last executing test programs: 13m44.60398772s ago: executing program 0 (id=12414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000082}]}) 13m44.324723295s ago: executing program 0 (id=12419): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3412, 0x13100, 0x2, 0x4, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x2def, 0x9566, 0x0, 0x0, 0x0) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 13m44.084036558s ago: executing program 0 (id=12422): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000240)=0x3, 0x4) 13m43.939978096s ago: executing program 0 (id=12423): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 13m42.971743397s ago: executing program 0 (id=12433): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) 13m42.212106712s ago: executing program 0 (id=12440): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) sendto$inet6(r0, &(0x7f0000001240)="b6", 0x1, 0x24000000, &(0x7f0000000280)={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x85}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x0, 0x30}, &(0x7f0000000240)=0xc) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 13m41.858460825s ago: executing program 32 (id=12440): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) sendto$inet6(r0, &(0x7f0000001240)="b6", 0x1, 0x24000000, &(0x7f0000000280)={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x85}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x0, 0x30}, &(0x7f0000000240)=0xc) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 8m34.471698952s ago: executing program 4 (id=15465): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0x3}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x5}, {}, {}, @result}], 0x1c) 8m34.346503098s ago: executing program 4 (id=15468): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000300)={@host, 0x6}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000200)={@host, 0x5}) 8m34.10151687s ago: executing program 4 (id=15472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x1, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c054}, 0x404c094) 8m33.818021643s ago: executing program 4 (id=15476): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 8m32.789203789s ago: executing program 4 (id=15492): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) socket$isdn(0x22, 0x2, 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 8m32.411162324s ago: executing program 4 (id=15496): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f00000000c0)={0xa, @pix_mp={0x2, 0x10000, 0x34324142, 0x5, 0x6, [{0x8, 0xfffffffd}, {0x9, 0xfffffff2}, {0x3, 0x9}, {0x80000000, 0x1000}, {0x7c2e, 0x9}, {0x9, 0x8001}, {0x7, 0x5b63}, {0x9, 0x3}], 0x9, 0x1, 0x1, 0x2, 0x4}}) 8m32.163754486s ago: executing program 33 (id=15496): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f00000000c0)={0xa, @pix_mp={0x2, 0x10000, 0x34324142, 0x5, 0x6, [{0x8, 0xfffffffd}, {0x9, 0xfffffff2}, {0x3, 0x9}, {0x80000000, 0x1000}, {0x7c2e, 0x9}, {0x9, 0x8001}, {0x7, 0x5b63}, {0x9, 0x3}], 0x9, 0x1, 0x1, 0x2, 0x4}}) 5m5.354240985s ago: executing program 1 (id=17439): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000040)='L', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5m3.227856962s ago: executing program 1 (id=17461): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x485, 0x0, 0x81}]}) 5m3.031209653s ago: executing program 1 (id=17465): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000180)={0x0, 0xc989, 0x0, 0xffffffdf, 0x173}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 5m2.746555909s ago: executing program 1 (id=17468): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 5m2.535768565s ago: executing program 1 (id=17471): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000002c0)=""/249) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m1.771273035s ago: executing program 1 (id=17472): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4d9, 0xa0c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x8, 0x3}}}}}]}}]}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 5m1.122289089s ago: executing program 34 (id=17472): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4d9, 0xa0c2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x3, 0x8, 0x3}}}}}]}}]}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 4.472530046s ago: executing program 7 (id=20469): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0xb, &(0x7f0000000080)={0x36, 0x208, 0xfffffff3}) 4.231590507s ago: executing program 7 (id=20474): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xa, 0xffff}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x41}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3.449515234s ago: executing program 2 (id=20482): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x2c}}, 0x20) 3.386836961s ago: executing program 2 (id=20483): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x2, 0x57) sendto$inet6(r1, 0x0, 0xffffffffffffff79, 0x20000080, &(0x7f0000006080)={0xa, 0x4e24, 0x6, @loopback, 0x7}, 0x1c) 3.328300684s ago: executing program 7 (id=20484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003dc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14000000}, 0x0) 3.326868108s ago: executing program 2 (id=20485): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0405626, &(0x7f0000000080)=0x3) 3.127173536s ago: executing program 7 (id=20487): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x4, 0x1, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x8080000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0x9000, 0x105000, 0x8}) 2.883515169s ago: executing program 7 (id=20488): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='environ\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.538307458s ago: executing program 5 (id=20492): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) symlink(&(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='./file0\x00') r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) 2.319910453s ago: executing program 5 (id=20493): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, 0x0}}], 0x1, 0x0) syz_io_uring_setup(0x826bf, &(0x7f0000000180)={0x0, 0x306b, 0x6ff, 0x4004, 0x1a}, &(0x7f0000000100), &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.106163727s ago: executing program 5 (id=20494): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) 2.027014014s ago: executing program 5 (id=20495): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4048aecb, &(0x7f0000001440)={{0x7, 0x0, 0x80, {0xffffffffffffffff, 0xeeef0000, 0x2}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9e7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30bfdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf2805372a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f0050079601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5820a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac980acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de628d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64ffff5208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e55037859293e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd41d704bbdba7d282aac778b7ec769ef984527c8112d56e75ab77ff8898d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a5518b3c1de451f220c418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77030094543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7073b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2dbed5d52c8e976744da29f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3ad34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f6373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f00000000dfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c0851800c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) close_range(r0, 0xffffffffffffffff, 0x0) 1.976167763s ago: executing program 6 (id=20496): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x1, 0x8, 0x9, '\x00', 0xa51}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000440)={0x60001, 0x0, {[0x8, 0xffffffff, 0x8, 0x4000, 0x6, 0x7fd, 0x8, 0x400000002]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.962719789s ago: executing program 7 (id=20497): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r0]) 1.756126271s ago: executing program 6 (id=20499): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0000c4}, 0x4) 1.717497402s ago: executing program 5 (id=20500): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) r4 = memfd_create(&(0x7f0000000080), 0x0) splice(r2, 0x0, r4, 0x0, 0x1ea9, 0x9) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 1.692293956s ago: executing program 6 (id=20501): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 1.406736047s ago: executing program 2 (id=20502): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.374192765s ago: executing program 6 (id=20503): add_key(&(0x7f00000001c0)='user\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0x12) r1 = syz_io_uring_setup(0xc4f, &(0x7f0000000440)={0x0, 0xfffffffc, 0x10100, 0x7fe}, &(0x7f0000000400)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x10, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x2dbe, 0x0, 0x40, 0x0, 0xffffffffffffffb2) 1.288450189s ago: executing program 6 (id=20505): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000010"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x5d6aff9e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000007, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) 1.016048243s ago: executing program 3 (id=20508): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 927.258933ms ago: executing program 3 (id=20509): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0x3, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) read$alg(r0, &(0x7f00000002c0)=""/80, 0x50) 914.765583ms ago: executing program 3 (id=20510): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) 772.197598ms ago: executing program 5 (id=20511): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x10, &(0x7f0000000240)={0x0, 0xe, 0x1, "c5"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x2, "00a3"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000011c0)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="208402000000b0e0"], 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="201430"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 358.579162ms ago: executing program 6 (id=20512): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0405626, &(0x7f0000000080)=0x3) 357.787494ms ago: executing program 2 (id=20522): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 352.592225ms ago: executing program 3 (id=20513): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 134.732981ms ago: executing program 2 (id=20514): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) ioctl$FS_IOC_GETVERSION(r1, 0x80015b18, 0x0) 91.200143ms ago: executing program 3 (id=20515): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a00)=@newtaction={0x600, 0x30, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{0x5ec, 0x1, [@m_ipt={0x5e8, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x5bd, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x600}}, 0x4000000) read$alg(r1, &(0x7f0000000a00)=""/4087, 0xff7) 0s ago: executing program 3 (id=20516): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): scriptor of length 0, skipping remainder of the config [ 1525.873117][T32021] usb 6-1: config 220 has no interface number 2 [ 1525.878883][T18454] netlink: 'syz.3.18956': attribute type 12 has an invalid length. [ 1525.879555][T32021] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1525.911770][T32021] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1525.920622][T32021] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1525.963052][T32021] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1525.994937][T32021] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1526.013994][T32021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.022045][T32021] usb 6-1: Product: syz [ 1526.047338][T32021] usb 6-1: Manufacturer: syz [ 1526.080959][T32021] usb 6-1: SerialNumber: syz [ 1526.115206][T18458] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18959'. [ 1526.185630][T18458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18959'. [ 1526.457610][T32021] usb 6-1: selecting invalid altsetting 0 [ 1526.480030][T32021] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1526.507932][T32021] uvcvideo 6-1:220.0: No valid video chain found. [ 1526.534615][T32021] usb 6-1: selecting invalid altsetting 0 [ 1526.551088][T32021] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1526.578086][T32021] usb 6-1: USB disconnect, device number 120 [ 1527.609889][T18479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18965'. [ 1528.065709][T18490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.080827][T18490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.090454][T18490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.109389][T18490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.128654][T18490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.143430][T18490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.164434][T18490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.174019][T18490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.191224][T18490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.200075][T18490] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1528.613171][ T9786] usb 6-1: new full-speed USB device number 121 using dummy_hcd [ 1528.845328][ T9786] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1528.867893][ T9786] usb 6-1: no configurations [ 1528.872549][ T9786] usb 6-1: can't read configurations, error -22 [ 1529.265416][ T30] audit: type=1326 audit(1767728864.818:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.6.18978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7fc00000 [ 1529.762796][ T9786] usb 6-1: new full-speed USB device number 122 using dummy_hcd [ 1529.914487][ T9786] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1529.926491][ T9786] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1529.939927][ T30] audit: type=1326 audit(1767728865.488:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18507 comm="syz.6.18978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f64539 code=0x7fc00000 [ 1529.967463][ T9786] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1529.976671][ T9786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.205403][ T9786] usb 6-1: usb_control_msg returned -32 [ 1530.214109][ T9786] usbtmc 6-1:16.0: can't read capabilities [ 1530.373621][ T9786] hid-generic 0000:0000:0000.010A: unknown main item tag 0x0 [ 1530.403538][ T9786] hid-generic 0000:0000:0000.010A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1530.781293][T32021] usb 6-1: USB disconnect, device number 122 [ 1530.810400][T18541] netlink: 52 bytes leftover after parsing attributes in process `syz.6.18989'. [ 1530.832033][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.6.18989'. [ 1531.034280][T18548] loop3: detected capacity change from 0 to 1 [ 1531.042166][T15541] Dev loop3: unable to read RDB block 1 [ 