][T12094] worker_thread+0x8a0/0xda0 [ 323.500312][T12094] kthread+0x70e/0x8a0 [ 323.506726][T12094] ret_from_fork+0x4b/0x80 [ 323.513486][T12094] ret_from_fork_asm+0x1a/0x30 [ 323.520610][T12094] } [ 323.523291][T12094] ... key at: [] tasklist_lock+0x18/0x40 [ 323.531221][T12094] ... acquired at: [ 323.535200][T12094] lock_acquire+0x120/0x360 [ 323.539897][T12094] _raw_read_lock+0x36/0x50 [ 323.544582][T12094] send_sigurg+0x12b/0x420 [ 323.549186][T12094] sk_send_sigurg+0x6c/0x2e0 [ 323.553975][T12094] queue_oob+0x3d9/0x4e0 [ 323.558395][T12094] unix_stream_sendmsg+0xa41/0xb60 [ 323.563688][T12094] __sock_sendmsg+0x219/0x270 [ 323.568548][T12094] ____sys_sendmsg+0x52d/0x830 [ 323.573491][T12094] ___sys_sendmsg+0x21f/0x2a0 [ 323.578347][T12094] __sys_sendmmsg+0x28e/0x430 [ 323.583202][T12094] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 323.588923][T12094] __do_fast_syscall_32+0xb4/0x110 [ 323.594409][T12094] do_fast_syscall_32+0x34/0x80 [ 323.599440][T12094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.605949][T12094] [ 323.608271][T12094] -> (&f_owner->lock){....}-{3:3} { [ 323.613576][T12094] INITIAL USE at: [ 323.617638][T12094] lock_acquire+0x120/0x360 [ 323.623881][T12094] _raw_write_lock_irq+0xa2/0xf0 [ 323.630551][T12094] __f_setown+0x67/0x370 [ 323.636546][T12094] fcntl_dirnotify+0x3d6/0x690 [ 323.643141][T12094] do_fcntl+0x6c7/0x1910 [ 323.649123][T12094] do_compat_fcntl64+0x484/0x720 [ 323.655812][T12094] __do_fast_syscall_32+0xb4/0x110 [ 323.662665][T12094] do_fast_syscall_32+0x34/0x80 [ 323.669255][T12094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.677326][T12094] INITIAL READ USE at: [ 323.681744][T12094] lock_acquire+0x120/0x360 [ 323.688423][T12094] _raw_read_lock_irqsave+0xaf/0x100 [ 323.695873][T12094] send_sigio+0x38/0x370 [ 323.702290][T12094] dnotify_handle_event+0x169/0x440 [ 323.709745][T12094] fsnotify+0x1814/0x1a80 [ 323.716255][T12094] vfs_mkdir+0x477/0x510 [ 323.722683][T12094] do_mkdirat+0x247/0x590 [ 323.729178][T12094] __ia32_sys_mkdirat+0x87/0xa0 [ 323.736196][T12094] __do_fast_syscall_32+0xb4/0x110 [ 323.743494][T12094] do_fast_syscall_32+0x34/0x80 [ 323.750519][T12094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.759036][T12094] } [ 323.761616][T12094] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 323.770565][T12094] ... acquired at: [ 323.774459][T12094] lock_acquire+0x120/0x360 [ 323.779145][T12094] _raw_read_lock_irqsave+0xaf/0x100 [ 323.784606][T12094] send_sigio+0x38/0x370 [ 323.789031][T12094] kill_fasync+0x24d/0x4d0 [ 323.793619][T12094] lease_break_callback+0x26/0x30 [ 323.798814][T12094] __break_lease+0x6a2/0x1620 [ 323.803675][T12094] do_dentry_open+0xd62/0x1970 [ 323.808614][T12094] vfs_open+0x3b/0x340 [ 323.812858][T12094] path_openat+0x2ee5/0x3830 [ 323.817619][T12094] do_filp_open+0x1fa/0x410 [ 323.822291][T12094] do_sys_openat2+0x121/0x1c0 [ 323.827143][T12094] __ia32_compat_sys_open+0x117/0x140 [ 323.832704][T12094] __do_fast_syscall_32+0xb4/0x110 [ 323.837993][T12094] do_fast_syscall_32+0x34/0x80 [ 323.843013][T12094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.849510][T12094] [ 323.851842][T12094] -> (&new->fa_lock){....