1531.050614][T15541] loop3: AHDI p1 [ 1531.055913][T15541] loop3: partition table partially beyond EOD, truncated [ 1531.065797][T18548] Dev loop3: unable to read RDB block 1 [ 1531.071418][T18548] loop3: AHDI p1 [ 1531.095029][T18548] loop3: partition table partially beyond EOD, truncated [ 1531.483515][ T9786] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1531.645403][T18566] netlink: 'syz.5.19000': attribute type 3 has an invalid length. [ 1531.681015][T18566] netlink: 'syz.5.19000': attribute type 3 has an invalid length. [ 1531.954321][ T9786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1531.982128][ T9786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1532.004117][ T9786] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1532.014739][ T9786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.045581][ T9786] usb 4-1: config 0 descriptor?? [ 1532.487312][T18587] netlink: 'syz.7.19007': attribute type 6 has an invalid length. [ 1532.861455][T18595] netlink: 'syz.5.19011': attribute type 9 has an invalid length. [ 1532.884585][T18595] netlink: 'syz.5.19011': attribute type 11 has an invalid length. [ 1532.925879][T18599] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19012'. [ 1532.944212][T18595] netlink: 'syz.5.19011': attribute type 12 has an invalid length. [ 1532.970868][T18595] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.19011'. [ 1532.999502][T18595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19011'. [ 1533.245505][ T9786] cm6533_jd 0003:0D8C:0022.010B: unknown main item tag 0x0 [ 1533.255306][ T9786] cm6533_jd 0003:0D8C:0022.010B: unknown main item tag 0x0 [ 1533.267401][ T9786] cm6533_jd 0003:0D8C:0022.010B: unknown main item tag 0x0 [ 1533.275008][ T9786] cm6533_jd 0003:0D8C:0022.010B: unknown main item tag 0x0 [ 1533.282355][ T9786] cm6533_jd 0003:0D8C:0022.010B: unknown main item tag 0x0 [ 1533.302175][ T9786] cm6533_jd 0003:0D8C:0022.010B: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 1533.704084][T32021] net_ratelimit: 1064 callbacks suppressed [ 1533.704105][T32021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.718146][T32021] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1533.923388][T18619] syzkaller1: entered promiscuous mode [ 1533.941619][T18619] syzkaller1: entered allmulticast mode [ 1534.248569][T20031] usb 4-1: USB disconnect, device number 62 [ 1534.289603][T18630] netlink: 'syz.6.19024': attribute type 11 has an invalid length. [ 1534.352841][T32021] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1534.534736][T32021] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.573093][T32021] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.603108][T32021] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1534.630284][T32021] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1534.647684][T32021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.660238][T32021] usb 3-1: config 0 descriptor?? [ 1535.119572][ T30] audit: type=1326 audit(1767728870.668:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18646 comm="syz.5.19032" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d539 code=0x0 [ 1535.160476][T32021] plantronics 0003:047F:FFFF.010C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1535.369209][T18651] netlink: 'syz.3.19033': attribute type 3 has an invalid length. [ 1535.377711][T18651] netlink: 136 bytes leftover after parsing attributes in process `syz.3.19033'. [ 1536.065155][T32024] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1536.232769][T32024] usb 4-1: Using ep0 maxpacket: 16 [ 1536.239895][T32024] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1536.249023][T32024] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.259241][T32024] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1536.273973][T18310] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.314567][T32024] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1536.323806][T32024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.332016][T32024] usb 4-1: Product: syz [ 1536.336723][T32024] usb 4-1: Manufacturer: syz [ 1536.341446][T32024] usb 4-1: SerialNumber: syz [ 1536.744359][ T9786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1536.766200][T32024] usb 4-1: 0:2 : does not exist [ 1537.223178][T32018] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1537.383304][T32018] usb 6-1: Using ep0 maxpacket: 16 [ 1537.396030][T32018] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 1537.414639][T32018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.435073][T32018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.462226][T32018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.480635][T32018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.497642][T32018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.509966][T32018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.521515][T32018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.535993][T32018] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.548302][T32018] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1537.557596][T32018] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1537.569804][T32018] usb 6-1: SerialNumber: syz [ 1537.574850][ T9786] usb 3-1: USB disconnect, device number 82 [ 1537.581257][T32018] usb 6-1: config 0 descriptor?? [ 1537.602057][T32018] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input266 [ 1537.640339][T32021] usb 4-1: USB disconnect, device number 63 [ 1537.821410][ T5188] bcm5974 6-1:0.0: could not read from device [ 1537.838316][ T5188] bcm5974 6-1:0.0: could not read from device [ 1537.847890][T32018] usb 6-1: USB disconnect, device number 123 [ 1537.856996][ T5188] bcm5974 6-1:0.0: could not read from device [ 1539.491302][T18724] input: syz0 as /devices/virtual/input/input267 [ 1539.806325][T32021] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1539.982798][T32021] usb 4-1: Using ep0 maxpacket: 8 [ 1539.989744][T32021] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1540.010118][T32021] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1540.025318][T32021] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1540.031991][T32021] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 1540.041286][T32021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.052029][T32021] usb 4-1: config 0 descriptor?? [ 1540.450053][T32021] usbhid 4-1:0.0: can't add hid device: -71 [ 1540.473273][T32021] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1540.495003][T32021] usb 4-1: USB disconnect, device number 64 [ 1540.570467][T18758] input: syz0 as /devices/virtual/input/input268 [ 1541.553141][T32021] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1541.703431][T32021] usb 6-1: Using ep0 maxpacket: 8 [ 1541.717253][T32021] usb 6-1: config 150 has an invalid interface number: 204 but max is 1 [ 1541.742723][T32021] usb 6-1: config 150 has no interface number 0 [ 1541.749046][T32021] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1541.758150][T32021] usb 6-1: config 150 interface 1 has no altsetting 0 [ 1541.768440][T32021] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1541.779346][T32021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.790458][T32021] usb 6-1: Product: syz [ 1541.796800][T32021] usb 6-1: Manufacturer: syz [ 1541.801907][T32021] usb 6-1: SerialNumber: syz [ 1542.042022][T32021] xr_serial 6-1:150.204: xr_serial converter detected [ 1542.859619][T32021] usb 6-1: xr_serial converter now attached to ttyUSB0 [ 1543.000844][T18817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19109'. [ 1543.089257][T20024] usb 6-1: USB disconnect, device number 124 [ 1543.110526][T20024] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 1543.123164][T20024] xr_serial 6-1:150.204: device disconnected [ 1544.841213][T18850] dvmrp0: entered allmulticast mode [ 1545.393510][T32021] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1545.581075][T32021] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1545.599143][T32021] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1545.610910][T32021] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1545.622297][T32021] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1545.638074][T32021] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1545.647498][T32021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.672024][T32021] usb 4-1: config 0 descriptor?? [ 1545.830736][ T30] audit: type=1326 audit(1767728881.378:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18884 comm="syz.7.19127" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62539 code=0x0 [ 1545.986215][T18889] dvmrp0: left allmulticast mode [ 1546.516866][T32021] plantronics 0003:047F:FFFF.010D: ignoring exceeding usage max [ 1546.568279][T32021] plantronics 0003:047F:FFFF.010D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1548.442473][T18933] netlink: 'syz.7.19144': attribute type 2 has an invalid length. [ 1548.450996][T18933] netlink: 48 bytes leftover after parsing attributes in process `syz.7.19144'. [ 1548.531380][T18936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19146'. [ 1548.614297][T32021] usb 4-1: USB disconnect, device number 65 [ 1548.649655][T18941] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19148'. [ 1549.593349][T18972] loop2: detected capacity change from 0 to 7 [ 1549.601241][T18972] Dev loop2: unable to read RDB block 7 [ 1549.608145][T18972] loop2: AHDI p1 p2 p3 [ 1549.612513][T18972] loop2: partition table partially beyond EOD, truncated [ 1549.619958][T18972] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1549.627806][T18972] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1550.147326][T18983] hsr0: entered promiscuous mode [ 1550.712772][T32024] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 1550.845086][T19012] loop6: detected capacity change from 0 to 1024 [ 1550.852237][T19012] buffer_io_error: 5 callbacks suppressed [ 1550.852254][T19012] Buffer I/O error on dev loop6, logical block 0, async page read [ 1550.867666][T19012] Buffer I/O error on dev loop6, logical block 0, async page read [ 1550.876360][T19012] Buffer I/O error on dev loop6, logical block 0, async page read [ 1550.876480][T32024] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1550.886092][T19012] Buffer I/O error on dev loop6, logical block 0, async page read [ 1550.910492][T19012] Buffer I/O error on dev loop6, logical block 0, async page read [ 1550.926736][T32024] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1550.936948][T32024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1550.943947][T32024] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1550.950261][T19012] Buffer I/O error on dev loop6, logical block 0, async page read [ 1550.953152][T32024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.971883][T32024] usb 6-1: config 0 descriptor?? [ 1550.988757][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.995353][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.027898][T19012] Buffer I/O error on dev loop6, logical block 0, async page read [ 1551.046138][T19012] Buffer I/O error on dev loop6, logical block 0, async page read [ 1551.063119][T19012] ldm_validate_partition_table(): Disk read failed. [ 1551.075669][T19012] Buffer I/O error on dev loop6, logical block 0, async page read [ 1551.088972][T19012] Buffer I/O error on dev loop6, logical block 0, async page read [ 1551.102388][T19012] Dev loop6: unable to read RDB block 0 [ 1551.108810][T19012] loop6: unable to read partition table [ 1551.118164][T19012] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1551.323408][ T9786] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1551.407691][T32024] hid-steam 0003:28DE:1102.010E: unknown main item tag 0x0 [ 1551.430593][T32024] hid-steam 0003:28DE:1102.010E: unknown main item tag 0x0 [ 1551.458197][T32024] hid-steam 0003:28DE:1102.010E: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 1551.484410][ T9786] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1551.509244][ T9786] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1551.521933][ T9786] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1551.535592][T32024] hid-steam 0003:28DE:1102.010E: Steam Controller 'XXXXXXXXXX' connected [ 1551.551218][T32024] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.010E/input/input269 [ 1551.578009][ T9786] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1551.609206][ T9786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.644833][T32024] hid-steam 0003:28DE:1102.010F: unknown main item tag 0x0 [ 1551.664915][T19016] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1551.685102][T32024] hid-steam 0003:28DE:1102.010F: unknown main item tag 0x0 [ 1551.714292][T32024] hid-steam 0003:28DE:1102.010F: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 1551.772946][T19029] netlink: 'syz.7.19186': attribute type 1 has an invalid length. [ 1551.783452][T32024] usb 6-1: USB disconnect, device number 125 [ 1551.828183][T19027] fido_id[19027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1551.892206][T19029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1551.970797][T32024] hid-steam 0003:28DE:1102.010E: Steam Controller 'XXXXXXXXXX' disconnected [ 1551.982184][T19032] bond3: (slave ip6erspan0): making interface the new active one [ 1552.040429][T19032] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1552.573149][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19195'. [ 1552.596266][T19053] hsr_slave_0: left promiscuous mode [ 1552.603275][T19053] hsr_slave_1: left promiscuous mode [ 1552.856848][T19066] netlink: 'syz.5.19200': attribute type 1 has an invalid length. [ 1552.907534][T19066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1553.308612][ T9786] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1553.331395][ T9786] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input270 [ 1553.392028][ T9786] usb 3-1: USB disconnect, device number 83 [ 1553.398498][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1553.561247][T19085] loop3: detected capacity change from 0 to 1 [ 1553.568917][T19085] Dev loop3: unable to read RDB block 1 [ 1553.581394][T19085] loop3: unable to read partition table [ 1553.591621][T19085] loop3: partition table beyond EOD, truncated [ 1553.598917][T19085] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1554.454545][T20031] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1554.612941][T20031] usb 3-1: Using ep0 maxpacket: 16 [ 1554.620629][T20031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.634893][T20031] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.645250][T20031] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1554.658802][T20031] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1554.670325][T20031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.684824][T32021] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 1554.695653][T20031] usb 3-1: config 0 descriptor?? [ 1554.886715][T32021] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1554.897745][T32021] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1554.916062][T32021] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 8.00 [ 1554.929808][T32021] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1554.938304][T32021] usb 6-1: Product: syz [ 1554.946250][T32021] usb 6-1: config 0 descriptor?? [ 1555.164315][T20031] HID 045e:07da: Invalid code 65791 type 1 [ 1555.199766][T20031] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0110/input/input271 [ 1555.239796][T20031] microsoft 0003:045E:07DA.0110: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1555.379369][T32021] cm6533_jd 0003:0D8C:0022.0111: unknown main item tag 0x0 [ 1555.394779][T32021] cm6533_jd 0003:0D8C:0022.0111: unknown main item tag 0x0 [ 1555.405200][T20031] usb 3-1: USB disconnect, device number 84 [ 1555.438638][T32021] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0111/input/input272 [ 1555.491492][T32021] cm6533_jd 0003:0D8C:0022.0111: input,hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 1555.530226][T19145] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19233'. [ 1555.539703][T19141] fido_id[19141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1555.671631][ T9786] usb 6-1: USB disconnect, device number 126 [ 1555.772062][T19146] fido_id[19146]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1556.115640][ T30] audit: type=1326 audit(1767728891.668:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19155 comm="syz.2.19237" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f06539 code=0x0 [ 1557.068357][T19190] loop4: detected capacity change from 0 to 7 [ 1557.095836][T19190] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 1557.107154][T19190] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 1557.144639][T19190] loop4: p2 start 4294901760 is beyond EOD, truncated [ 1557.183135][T19190] loop4: p3 start 4294836224 is beyond EOD, truncated [ 1557.189965][T19190] loop4: p4 size 327680 extends beyond EOD, truncated [ 1557.215648][T19190] loop4: p5 size 8323072 extends beyond EOD, truncated [ 1557.231141][T19190] loop4: p6 start 8192 is beyond EOD, truncated [ 1557.393525][T20031] hid-generic 0000:0000:0000.0112: unknown main item tag 0x0 [ 1557.406733][T13319] udevd[13319]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1557.420265][T15541] udevd[15541]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1557.432108][T24028] udevd[24028]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1557.458746][T20031] hid-generic 0000:0000:0000.0112: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1558.233672][ T9786] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 1558.395928][ T9786] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1558.406441][ T9786] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1558.420163][ T9786] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1558.430211][ T9786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.655086][ T9786] usb 6-1: usb_control_msg returned -32 [ 1558.660967][ T9786] usbtmc 6-1:16.0: can't read capabilities [ 1559.031054][T19239] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -32 [ 1559.041669][T20031] usb 6-1: USB disconnect, device number 127 [ 1559.893904][T20031] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1560.053420][T20031] usb 6-1: Using ep0 maxpacket: 16 [ 1560.070105][T20031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.091671][T20031] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.105039][T20031] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1560.119866][T20031] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1560.132233][T20031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.150974][T20031] usb 6-1: config 0 descriptor?? [ 1560.569109][T20031] shield 0003:0955:7214.0113: unknown main item tag 0x0 [ 1560.582757][T20031] shield 0003:0955:7214.0113: unknown main item tag 0x0 [ 1560.589760][T20031] shield 0003:0955:7214.0113: unknown main item tag 0x0 [ 1560.601593][T20031] shield 0003:0955:7214.0113: unknown main item tag 0x0 [ 1560.609118][T20031] shield 0003:0955:7214.0113: unknown main item tag 0x0 [ 1560.619722][T20031] input: HID 0955:7214 Haptics as /devices/virtual/input/input273 [ 1560.657757][T20031] shield 0003:0955:7214.0113: Registered Thunderstrike controller [ 1560.677380][T20031] shield 0003:0955:7214.0113: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 1560.766464][T19250] random: crng reseeded on system resumption [ 1560.812592][T32032] shield 0003:0955:7214.0113: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1560.813376][T32024] usb 6-1: USB disconnect, device number 2 [ 1560.842144][T32032] shield 0003:0955:7214.0113: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1560.855266][T32032] shield 0003:0955:7214.0113: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1560.884989][T32032] shield 0003:0955:7214.0113: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1561.498572][T19293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19295'. [ 1561.657699][T19297] vivid-000: disconnect [ 1561.820930][T19302] team_slave_1: entered promiscuous mode [ 1561.844109][T19302] team_slave_1: left promiscuous mode [ 1561.852827][T19296] vivid-000: reconnect [ 1562.265041][T20031] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1562.441883][T20031] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1562.454375][T20031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.466348][T20031] usb 3-1: config 0 descriptor?? [ 1563.687813][T20031] pegasus 3-1:0.0: can't reset MAC [ 1563.696590][T20031] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 1563.712098][T20031] usb 3-1: USB disconnect, device number 85 [ 1563.954638][T19335] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1564.104246][ T30] audit: type=1804 audit(1767728899.658:1455): pid=19341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.19316" name="/newroot/299/file1" dev="tmpfs" ino=1542 res=1 errno=0 [ 1564.162902][T20024] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1564.328891][T20024] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1564.355363][T20024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1564.373208][T20024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1564.383994][T20024] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1564.407878][T20024] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1564.428074][T20024] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1564.447141][T20024] usb 4-1: Manufacturer: syz [ 1564.466869][T20024] usb 4-1: config 0 descriptor?? [ 1564.930739][T20024] appleir 0003:05AC:8243.0114: unknown main item tag 0x0 [ 1564.973331][T20024] appleir 0003:05AC:8243.0114: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1565.031839][T19371] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.19330'. [ 1565.347111][ T30] audit: type=1326 audit(1767728900.898:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19379 comm="syz.7.19334" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62539 code=0x0 [ 1566.792740][T32024] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1566.943152][T32024] usb 3-1: Using ep0 maxpacket: 16 [ 1566.950153][T32024] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1566.957886][T32024] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1566.967093][T32024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.984828][T32024] usb 3-1: config 0 descriptor?? [ 1567.074323][T32021] usb 4-1: USB disconnect, device number 66 [ 1567.409603][T32024] hid (null): nested delimiters [ 1567.416224][T32024] hid (null): report_id 24797 is invalid [ 1567.422179][T32024] hid (null): bogus close delimiter [ 1567.610606][T32021] usb 3-1: USB disconnect, device number 86 [ 1568.122833][T32024] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1568.273206][T32024] usb 6-1: Using ep0 maxpacket: 16 [ 1568.281463][T32024] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.303654][T32024] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1568.314555][T32024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1568.322360][T32021] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1568.323846][T32024] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1568.339540][T32024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.360133][T32024] usb 6-1: config 0 descriptor?? [ 1568.494949][T32021] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.517305][T32021] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1568.527334][T32021] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1568.539809][T32021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.550810][T32021] usb 4-1: config 0 descriptor?? [ 1568.788160][T32024] nzxt-smart2 0003:1E71:2009.0116: unknown main item tag 0x0 [ 1568.802298][T32024] nzxt-smart2 0003:1E71:2009.0116: unknown main item tag 0x0 [ 1568.809885][T32024] nzxt-smart2 0003:1E71:2009.0116: unknown main item tag 0x0 [ 1568.818804][T32024] nzxt-smart2 0003:1E71:2009.0116: unknown main item tag 0x0 [ 1568.827899][T32024] nzxt-smart2 0003:1E71:2009.0116: unknown main item tag 0x0 [ 1568.848475][T32024] nzxt-smart2 0003:1E71:2009.0116: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1568.981306][T32021] cm6533_jd 0003:0D8C:0022.0117: unknown main item tag 0x0 [ 1568.994238][T32021] cm6533_jd 0003:0D8C:0022.0117: unknown main item tag 0x0 [ 1569.014038][T32021] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0117/input/input275 [ 1569.028252][T32024] usb 6-1: USB disconnect, device number 3 [ 1569.082393][T32021] cm6533_jd 0003:0D8C:0022.0117: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 1569.222040][T20024] usb 4-1: USB disconnect, device number 67 [ 1569.274212][T19453] fido_id[19453]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1569.284907][T19457] Set syz1 is full, maxelem 0 reached [ 1569.536668][T19464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19370'. [ 1569.560871][T19464] vxlan2: entered promiscuous mode [ 1569.569142][T14673] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.587433][T14673] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.596965][T14673] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.606103][T14673] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.852423][T19469] IPv4: Oversized IP packet from 127.202.26.0 [ 1570.212753][T32024] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1570.366628][T32024] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.381321][T32024] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1570.391521][T32024] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 1570.405001][T32024] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1570.414936][T32024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.440998][T19475] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1570.459253][T32024] hub 4-1:1.0: bad descriptor, ignoring hub [ 1570.476733][T32024] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1570.489664][T32024] cdc_wdm 4-1:1.0: skipping garbage [ 1570.495545][T32024] cdc_wdm 4-1:1.0: skipping garbage [ 1570.511294][T32024] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1570.522940][T32024] cdc_wdm 4-1:1.0: Unknown control protocol [ 1570.873069][ T9786] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1571.032722][ T9786] usb 3-1: Using ep0 maxpacket: 8 [ 1571.056076][ T9786] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1571.086492][ T9786] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1571.112743][ T9786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1571.124204][ T9786] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1571.134827][ T9786] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1571.150121][ T9786] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1571.161361][ T9786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.318916][T19500] netlink: 'syz.5.19385': attribute type 1 has an invalid length. [ 1571.370885][T19500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1571.402400][ T9786] usb 3-1: usb_control_msg returned -32 [ 1571.418554][ T9786] usbtmc 3-1:16.0: can't read capabilities [ 1571.426659][T19502] bond2: (slave geneve2): making interface the new active one [ 1571.438747][T19502] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1571.479091][T19475] usb 4-1: reset full-speed USB device number 68 using dummy_hcd [ 1571.880844][T19475] usb 4-1: device firmware changed [ 1571.926741][T19475] cdc_wdm 4-1:1.0: Error autopm - -16 [ 1571.932969][T32024] usb 4-1: USB disconnect, device number 68 [ 1572.103010][T32024] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 1572.264357][T32024] usb 4-1: config 1 has an invalid descriptor of length 220, skipping remainder of the config [ 1572.275140][T32024] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1572.284550][T32024] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1572.297674][T32024] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1572.307601][T32024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.320780][T19484] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1572.331206][T32024] hub 4-1:1.0: bad descriptor, ignoring hub [ 1572.337575][T32024] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1572.345643][T32024] cdc_wdm 4-1:1.0: skipping garbage [ 1572.350987][T32024] cdc_wdm 4-1:1.0: skipping garbage [ 1572.356481][T32024] cdc_wdm 4-1:1.0: skipping garbage [ 1572.361783][T32024] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1572.763382][T32032] usb 4-1: USB disconnect, device number 69 [ 1573.218384][T19551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19407'. [ 1573.236845][T19551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19407'. [ 1573.254112][T19551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19407'. [ 1573.512173][ T30] audit: type=1326 audit(1767728909.048:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19556 comm="syz.5.19412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1573.538117][ T30] audit: type=1326 audit(1767728909.058:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19556 comm="syz.5.19412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1573.575083][ T30] audit: type=1326 audit(1767728909.058:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19556 comm="syz.5.19412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1573.601417][ T30] audit: type=1326 audit(1767728909.058:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19556 comm="syz.5.19412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1573.630534][ T30] audit: type=1326 audit(1767728909.058:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19556 comm="syz.5.19412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1573.685119][ T9786] usb 3-1: USB disconnect, device number 87 [ 1573.729200][ T30] audit: type=1326 audit(1767728909.058:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19556 comm="syz.5.19412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1573.794975][ T30] audit: type=1326 audit(1767728909.058:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19556 comm="syz.5.19412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1573.850876][ T30] audit: type=1326 audit(1767728909.058:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19556 