}-{3:3} { [ 323.856989][T12094] INITIAL USE at: [ 323.860880][T12094] lock_acquire+0x120/0x360 [ 323.866953][T12094] _raw_write_lock_irq+0xa2/0xf0 [ 323.873454][T12094] fasync_remove_entry+0xf1/0x1c0 [ 323.880056][T12094] sock_fasync+0x85/0xf0 [ 323.885869][T12094] __fput+0x89f/0xa70 [ 323.891419][T12094] task_work_run+0x1d1/0x260 [ 323.897574][T12094] resume_user_mode_work+0x5e/0x80 [ 323.904265][T12094] syscall_exit_to_user_mode+0x9a/0x120 [ 323.911379][T12094] __do_fast_syscall_32+0xc1/0x110 [ 323.918059][T12094] do_fast_syscall_32+0x34/0x80 [ 323.924478][T12094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.932390][T12094] INITIAL READ USE at: [ 323.936716][T12094] lock_acquire+0x120/0x360 [ 323.943213][T12094] _raw_read_lock_irqsave+0xaf/0x100 [ 323.950519][T12094] kill_fasync+0x199/0x4d0 [ 323.956944][T12094] sock_wake_async+0x137/0x160 [ 323.963714][T12094] unix_write_space+0x3bb/0x470 [ 323.970567][T12094] sock_wfree+0x1d0/0x7a0 [ 323.976895][T12094] unix_destruct_scm+0x150/0x1a0 [ 323.983850][T12094] skb_release_head_state+0xfe/0x250 [ 323.991140][T12094] sk_skb_reason_drop+0xe9/0x170 [ 323.998077][T12094] skb_queue_purge_reason+0x2c8/0x360 [ 324.005438][T12094] unix_dgram_connect+0x5dd/0xd30 [ 324.012459][T12094] __sys_connect+0x313/0x440 [ 324.019060][T12094] __ia32_sys_connect+0x7a/0x90 [ 324.025917][T12094] __do_fast_syscall_32+0xb4/0x110 [ 324.033032][T12094] do_fast_syscall_32+0x34/0x80 [ 324.039885][T12094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.048230][T12094] } [ 324.050729][T12094] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 324.059410][T12094] ... acquired at: [ 324.063204][T12094] lock_acquire+0x120/0x360 [ 324.067879][T12094] _raw_read_lock_irqsave+0xaf/0x100 [ 324.073337][T12094] kill_fasync+0x199/0x4d0 [ 324.077923][T12094] evdev_pass_values+0x627/0xbd0 [ 324.083039][T12094] evdev_events+0x1e6/0x340 [ 324.087718][T12094] input_pass_values+0x285/0x890 [ 324.092826][T12094] input_event_dispose+0x330/0x6b0 [ 324.098103][T12094] input_inject_event+0x1fe/0x320 [ 324.103299][T12094] evdev_write+0x2fc/0x480 [ 324.107895][T12094] vfs_write+0x27b/0xa90 [ 324.112316][T12094] ksys_write+0x145/0x250 [ 324.116832][T12094] __do_fast_syscall_32+0xb4/0x110 [ 324.122118][T12094] do_fast_syscall_32+0x34/0x80 [ 324.127145][T12094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.133652][T12094] [ 324.135978][T12094] [ 324.135978][T12094] stack backtrace: [ 324.141868][T12094] CPU: 0 UID: 0 PID: 12094 Comm: syz.3.2450 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 324.141888][T12094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 324.141914][T12094] Call Trace: [ 324.141922][T12094] [ 324.141930][T12094] dump_stack_lvl+0x189/0x250 [ 324.141956][T12094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.141979][T12094] ? __pfx__printk+0x10/0x10 [ 324.141998][T12094] validate_chain+0x1f05/0x2140 [ 324.142021][T12094] __lock_acquire+0xaac/0xd20 [ 324.142044][T12094] ? kill_fasync+0x199/0x4d0 [ 324.142057][T12094] lock_acquire+0x120/0x360 [ 324.142078][T12094] ? kill_fasync+0x199/0x4d0 [ 324.142091][T12094] ? __lock_acquire+0xaac/0xd20 [ 324.142115][T12094] _raw_read_lock_irqsave+0xaf/0x100 [ 324.142131][T12094] ? kill_fasync+0x199/0x4d0 [ 324.142144][T12094] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 