comm="syz.5.19412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1573.905184][ T30] audit: type=1326 audit(1767728909.058:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19556 comm="syz.5.19412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1573.952699][ T30] audit: type=1326 audit(1767728909.058:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19556 comm="syz.5.19412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d539 code=0x7ffc0000 [ 1574.020386][T19572] gretap0: entered promiscuous mode [ 1574.026859][T19572] vlan2: entered promiscuous mode [ 1575.521255][T19615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19435'. [ 1576.063137][T19634] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19443'. [ 1576.081601][T19634] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19443'. [ 1577.618348][T19679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19463'. [ 1577.925080][T19687] binder: 19686:19687 ioctl c0306201 800002c0 returned -14 [ 1578.592893][T32024] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1578.600589][ T9786] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1578.754335][ T9786] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.767064][ T9786] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.778150][ T9786] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1578.789346][T32024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1578.800715][T32024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1578.810571][T32024] usb 4-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 1578.819727][ T9786] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1578.833678][T32024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.845880][T32024] usb 4-1: config 0 descriptor?? [ 1578.853968][ T9786] usb 6-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 1578.868685][ T9786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.877525][ T9786] usb 6-1: Product: syz [ 1578.881716][ T9786] usb 6-1: Manufacturer: syz [ 1578.886426][ T9786] usb 6-1: SerialNumber: syz [ 1579.267495][T32024] thrustmaster 0003:044F:B320.0118: unknown main item tag 0x0 [ 1579.278617][T32024] thrustmaster 0003:044F:B320.0118: unknown main item tag 0x0 [ 1579.286296][T32024] thrustmaster 0003:044F:B320.0118: unknown main item tag 0x0 [ 1579.294293][T32024] thrustmaster 0003:044F:B320.0118: unbalanced collection at end of report description [ 1579.310098][T32024] thrustmaster 0003:044F:B320.0118: parse failed [ 1579.317331][T32024] thrustmaster 0003:044F:B320.0118: probe with driver thrustmaster failed with error -22 [ 1579.483676][T32032] usb 4-1: USB disconnect, device number 70 [ 1580.114027][ T9786] cdc_ncm 6-1:1.0: bind() failure [ 1580.139183][ T9786] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1580.163515][ T9786] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1580.188336][ T9786] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1580.214518][ T9786] usb 6-1: USB disconnect, device number 4 [ 1580.487377][T19742] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1580.498963][T32024] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 1580.657763][T32024] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1580.670496][T32024] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1580.681495][T32024] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1580.697392][T32024] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1580.709103][T32024] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1580.745359][T32024] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1580.767925][T32024] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1580.788101][T32024] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1580.810304][T32024] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1580.825268][T32024] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1580.843616][T32024] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1580.851049][T32024] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1580.865900][T32024] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1580.878818][T32024] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1580.911144][T32024] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1580.941529][T32024] usb 3-1: string descriptor 0 read error: -22 [ 1580.950982][T32024] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1580.961675][T32024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.988346][T32024] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1581.983528][T32021] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1582.100642][T19782] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19509'. [ 1582.155545][T32021] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 1582.167899][T32021] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1582.176109][T32021] usb 6-1: Product: syz [ 1582.180577][T32021] usb 6-1: Manufacturer: syz [ 1582.188194][T32021] usb 6-1: SerialNumber: syz [ 1582.199777][T32021] usb 6-1: config 0 descriptor?? [ 1582.221176][T32021] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 005 [ 1582.637349][T32021] (null): failure reading functionality [ 1582.659194][T32021] i2c i2c-2: connected i2c-tiny-usb device [ 1582.726698][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1582.726718][ T30] audit: type=1804 audit(1767728918.278:1472): pid=19795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.19516" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=260779 res=1 errno=0 [ 1582.867151][T32032] usb 6-1: USB disconnect, device number 5 [ 1583.224527][T32032] usb 3-1: USB disconnect, device number 88 [ 1584.788303][T19844] pim6reg1: entered promiscuous mode [ 1584.798310][T19844] pim6reg1: entered allmulticast mode [ 1585.504152][T19857] random: crng reseeded on system resumption [ 1585.813043][T32024] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1586.004667][T32024] usb 3-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 1586.024946][T32024] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 1586.039775][T32024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1586.051689][T32024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1586.061645][T32024] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1586.075652][T32024] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1586.084792][T32024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.104330][T32024] usb 3-1: config 0 descriptor?? [ 1586.570284][T32024] input: HID 28bd:0909 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0909.0119/input/input276 [ 1586.740531][T32024] uclogic 0003:28BD:0909.0119: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.2-1/input0 [ 1586.818332][T32024] usb 3-1: USB disconnect, device number 89 [ 1586.895114][T19890] fido_id[19890]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1587.580983][T19917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19564'. [ 1588.830840][T19951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19578'. [ 1589.267708][T19970] input: syz0 as /devices/virtual/input/input277 [ 1589.753288][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19592'. [ 1589.781697][T19983] netlink: 'syz.6.19592': attribute type 15 has an invalid length. [ 1589.797147][T19983] netlink: 'syz.6.19592': attribute type 18 has an invalid length. [ 1591.971044][T20055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19622'. [ 1592.323156][T32021] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1592.464979][T20062] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19624'. [ 1592.493414][T32021] usb 3-1: Using ep0 maxpacket: 16 [ 1592.517541][T32021] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1592.543906][T32021] usb 3-1: config 0 has no interface number 0 [ 1592.550776][T32021] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1592.565421][T32021] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1592.579754][T32021] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1592.597079][T32021] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1592.613218][T32021] usb 3-1: Product: syz [ 1592.617629][T32021] usb 3-1: SerialNumber: syz [ 1592.628549][T32021] usb 3-1: config 0 descriptor?? [ 1592.637530][T32021] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1592.648980][T32021] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input278 [ 1592.876054][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1593.442778][T32024] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1593.616249][T32024] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1593.633821][T32024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1593.687694][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1593.697685][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1593.705151][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1593.713848][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1593.722053][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1593.729481][T32032] usb 3-1: USB disconnect, device number 90 [ 1593.735627][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1593.735655][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1593.790776][T32032] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1593.801087][T32024] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1593.838221][T32024] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1593.862896][T32024] usb 4-1: Manufacturer: syz [ 1593.885787][T32024] usb 4-1: config 0 descriptor?? [ 1594.186432][T32024] rc_core: IR keymap rc-hauppauge not found [ 1594.201047][T32024] Registered IR keymap rc-empty [ 1594.209905][T32024] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1594.229943][T32024] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input279 [ 1594.259379][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1594.364507][T32032] usb 4-1: USB disconnect, device number 71 [ 1594.488371][T20095] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1595.442883][T32021] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1595.614287][T32021] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1595.652754][T32021] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1595.670341][T32021] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1595.692847][T32021] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.719374][T20122] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1595.736616][T32021] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1595.963540][T20149] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.19661'. [ 1595.991944][T32024] usb 3-1: USB disconnect, device number 91 [ 1596.413151][ T9786] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1596.569296][T20159] input: syz1 as /devices/virtual/input/input280 [ 1596.583927][ T9786] usb 6-1: Using ep0 maxpacket: 16 [ 1596.599271][ T9786] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1596.617461][ T9786] usb 6-1: config 0 has no interface number 0 [ 1596.644022][ T9786] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1596.665172][ T9786] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1596.681816][ T9786] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1596.695353][ T9786] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1596.703775][ T9786] usb 6-1: Product: syz [ 1596.708040][ T9786] usb 6-1: SerialNumber: syz [ 1596.715964][ T9786] usb 6-1: config 0 descriptor?? [ 1596.730266][ T9786] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1596.739366][ T9786] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input281 [ 1597.033870][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1597.041334][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1597.048703][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1597.056220][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1597.068073][ T9786] usb 6-1: USB disconnect, device number 6 [ 1597.074092][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1597.115397][ T9786] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1597.342757][T32024] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1597.492780][T32024] usb 4-1: Using ep0 maxpacket: 8 [ 1597.499637][T32024] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1597.509933][T32024] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1597.519933][T32024] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1597.529858][T32024] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1597.540402][T32024] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1597.554129][ T9786] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1597.561822][T32024] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1597.571531][T32024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.743498][ T9786] usb 3-1: Using ep0 maxpacket: 32 [ 1597.753713][ T9786] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1597.762195][ T9786] usb 3-1: config 0 has no interface number 0 [ 1597.768678][ T9786] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1597.779483][ T9786] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1597.792680][ T9786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.800873][ T9786] usb 3-1: Product: syz [ 1597.806121][ T9786] usb 3-1: Manufacturer: syz [ 1597.820369][T32024] usb 4-1: GET_CAPABILITIES returned 0 [ 1597.826565][ T9786] usb 3-1: SerialNumber: syz [ 1597.834702][T32024] usbtmc 4-1:16.0: can't read capabilities [ 1597.845203][ T9786] usb 3-1: config 0 descriptor?? [ 1597.859014][ T9786] smsc75xx v1.0.0 [ 1598.181382][T20171] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 1598.189664][T32024] usb 4-1: USB disconnect, device number 72 [ 1598.210931][T20195] usb 4-1: usbtmc_ioctl_clear_in_halt returned -19 [ 1598.523719][T32021] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1598.682807][T32021] usb 6-1: Using ep0 maxpacket: 8 [ 1598.708070][T32021] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1598.718694][T32021] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1598.729357][T32021] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1598.740290][T32021] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1598.753455][T32021] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1598.768897][T32021] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1598.780136][T32021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.867066][ T9786] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1599.029722][T32021] usb 6-1: usb_control_msg returned -32 [ 1599.040209][T32021] usbtmc 6-1:16.0: can't read capabilities [ 1599.082347][ T9786] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1599.104919][ T9786] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1599.129560][ T9786] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1599.141669][ T9786] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1599.155654][ T9786] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1599.168973][ T9786] usb 3-1: USB disconnect, device number 92 [ 1599.773794][T20229] usbtmc 6-1:16.0: CHECK_CLEAR_STATUS returned 7 [ 1599.982321][T32021] usb 6-1: USB disconnect, device number 7 [ 1600.111741][ T30] audit: type=1326 audit(1767728935.658:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20236 comm="syz.2.19698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06558 code=0x7ffc0000 [ 1600.159493][ T30] audit: type=1326 audit(1767728935.698:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20236 comm="syz.2.19698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 1600.184636][ T30] audit: type=1326 audit(1767728935.698:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20236 comm="syz.2.19698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06558 code=0x7ffc0000 [ 1600.241252][ T30] audit: type=1326 audit(1767728935.698:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20236 comm="syz.2.19698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 1600.273437][ T30] audit: type=1326 audit(1767728935.698:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20236 comm="syz.2.19698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06558 code=0x7ffc0000 [ 1600.299411][ T30] audit: type=1326 audit(1767728935.698:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20236 comm="syz.2.19698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 1600.331475][ T30] audit: type=1326 audit(1767728935.698:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20236 comm="syz.2.19698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 1600.357158][ T30] audit: type=1326 audit(1767728935.698:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20236 comm="syz.2.19698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 1600.383241][ T30] audit: type=1326 audit(1767728935.698:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20236 comm="syz.2.19698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000 [ 1600.410987][ T30] audit: type=1326 audit(1767728935.698:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20236 comm="syz.2.19698" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f06558 code=0x7ffc0000 [ 1600.726352][T20251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19704'. [ 1600.873239][ T9786] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1601.033167][ T9786] usb 3-1: Using ep0 maxpacket: 32 [ 1601.046134][ T9786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1601.074750][ T9786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1601.106474][ T9786] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1601.127834][ T9786] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1601.137665][ T9786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.193169][ T9786] usb 3-1: config 0 descriptor?? [ 1601.693330][ T9786] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.011A/input/input282 [ 1601.833792][ T9786] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.011A/input/input283 [ 1601.903557][ T9786] kye 0003:0458:5011.011A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 1602.310615][T20281] netlink: 'syz.7.19714': attribute type 4 has an invalid length. [ 1602.371243][T20281] netlink: 'syz.7.19714': attribute type 4 has an invalid length. [ 1602.833220][ C0] kye 0003:0458:5011.011A: usb_submit_urb(ctrl) failed: -1 [ 1603.614005][ T1221] usb 3-1: USB disconnect, device number 93 [ 1603.794487][T20306] batadv_slave_1: entered promiscuous mode [ 1603.808717][T20304] batadv_slave_1: left promiscuous mode [ 1604.830420][T20336] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1604.836871][T20336] syzkaller1: Refused to change device type [ 1605.121694][T20346] netlink: 36 bytes leftover after parsing attributes in process `syz.5.19744'. [ 1605.432924][T32024] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1605.464077][T32021] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1605.500965][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19750'. [ 1605.565461][T20363] Set syz1 is full, maxelem 0 reached [ 1605.598330][T32024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.608858][T32024] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1605.622316][T32024] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1605.632309][T32024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.645867][T32024] usb 6-1: config 0 descriptor?? [ 1605.668499][T32021] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1605.680213][T32021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.698189][T32021] usb 4-1: config 0 descriptor?? [ 1605.708025][T32021] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1605.909934][T32021] gspca_spca508: reg_read err -32 [ 1605.928191][T32021] gspca_spca508: reg_read err -32 [ 1605.934484][T32021] gspca_spca508: reg_read err -32 [ 1605.940826][T32021] gspca_spca508: reg_read err -32 [ 1606.074395][T32024] kovaplus 0003:1E7D:2D50.011B: unknown main item tag 0x0 [ 1606.085789][T32024] kovaplus 0003:1E7D:2D50.011B: unknown main item tag 0x0 [ 1606.093950][T32024] kovaplus 0003:1E7D:2D50.011B: unknown main item tag 0x0 [ 1606.101241][T32024] kovaplus 0003:1E7D:2D50.011B: unknown main item tag 0x0 [ 1606.116121][T32024] kovaplus 0003:1E7D:2D50.011B: unknown main item tag 0x0 [ 1606.127093][T32024] kovaplus 0003:1E7D:2D50.011B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 1606.158530][T32021] gspca_spca508: reg write: error -71 [ 1606.172898][T32021] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 1606.190384][T32021] usb 4-1: USB disconnect, device number 73 [ 1606.672281][T32024] kovaplus 0003:1E7D:2D50.011B: couldn't init struct kovaplus_device [ 1606.692717][T32024] kovaplus 0003:1E7D:2D50.011B: couldn't install mouse [ 1606.714383][T32024] kovaplus 0003:1E7D:2D50.011B: probe with driver kovaplus failed with error -71 [ 1606.752948][T32024] usb 6-1: USB disconnect, device number 8 [ 1607.664666][T32024] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1607.832792][T32024] usb 6-1: Using ep0 maxpacket: 8 [ 1607.844281][T32024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1607.873053][T32024] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1607.883475][T32024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.902791][T32024] usb 6-1: config 0 descriptor?? [ 1608.133247][T32024] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1608.667324][T32032] usb 6-1: USB disconnect, device number 9 [ 1609.058986][T20455] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19787'. [ 1609.213666][T32032] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1609.365257][T32032] usb 4-1: Using ep0 maxpacket: 32 [ 1609.425245][T20469] netlink: 52 bytes leftover after parsing attributes in process `syz.5.19793'. [ 1609.434998][T20469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1609.442767][T20469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.459333][T32032] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1609.469911][T32032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1609.482069][T32032] usb 4-1: config 0 descriptor?? [ 1609.670989][ T30] kauditd_printk_skb: 111 callbacks suppressed [ 1609.671008][ T30] audit: type=1326 audit(1767728945.218:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20475 comm="syz.5.19796" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d539 code=0x0 [ 1609.736567][T32032] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1609.746574][T32032] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1609.757375][T32032] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1609.764872][T32032] usb 4-1: media controller created [ 1609.784374][T32032] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1609.837783][T32032] DVB: Unable to find symbol dib7000p_attach() [ 1609.844478][T32032] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1609.912736][T32032] rc_core: IR keymap rc-dib0700-rc5 not found [ 1609.918972][T32032] Registered IR keymap rc-empty [ 1609.926229][T32032] dvb-usb: could not initialize remote control. [ 1609.932512][T32032] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1609.949835][T32032] usb 4-1: USB disconnect, device number 74 [ 1609.991999][T32032] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1610.577579][T20493] netlink: 'syz.5.19801': attribute type 1 has an invalid length. [ 1610.703104][T20498] ip6tnl1: entered promiscuous mode [ 1610.708548][T20498] ip6tnl1: entered allmulticast mode [ 1611.752818][T32032] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1611.824340][T32021] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1611.909412][T32032] usb 3-1: Using ep0 maxpacket: 32 [ 1611.911074][T32032] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 1611.911108][T32032] usb 3-1: config 0 has no interface number 0 [ 1611.911136][T32032] usb 3-1: config 0 interface 182 has no altsetting 0 [ 1611.916090][T32032] usb 3-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 1611.916131][T32032] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.916153][T32032] usb 3-1: Product: syz [ 1611.916168][T32032] usb 3-1: Manufacturer: syz [ 1611.916184][T32032] usb 3-1: SerialNumber: syz [ 1611.923265][T32032] usb 3-1: config 0 descriptor?? [ 1611.925804][T32032] hub 3-1:0.182: bad descriptor, ignoring hub [ 1611.925833][T32032] hub 3-1:0.182: probe with driver hub failed with error -5 [ 1611.992874][T32021] usb 6-1: Using ep0 maxpacket: 16 [ 1611.998515][T32021] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1611.998545][T32021] usb 6-1: config 0 has no interface number 0 [ 1611.998589][T32021] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1611.998644][T32021] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1612.015676][T32021] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1612.015705][T32021] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1612.015727][T32021] usb 6-1: Product: syz [ 1612.015743][T32021] usb 6-1: SerialNumber: syz [ 1612.018994][T32021] usb 6-1: config 0 descriptor?? [ 1612.023374][T32021] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 1612.025671][T32021] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input285 [ 1612.174956][T32032] kaweth 3-1:0.182: Firmware present in device. [ 1612.349323][T32032] kaweth 3-1:0.182: Statistics collection: 0 [ 1612.364740][T32032] kaweth 3-1:0.182: Multicast filter limit: 0 [ 1612.370914][T32032] kaweth 3-1:0.182: MTU: 0 [ 1612.375519][T32032] kaweth 3-1:0.182: Read MAC address 00:00:00:00:00:00 [ 1612.427151][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.437475][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.488571][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1612.756934][ C1] cm109_urb_ctl_callback: 20 callbacks suppressed [ 1612.756966][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.770931][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.778305][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.785870][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.793106][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.800299][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.807853][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.815464][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.822684][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.829848][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1612.840714][T32021] usb 6-1: USB disconnect, device number 10 [ 1612.847131][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1612.893313][T32021] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1613.019176][T32032] kaweth 3-1:0.182: kaweth interface created at eth9 [ 1613.052029][T20536] sit0: left promiscuous mode [ 1613.073694][T20536] sit0: left allmulticast mode [ 1613.301592][T20549] input: syz0 as /devices/virtual/input/input286 [ 1613.353406][T32021] usb 3-1: USB disconnect, device number 94 [ 1613.999849][T20580] ip6gre1: entered promiscuous mode [ 1614.032999][T20580] ip6gre1: entered allmulticast mode [ 1614.535641][T32024] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1614.732723][T32024] usb 3-1: Using ep0 maxpacket: 32 [ 1614.744960][T32024] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1614.782686][T32024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1614.818492][T32024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1614.861470][T32024] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1614.881742][T32024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1614.904994][T32024] usb 3-1: config 0 descriptor?? [ 1614.922531][T20587] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1614.942170][T32024] hub 3-1:0.0: USB hub found [ 1615.162735][T32024] hub 3-1:0.0: 2 ports detected [ 1615.500063][T20618] netlink: 'syz.6.19843': attribute type 2 has an invalid length. [ 1615.559933][T32024] hub 3-1:0.0: set hub depth failed [ 1615.590880][T32024] usb 3-1: USB disconnect, device number 95 [ 1617.283750][T20658] bridge0: port 4(erspan0) entered blocking state [ 1617.290655][T20658] bridge0: port 4(erspan0) entered disabled state [ 1617.298445][T20658] erspan0: entered allmulticast mode [ 1617.409406][T20658] erspan0: entered promiscuous mode [ 1617.419012][T20658] bridge0: port 4(erspan0) entered blocking state [ 1617.425627][T20658] bridge0: port 4(erspan0) entered forwarding state [ 1617.434712][T20659] erspan0: left allmulticast mode [ 1617.440085][T20659] erspan0: left promiscuous mode [ 1617.573185][T20659] bridge0: port 4(erspan0) entered disabled state [ 1617.603452][T20665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19860'. [ 1617.704199][T20669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19862'. [ 1617.938629][T20673] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1618.055665][T20679] tls_set_device_offload: netdev not found [ 1618.294281][T32024] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1618.453611][T32024] usb 3-1: Using ep0 maxpacket: 16 [ 1618.460202][T20699] bridge0: port 3(erspan0) entered blocking state [ 1618.467228][T32024] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1618.479278][T20699] bridge0: port 3(erspan0) entered disabled state [ 1618.486502][T20699] erspan0: entered allmulticast mode [ 1618.493597][T32024] usb 3-1: config 1 has no interface number 0 [ 1618.496319][T20699] erspan0: entered promiscuous mode [ 1618.508381][T20699] bridge0: port 3(erspan0) entered blocking state [ 1618.512465][T32024] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1618.514986][T20699] bridge0: port 3(erspan0) entered forwarding state [ 1618.522332][T20700] erspan0: left allmulticast mode [ 1618.538037][T32024] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1618.548585][T32024] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1618.556058][T20700] erspan0: left promiscuous mode [ 1618.561783][T32024] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1618.569908][T20700] bridge0: port 3(erspan0) entered disabled state [ 1618.586274][T32024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.612983][T32024] usb 3-1: Product: syz [ 1618.622716][T32024] usb 3-1: Manufacturer: syz [ 1618.627347][T32024] usb 3-1: SerialNumber: syz [ 1618.645727][T20677] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1618.653351][T20677] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1619.075869][T20677] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1619.104527][T20677] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1619.544406][T32024] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1619.735595][T20740] kvm: vcpu 5: requested lapic timer restore with starting count register 0x390=2846233827 (22769870616 ns) > initial count (14430147192 ns). Using initial count to start timer. [ 1619.758043][T20740] kvm: apic: phys broadcast and lowest prio [ 1619.764319][T20740] kvm: Disabled LAPIC found during irq injection [ 1619.765346][T32024] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1619.825262][T32024] aqc111 3-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, ae:8f:8b:c6:0e:88 [ 1619.848092][T32024] usb 3-1: USB disconnect, device number 96 [ 1619.876980][T32024] aqc111 3-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1620.013978][T32024] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1620.033162][T32024] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1620.051118][T32024] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1620.475227][ T30] audit: type=1326 audit(1767728956.028:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20769 comm="syz.2.19905" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f06539 code=0x0 [ 1621.600221][T20823] netlink: 35 bytes leftover after parsing attributes in process `syz.7.19921'. [ 1621.610820][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19921'. [ 1622.243358][T32032] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1622.283044][T20858] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19935'. [ 1622.292290][T20858] netlink: 'syz.5.19935': attribute type 18 has an invalid length. [ 1622.309745][T20858] vxlan2: entered promiscuous mode [ 1622.402684][T32032] usb 3-1: Using ep0 maxpacket: 32 [ 1622.415350][T32032] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1622.428589][T32032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1622.439907][T32032] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1622.452349][T32032] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1622.462481][T32032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.481560][T32032] usb 3-1: config 0 descriptor?? [ 1622.499285][T20842] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1622.510451][T32032] hub 3-1:0.0: USB hub found [ 1622.723051][T32032] hub 3-1:0.0: 1 port detected [ 1623.195619][T20874] netlink: 'syz.5.19943': attribute type 9 has an invalid length. [ 1623.213278][T20874] netlink: 'syz.5.19943': attribute type 11 has an invalid length. [ 1623.221274][T20874] netlink: 'syz.5.19943': attribute type 12 has an invalid length. [ 1623.236366][T20874] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.19943'. [ 1623.247422][T20874] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19943'. [ 1624.252988][T32024] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1624.403158][T32024] usb 6-1: Using ep0 maxpacket: 16 [ 1624.410145][T32024] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1624.421203][T32024] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1624.434214][T32024] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1624.452833][T32024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.460857][T32024] usb 6-1: Product: syz [ 1624.466380][T32024] usb 6-1: Manufacturer: syz [ 1624.471030][T32024] usb 6-1: SerialNumber: syz [ 1624.688519][T32024] usb 6-1: 0:2 : does not exist [ 1624.709150][T32024] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1624.740583][T32024] usb 6-1: USB disconnect, device number 11 [ 1624.778984][T15541] udevd[15541]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1624.814257][T32032] usb 3-1: reset high-speed USB device number 97 using dummy_hcd [ 1624.843579][T32032] usb 3-1: device reset changed ep0 maxpacket size! [ 1624.863835][T32021] usb 3-1: USB disconnect, device number 97 [ 1624.899912][T20915] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1624.908872][T20915] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1624.918027][T20915] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1624.925606][T20915] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1624.934596][T20915] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1624.941994][T20915] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1625.102749][T32021] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1625.263062][T32024] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1625.279365][T32021] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1625.291294][T32021] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1625.301618][T32021] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1625.312061][T32021] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.325625][T32021] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1625.341981][T32021] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1625.355531][T32021] usb 3-1: Product: syz [ 1625.360540][T32021] usb 3-1: Manufacturer: syz [ 1625.381371][T32021] cdc_wdm 3-1:1.0: skipping garbage [ 1625.388813][T32021] cdc_wdm 3-1:1.0: skipping garbage [ 1625.398418][T32021] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1625.408513][T32021] cdc_wdm 3-1:1.0: Unknown control protocol [ 1625.513740][T32024] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1625.535084][T32024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1625.560544][T32024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1625.605976][T32024] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1625.653963][T32024] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1625.670041][ C1] wdm_int_callback: 3 callbacks suppressed [ 1625.670065][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1625.682539][ C1] wdm_int_callback: 3 callbacks suppressed [ 1625.682560][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1625.687566][T32024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.689705][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1625.709045][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1625.716369][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1625.723020][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1625.729490][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1625.736201][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1625.743030][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1625.749657][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1625.756029][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1625.762664][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1625.771263][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1625.777900][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1625.784062][T32024] usb 4-1: config 0 descriptor?? [ 1625.787942][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1625.795723][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1625.802145][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1625.808827][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1625.815328][T32021] usb 3-1: USB disconnect, device number 98 [ 1625.821708][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1625.821736][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1625.821755][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1626.406155][T32024] plantronics 0003:047F:FFFF.011C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1626.658154][T20961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19976'. [ 1626.668858][T20961] netlink: 'syz.2.19976': attribute type 18 has an invalid length. [ 1626.686282][T20961] vxlan3: entered promiscuous mode [ 1626.833541][T32024] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1627.003310][T32024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1627.015619][T32024] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1627.024832][T32024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1627.037344][T32024] usb 6-1: config 0 descriptor?? [ 1627.259602][T32024] usbhid 6-1:0.0: can't add hid device: -71 [ 1627.289090][T32024] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1627.316976][T32024] usb 6-1: USB disconnect, device number 12 [ 1627.823370][T32024] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1627.985458][T32024] usb 6-1: Using ep0 maxpacket: 32 [ 1627.993817][T32024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1628.005893][T32024] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1628.015401][T32024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1628.030400][T32024] usb 6-1: config 0 descriptor?? [ 1628.047085][T32024] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1628.072054][T32024] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1628.100142][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19985'. [ 1628.128454][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19985'. [ 1628.147371][T20980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19985'. [ 1628.349878][T20992] netlink: 'syz.2.19991': attribute type 1 has an invalid length. [ 1628.447155][T20992] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1628.459823][T20992] bond2: (slave bond3): making interface the new active one [ 1628.468339][T20992] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1628.494194][ T1221] usb 4-1: USB disconnect, device number 75 [ 1629.003033][T32024] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1629.194933][T32024] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.215977][T32024] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1629.252902][T32024] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1629.327179][T32024] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1629.362980][T32024] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.371020][T32024] usb 4-1: Product: syz [ 1629.385284][T32024] usb 4-1: Manufacturer: syz [ 1629.389908][T32024] usb 4-1: SerialNumber: syz [ 1629.683137][T32024] usb 4-1: selecting invalid altsetting 0 [ 1629.731881][T32021] usb 6-1: USB disconnect, device number 13 [ 1629.753300][T32024] usb 4-1: USB disconnect, device number 76 [ 1629.778103][T32021] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 1629.820915][T15541] udevd[15541]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1630.172757][T32024] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1630.322746][T32024] usb 3-1: Using ep0 maxpacket: 16 [ 1630.329731][T32024] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1630.341370][T32024] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1630.350446][T32024] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1630.360102][T32024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.370735][T32024] usb 3-1: config 0 descriptor?? [ 1630.688464][ T30] audit: type=1326 audit(1767728966.238:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21034 comm="syz.3.20009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1630.715054][ T30] audit: type=1326 audit(1767728966.268:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21034 comm="syz.3.20009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1630.746342][ T30] audit: type=1326 audit(1767728966.298:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21034 comm="syz.3.20009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1630.774733][ T30] audit: type=1326 audit(1767728966.318:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21034 comm="syz.3.20009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1630.802698][T21037] netlink: 'syz.6.20011': attribute type 3 has an invalid length. [ 1630.810541][T21037] netlink: 'syz.6.20011': attribute type 3 has an invalid length. [ 1630.827823][ T30] audit: type=1326 audit(1767728966.318:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21034 comm="syz.3.20009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1630.841333][T32024] nzxt-smart2 0003:1E71:2009.011D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1630.892961][ T30] audit: type=1326 audit(1767728966.328:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21034 comm="syz.3.20009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1630.918452][ T30] audit: type=1326 audit(1767728966.348:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21034 comm="syz.3.20009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1630.959817][ T30] audit: type=1326 audit(1767728966.348:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21034 comm="syz.3.20009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1630.984147][ T30] audit: type=1326 audit(1767728966.368:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21034 comm="syz.3.20009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1631.062667][ T30] audit: type=1326 audit(1767728966.368:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21034 comm="syz.3.20009" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1631.231395][T32024] usb 3-1: USB disconnect, device number 99 [ 1631.738843][T21070] netlink: 'syz.5.20026': attribute type 1 has an invalid length. [ 1631.805636][T21070] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1632.162866][T32024] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1632.313153][T32024] usb 6-1: Using ep0 maxpacket: 32 [ 1632.333997][T32024] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1632.351290][T32024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.380488][T32024] usb 6-1: config 0 descriptor?? [ 1632.402825][T32024] as10x_usb: device has been detected [ 1632.414571][T32024] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1632.446997][T32024] usb 6-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1632.477105][T32024] as10x_usb: error during firmware upload part1 [ 1632.505087][T32024] Registered device nBox DVB-T Dongle [ 1632.619734][T32024] usb 6-1: USB disconnect, device number 14 [ 1632.652378][T32024] Unregistered device nBox DVB-T Dongle [ 1632.659767][T32024] as10x_usb: device has been disconnected [ 1633.019972][T21117] tipc: Started in network mode [ 1633.028081][T21117] tipc: Node identity ac14142f, cluster identity 4711 [ 1633.035546][T21117] tipc: New replicast peer: 0.0.0.0 [ 1633.042296][T21117] tipc: Enabled bearer , priority 10 [ 1633.050534][T21117] tipc: New replicast peer: ff02:0000:0000:0000:0000:0000:0000:0001 [ 1633.960525][T21150] loop3: detected capacity change from 0 to 1 [ 1633.969512][T21150] Dev loop3: unable to read RDB block 1 [ 1633.977164][T21150] loop3: unable to read partition table [ 1633.984827][T21150] loop3: partition table beyond EOD, truncated [ 1634.161309][T21150] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1634.173249][T32021] tipc: Node number set to 2886997039 [ 1637.678022][T21257] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1639.552877][T32018] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1639.723867][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1639.723884][ T30] audit: type=1326 audit(1767728975.278:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21330 comm="syz.5.20124" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701d539 code=0x0 [ 1639.788496][T32018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1639.832647][T32018] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1639.882998][T32018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.911740][T32018] usb 