324.142159][T12094] ? do_raw_spin_lock+0x121/0x290 [ 324.142179][T12094] kill_fasync+0x199/0x4d0 [ 324.142192][T12094] ? kill_fasync+0x53/0x4d0 [ 324.142206][T12094] evdev_pass_values+0x627/0xbd0 [ 324.142231][T12094] ? evdev_pass_values+0x661/0xbd0 [ 324.142256][T12094] evdev_events+0x1e6/0x340 [ 324.142277][T12094] ? evdev_events+0x79/0x340 [ 324.142298][T12094] ? input_pass_values+0x8d/0x890 [ 324.142319][T12094] input_pass_values+0x285/0x890 [ 324.142343][T12094] ? input_handle_event+0x70c/0xf30 [ 324.142362][T12094] input_event_dispose+0x330/0x6b0 [ 324.142381][T12094] input_inject_event+0x1fe/0x320 [ 324.142399][T12094] ? input_inject_event+0xbc/0x320 [ 324.142417][T12094] evdev_write+0x2fc/0x480 [ 324.142441][T12094] ? __pfx_evdev_write+0x10/0x10 [ 324.142464][T12094] ? bpf_lsm_file_permission+0x9/0x20 [ 324.142484][T12094] ? security_file_permission+0x75/0x290 [ 324.142508][T12094] ? rw_verify_area+0x258/0x650 [ 324.142524][T12094] ? __pfx_evdev_write+0x10/0x10 [ 324.142546][T12094] vfs_write+0x27b/0xa90 [ 324.142565][T12094] ? __pfx_vfs_write+0x10/0x10 [ 324.142582][T12094] ? __fget_files+0x2a/0x420 [ 324.142603][T12094] ? __fget_files+0x2a/0x420 [ 324.142622][T12094] ? __fget_files+0x3a0/0x420 [ 324.142641][T12094] ? __fget_files+0x2a/0x420 [ 324.142665][T12094] ksys_write+0x145/0x250 [ 324.142681][T12094] ? rcu_is_watching+0x15/0xb0 [ 324.142705][T12094] ? __pfx_ksys_write+0x10/0x10 [ 324.142722][T12094] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 324.142742][T12094] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.142759][T12094] __do_fast_syscall_32+0xb4/0x110 [ 324.142779][T12094] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.142797][T12094] do_fast_syscall_32+0x34/0x80 [ 324.142816][T12094] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 324.142835][T12094] RIP: 0023:0xf7fa6539 [ 324.142849][T12094] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 324.142862][T12094] RSP: 002b:00000000f50c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 324.142879][T12094] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 324.142890][T12094] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 324.142905][T12094] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 324.142914][T12094] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 324.142924][T12094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.142939][T12094] [ 324.472173][ C0] vkms_vblank_simulate: vblank timer overrun [ 324.553245][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 324.559769][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 324.574216][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 324.586051][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.600665][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 324.609760][ T10] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 324.618170][ T10] usb 6-1: Product: syz [ 324.622356][ T10] usb 6-1: Manufacturer: syz [ 324.627035][ T10] usb 6-1: SerialNumber: syz [ 324.637731][ T10] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input42 [ 324.792902][ T53] usb 6-1: USB disconnect, device number 12 [ 324.801561][ T53] appletouch 6-1:1.0: input: appletouch disconnected