4-1: config 0 descriptor?? [ 1639.990028][T21343] netlink: 'syz.7.20128': attribute type 1 has an invalid length. [ 1640.090071][T21343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1640.139852][T21346] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1640.173597][T21346] bond4: (slave batadv1): making interface the new active one [ 1640.186468][T21346] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 1640.240475][T21349] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1640.246833][T32024] syzkaller1: tun_net_xmit 90 [ 1640.264346][T21349] syzkaller1: Linktype set failed because interface is up [ 1640.296159][T32018] usbhid 4-1:0.0: can't add hid device: -71 [ 1640.302197][T32018] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1640.350134][T32018] usb 4-1: USB disconnect, device number 77 [ 1640.852991][T32024] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1641.022784][T32024] usb 4-1: Using ep0 maxpacket: 32 [ 1641.094176][T32024] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1641.111955][T32024] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1641.125630][T32024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.140242][T32024] usb 4-1: config 0 descriptor?? [ 1641.161633][T32024] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1641.183610][T32024] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1641.487305][ C1] ldusb 4-1:0.0: Ring buffer overflow, 8 bytes dropped [ 1641.858716][T21389] vivid-000: disconnect [ 1641.884072][ C1] ldusb 4-1:0.0: Ring buffer overflow, 8 bytes dropped [ 1641.941059][T32018] vivid-000: reconnect [ 1642.220448][T21405] netlink: 12 bytes leftover after parsing attributes in process `syz.7.20153'. [ 1642.416467][T21409] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1642.422397][T21409] syzkaller1: Linktype set failed because interface is up [ 1642.444046][T32018] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1642.612693][T32018] usb 3-1: Using ep0 maxpacket: 32 [ 1642.619608][T32018] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1642.627936][T32018] usb 3-1: config 0 has no interface number 0 [ 1642.636902][T32018] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1642.646625][T32018] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.656357][T32018] usb 3-1: Product: syz [ 1642.660696][T32018] usb 3-1: Manufacturer: syz [ 1642.680732][T32018] usb 3-1: SerialNumber: syz [ 1642.688714][T32018] usb 3-1: config 0 descriptor?? [ 1642.711326][T32018] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1642.881197][T21417] veth2: entered promiscuous mode [ 1642.886864][T21417] veth2: entered allmulticast mode [ 1642.924391][T32018] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1642.956178][T32018] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1643.097849][T32024] usb 4-1: USB disconnect, device number 78 [ 1643.107717][T32024] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1643.120200][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 28 [ 1643.174112][T21421] kvm: user requested TSC rate below hardware speed [ 1643.329948][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1643.338142][T32018] usb 3-1: USB disconnect, device number 100 [ 1643.356730][T32018] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1643.380765][T32018] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1643.398069][T32018] quatech2 3-1:0.51: device disconnected [ 1643.830555][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20171'. [ 1643.927715][T21451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20171'. [ 1643.946354][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20171'. [ 1644.093520][ T9786] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1644.224612][T21464] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20181'. [ 1644.262760][ T9786] usb 6-1: Using ep0 maxpacket: 32 [ 1644.287647][ T9786] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1644.311001][ T9786] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1644.322571][ T9786] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1644.338613][ T9786] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1644.348449][ T9786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1644.357589][ T9786] usb 6-1: Product: syz [ 1644.361864][ T9786] usb 6-1: Manufacturer: syz [ 1644.367321][ T9786] usb 6-1: SerialNumber: syz [ 1644.512684][T32018] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1644.683853][T32018] usb 3-1: Using ep0 maxpacket: 8 [ 1644.695820][T32018] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1644.721417][T32018] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1644.744513][T32018] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1644.763788][T32018] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1644.792645][T32018] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1644.816851][T32018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.074552][T32018] usb 3-1: GET_CAPABILITIES returned 0 [ 1645.083301][T32018] usbtmc 3-1:16.0: can't read capabilities [ 1645.286562][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1645.295689][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1645.304781][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1645.313843][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1645.322894][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1645.331950][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1645.351189][T20024] usb 3-1: USB disconnect, device number 101 [ 1645.611814][ T9786] cdc_ncm 6-1:1.0: bind() failure [ 1645.625158][ T9786] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1645.635954][ T9786] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1645.645194][ T9786] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1645.662183][ T9786] usb 6-1: USB disconnect, device number 15 [ 1646.463485][T32018] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1646.644416][T32018] usb 3-1: Using ep0 maxpacket: 16 [ 1646.651166][T32018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 1646.664584][T32018] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1646.680254][T32018] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1646.689808][T32018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.707542][T32018] usb 3-1: config 0 descriptor?? [ 1647.177855][T32018] lg-g15 0003:046D:C222.011E: hidraw0: USB HID v0.05 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 1647.392067][T32018] usb 3-1: USB disconnect, device number 102 [ 1647.912808][T32018] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1647.952727][T20024] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1648.072848][T32018] usb 6-1: Using ep0 maxpacket: 32 [ 1648.087316][T32018] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1648.105670][T32018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1648.118674][T32018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1648.128852][T32018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1648.140306][T32018] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1648.185625][T32018] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1648.195940][T20024] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1648.213138][T32018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.243450][T20024] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1648.253851][T32018] usb 6-1: Product: syz [ 1648.258064][T32018] usb 6-1: Manufacturer: syz [ 1648.274806][T32018] usb 6-1: SerialNumber: syz [ 1648.298443][T32018] usb 6-1: config 0 descriptor?? [ 1648.327212][T20024] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1648.355922][T20024] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1648.383203][T20024] usb 4-1: SerialNumber: syz [ 1648.480539][T21578] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.20224'. [ 1648.662101][T20024] usb 4-1: 0:2 : does not exist [ 1648.691499][T20024] usb 4-1: USB disconnect, device number 79 [ 1648.730393][T32018] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 1648.748859][T32018] input input289: Device does not respond to id packet M [ 1648.760233][T32018] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 1648.767030][T32018] input input289: Device does not respond to id packet P [ 1648.779315][T24028] udevd[24028]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1648.797769][T32018] iforce 6-1:0.0: usb_submit_urb failed: -32 [ 1648.805057][T32018] input input289: Device does not respond to id packet B [ 1649.024855][T32018] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1649.054749][T32018] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1649.071417][T32018] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1649.081778][T32018] iforce 6-1:0.0: usb_submit_urb failed: -71 [ 1649.101589][T32018] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input289 [ 1649.137331][T32018] usb 6-1: USB disconnect, device number 16 [ 1649.516704][T21603] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20234'. [ 1649.859956][T21615] netlink: 'syz.5.20241': attribute type 1 has an invalid length. [ 1649.925659][T21615] ip6gre1: entered promiscuous mode [ 1649.931422][T21615] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1649.944595][T21615] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1649.957320][T21615] bond4: (slave ip6gre1): making interface the new active one [ 1649.966130][T21615] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 1651.582951][ T9786] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1651.750451][ T9786] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1651.798095][ T9786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.811734][ T9786] usb 3-1: Product: syz [ 1651.813093][T32018] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1651.821080][ T9786] usb 3-1: Manufacturer: syz [ 1651.828598][ T9786] usb 3-1: SerialNumber: syz [ 1651.843751][ T9786] usb 3-1: config 0 descriptor?? [ 1651.861788][T21688] sctp: [Deprecated]: syz.7.20270 (pid 21688) Use of int in max_burst socket option deprecated. [ 1651.861788][T21688] Use struct sctp_assoc_value instead [ 1651.987734][T32018] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1651.996445][T32018] usb 6-1: config 1 has no interface number 0 [ 1652.002967][T32018] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1652.043059][T32018] usb 6-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1652.077674][ T9786] usb 3-1: USB disconnect, device number 103 [ 1652.084729][T32018] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1652.084756][T32018] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1652.084776][T32018] usb 6-1: Product: syz [ 1652.084791][T32018] usb 6-1: Manufacturer: syz [ 1652.084813][T32018] usb 6-1: SerialNumber: syz [ 1652.118058][T21684] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1652.129767][T21684] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1652.140494][T32018] usb 6-1: Expected 3 endpoints, found: 2 [ 1652.385929][T32018] usb 6-1: USB disconnect, device number 17 [ 1652.678132][T21707] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1653.115463][T21719] input: syz0 as /devices/virtual/input/input290 [ 1653.593104][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20289'. [ 1654.093696][T20024] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1654.262787][T20024] usb 6-1: Using ep0 maxpacket: 8 [ 1654.277650][T20024] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 1654.286954][T20024] usb 6-1: config 0 has no interface number 0 [ 1654.296514][T20024] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1654.306951][T20024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.315727][T20024] usb 6-1: Product: syz [ 1654.320092][T20024] usb 6-1: Manufacturer: syz [ 1654.324801][T20024] usb 6-1: SerialNumber: syz [ 1654.331934][T20024] usb 6-1: config 0 descriptor?? [ 1654.477845][T21760] loop6: detected capacity change from 0 to 2640 [ 1654.503094][T24028] buffer_io_error: 12 callbacks suppressed [ 1654.503132][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.518272][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.526617][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.535287][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.546031][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.558130][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.573890][T20024] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1654.581321][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.590124][T20024] uvcvideo 6-1:0.31: No valid video chain found. [ 1654.596669][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.607611][T20024] usb 6-1: USB disconnect, device number 18 [ 1654.617593][T24028] ldm_validate_partition_table(): Disk read failed. [ 1654.637718][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.658986][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1654.673227][T24028] Dev loop6: unable to read RDB block 0 [ 1654.680656][T24028] loop6: unable to read partition table [ 1654.688214][T21760] ldm_validate_partition_table(): Disk read failed. [ 1654.697008][T21760] Dev loop6: unable to read RDB block 0 [ 1654.703178][T21760] loop6: unable to read partition table [ 1654.718586][T21760] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1655.194889][ T5203] ldm_validate_partition_table(): Disk read failed. [ 1655.201603][ T5203] Dev loop6: unable to read RDB block 0 [ 1655.224035][ T5203] loop6: unable to read partition table [ 1655.437476][ T5203] ldm_validate_partition_table(): Disk read failed. [ 1655.445530][ T5203] Dev loop6: unable to read RDB block 0 [ 1655.451447][ T5203] loop6: unable to read partition table [ 1655.528891][ T5203] ldm_validate_partition_table(): Disk read failed. [ 1655.536046][ T5203] Dev loop6: unable to read RDB block 0 [ 1655.541931][ T5203] loop6: unable to read partition table [ 1656.387873][T21820] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.20322'. [ 1656.399165][T21820] netlink: Unknown conntrack attr (0) [ 1656.683957][T21838] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20328'. [ 1657.299540][ T30] audit: type=1326 audit(1767728992.848:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21856 comm="syz.7.20336" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62539 code=0x0 [ 1657.393353][T21522] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1657.592372][T21522] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1657.615659][T21522] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1657.628516][T21522] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1657.637951][T21522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.650629][T21852] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1657.664305][T21522] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1658.000972][ T30] audit: type=1326 audit(1767728993.548:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21876 comm="syz.6.20346" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64539 code=0x0 [ 1658.006994][T21522] usb 4-1: USB disconnect, device number 80 [ 1658.471617][T21892] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1658.948539][T21909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20359'. [ 1659.133923][ T9907] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1659.286097][ T9907] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.297339][ T9907] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1659.309505][ T9907] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1659.323787][ T9907] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1659.333160][ T9907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.341248][ T9907] usb 3-1: Product: syz [ 1659.346016][ T9907] usb 3-1: Manufacturer: syz [ 1659.350692][ T9907] usb 3-1: SerialNumber: syz [ 1660.388190][ T9907] cdc_ncm 3-1:1.0: bind() failure [ 1660.423860][ T9907] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1660.432442][ T9907] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1660.450610][ T9907] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 1660.467890][ T9907] usb 3-1: USB disconnect, device number 104 [ 1661.042936][T20024] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1661.072703][ T9786] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1661.204537][T20024] usb 6-1: config 0 has no interfaces? [ 1661.214689][T20024] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1661.226800][T32024] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1661.236868][T20024] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1661.246776][T20024] usb 6-1: Product: syz [ 1661.255634][T20024] usb 6-1: Manufacturer: syz [ 1661.267252][T20024] usb 6-1: config 0 descriptor?? [ 1661.286724][ T9786] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1661.308595][ T9786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1661.320384][ T9786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1661.330966][ T9786] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1661.345293][ T9786] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1661.355061][ T9786] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1661.364390][ T9786] usb 4-1: Manufacturer: syz [ 1661.370999][ T9786] usb 4-1: config 0 descriptor?? [ 1661.392704][T32024] usb 3-1: Using ep0 maxpacket: 8 [ 1661.399826][T32024] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1661.411512][T32024] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1661.425756][T32024] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1661.435772][T32024] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1661.448480][T32024] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1661.461731][T32024] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1661.471217][T32024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.491077][T20024] usb 6-1: USB disconnect, device number 19 [ 1661.717332][T32024] usb 3-1: usb_control_msg returned -32 [ 1661.723271][T32024] usbtmc 3-1:16.0: can't read capabilities [ 1661.787173][ T9786] appleir 0003:05AC:8243.011F: unknown main item tag 0x0 [ 1661.798979][ T9786] appleir 0003:05AC:8243.011F: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1662.133066][T32018] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1662.285204][T32018] usb 6-1: config 0 has no interfaces? [ 1662.292102][T32018] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1662.301647][T32018] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1662.310699][T32018] usb 6-1: Product: syz [ 1662.315062][T32018] usb 6-1: Manufacturer: syz [ 1662.323521][T32018] usb 6-1: config 0 descriptor?? [ 1662.483343][T21996] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1662.535237][ T9786] usb 6-1: USB disconnect, device number 20 [ 1662.634043][T32024] usb 3-1: USB disconnect, device number 105 [ 1663.423093][T32024] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1663.442745][T32018] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1663.574691][T32024] usb 6-1: Using ep0 maxpacket: 32 [ 1663.581291][T32024] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1663.590221][T32024] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1663.599384][T32024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.602865][T32018] usb 3-1: Using ep0 maxpacket: 32 [ 1663.611536][T32024] usb 6-1: Product: syz [ 1663.616852][T32024] usb 6-1: Manufacturer: syz [ 1663.621623][T32024] usb 6-1: SerialNumber: syz [ 1663.622269][T32018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.639881][T32018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.650126][T32018] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1663.660282][T32018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.670349][T32024] usb 6-1: config 0 descriptor?? [ 1663.675253][T32018] usb 3-1: config 0 descriptor?? [ 1663.863548][ T9786] usb 4-1: USB disconnect, device number 81 [ 1664.071869][ T30] audit: type=1326 audit(1767728999.618:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22012 comm="syz.3.20402" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cd539 code=0x0 [ 1664.112188][T32018] koneplus 0003:1E7D:2D51.0120: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 1664.118219][T32024] gs_usb 6-1:0.0: Configuring for 82 interfaces [ 1664.521673][T32018] usb 3-1: USB disconnect, device number 106 [ 1664.734556][T32024] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 1664.854344][T32024] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 1664.866648][T32024] usb 6-1: USB disconnect, device number 21 [ 1665.434222][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20412'. [ 1665.458279][T22043] vxlan1: entered promiscuous mode [ 1665.500802][T22046] kvm: user requested TSC rate below hardware speed [ 1666.120939][T22066] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1666.128256][T22066] IPv6: NLM_F_CREATE should be set when creating new route [ 1666.135545][T22066] IPv6: NLM_F_CREATE should be set when creating new route [ 1666.986452][ T30] audit: type=1326 audit(1767729002.538:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22095 comm="syz.6.20437" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64539 code=0x0 [ 1667.073688][ T1221] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1667.153378][T32018] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1667.227222][ T1221] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 1667.240259][ T1221] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1667.250852][ T1221] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1667.261650][ T1221] usb 6-1: Product: syz [ 1667.271062][ T1221] usb 6-1: Manufacturer: syz [ 1667.277420][ T1221] usb 6-1: SerialNumber: syz [ 1667.290701][ T1221] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1667.311751][T32024] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1667.325245][T32018] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1667.364659][T32018] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1667.392696][T32018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.419712][T32018] usb 3-1: config 0 descriptor?? [ 1667.439477][T32018] pwc: Askey VC010 type 2 USB webcam detected. [ 1667.600539][T22087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.637481][T22087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.658222][T22087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.683164][T22087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.699200][T22087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1667.724371][T22087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1667.756217][ T9907] usb 6-1: USB disconnect, device number 22 [ 1667.867846][T32018] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1667.875194][T32018] pwc: recv_control_msg error -32 req 02 val 2700 [ 1667.882283][T32018] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1668.090729][T32018] pwc: recv_control_msg error -71 req 04 val 1300 [ 1668.100325][T32018] pwc: recv_control_msg error -71 req 04 val 1400 [ 1668.113728][T32018] pwc: recv_control_msg error -71 req 02 val 2000 [ 1668.121724][T32018] pwc: recv_control_msg error -71 req 02 val 2100 [ 1668.134656][T32018] pwc: recv_control_msg error -71 req 04 val 1500 [ 1668.144401][T32018] pwc: recv_control_msg error -71 req 02 val 2500 [ 1668.151759][T32018] pwc: recv_control_msg error -71 req 02 val 2400 [ 1668.159073][T32018] pwc: recv_control_msg error -71 req 02 val 2600 [ 1668.167798][T32018] pwc: recv_control_msg error -71 req 02 val 2900 [ 1668.177075][T32018] pwc: recv_control_msg error -71 req 02 val 2800 [ 1668.186787][T32018] pwc: recv_control_msg error -71 req 04 val 1100 [ 1668.194994][T32018] pwc: recv_control_msg error -71 req 04 val 1200 [ 1668.219871][T32018] pwc: Registered as video103. [ 1668.234017][T32018] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input291 [ 1668.277185][T32018] usb 3-1: USB disconnect, device number 107 [ 1668.330699][T22118] loop6: detected capacity change from 0 to 2640 [ 1668.343456][T24028] buffer_io_error: 4494 callbacks suppressed [ 1668.343470][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.362736][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.378472][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.394175][T22117] Buffer I/O error on dev loop6, logical block 31, async page read [ 1668.403078][T22117] Buffer I/O error on dev loop6, logical block 31, async page read [ 1668.411628][T22119] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.422113][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.430699][T32024] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1668.431665][T22119] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.446335][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.453121][T32024] ath9k_htc: Failed to initialize the device [ 1668.455041][T24028] Buffer I/O error on dev loop6, logical block 0, async page read [ 1668.477487][T24028] ldm_validate_partition_table(): Disk read failed. [ 1668.489135][ T9907] usb 6-1: ath9k_htc: USB layer deinitialized [ 1668.497909][T24028] Dev loop6: unable to read RDB block 0 [ 1668.515964][T24028] loop6: unable to read partition table [ 1668.544802][T22118] ldm_validate_partition_table(): Disk read failed. [ 1668.560393][T22118] Dev loop6: unable to read RDB block 0 [ 1668.573273][T22118] loop6: unable to read partition table [ 1668.589885][T22118] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1668.813106][ T9907] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1668.925948][T22123] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20447'. [ 1668.951108][ T5203] ldm_validate_partition_table(): Disk read failed. [ 1668.958297][ T5203] Dev loop6: unable to read RDB block 0 [ 1668.966295][ T5203] loop6: unable to read partition table [ 1668.972913][ T9907] usb 6-1: Using ep0 maxpacket: 32 [ 1668.994343][ T9907] usb 6-1: config index 0 descriptor too short (expected 241, got 72) [ 1669.034603][ T9907] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1669.054365][ T9907] usb 6-1: config 0 interface 0 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 1669.070136][T22124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.20447'. [ 1669.082680][ T9907] usb 6-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 1669.122310][ T9907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.154325][ T9907] usb 6-1: config 0 descriptor?? [ 1669.173408][ T9907] mos7840 6-1:0.0: missing endpoints [ 1669.216884][ T5203] ldm_validate_partition_table(): Disk read failed. [ 1669.234545][ T5203] Dev loop6: unable to read RDB block 0 [ 1669.240281][ T5203] loop6: unable to read partition table [ 1669.491720][T32024] usb 6-1: USB disconnect, device number 23 [ 1670.680515][T22190] netlink: 4 bytes leftover after parsing attributes in process `syz.7.20474'. [ 1670.690299][T22190] netlink: 'syz.7.20474': attribute type 13 has an invalid length. [ 1671.062737][T32024] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1671.215698][T32024] usb 6-1: Using ep0 maxpacket: 16 [ 1671.224086][T32024] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.237486][T32024] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1671.248657][T32024] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1671.263711][T32024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.271808][T32024] usb 6-1: Product: syz [ 1671.276953][T32024] usb 6-1: Manufacturer: syz [ 1671.281625][T32024] usb 6-1: SerialNumber: syz [ 1671.505987][T32024] usb 6-1: 0:2 : does not exist [ 1671.525791][T32024] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1671.560989][T32024] usb 6-1: USB disconnect, device number 24 [ 1671.609664][T15541] udevd[15541]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1671.983659][ T30] audit: type=1326 audit(1767729007.538:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22220 comm="syz.7.20488" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f62539 code=0x0 [ 1673.865971][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.872418][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.314472][T32024] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1674.486998][T32024] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1674.523615][T32024] usb 6-1: not running at top speed; connect to a high speed hub [ 1674.539621][T22283] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20522'. [ 1674.552103][T32024] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.568193][T22283] ipvlan0: entered promiscuous mode [ 1674.576095][T32024] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1674.588641][T32024] usb 6-1: string descriptor 0 read error: -22 [ 1674.596121][T32024] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1674.598273][T22283] netlink: 44 bytes leftover after parsing attributes in process `syz.2.20522'. [ 1674.606699][T32024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.631469][T22283] ipvlan1: entered promiscuous mode [ 1674.673453][T32024] usb 6-1: 0:2 : does not exist [ 1674.869754][T22294] [ 1674.872140][T22294] ===================================================== [ 1674.879106][T22294] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1674.886612][T22294] syzkaller #0 Tainted: G L [ 1674.892641][T22294] ----------------------------------------------------- [ 1674.899578][T22294] syz.3.20516/22294 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1674.907392][T22294] ffff8880787372b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1674.916138][T22294] [ 1674.916138][T22294] and this task is already holding: [ 1674.923509][T22294] ffff888032882028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1674.933280][T22294] which would create a new lock dependency: [ 1674.939178][T22294] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1674.947456][T22294] [ 1674.947456][T22294] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1674.957068][T22294] (&client->buffer_lock){..-.}-{3:3} [ 1674.957097][T22294] [ 1674.957097][T22294] ... which became SOFTIRQ-irq-safe at: [ 1674.970336][T22294] lock_acquire+0x107/0x340 [ 1674.974945][T22294] _raw_spin_lock+0x2e/0x40 [ 1674.979894][T22294] evdev_pass_values+0xb9/0xbd0 [ 1674.984856][T22294] evdev_events+0x1e6/0x340 [ 1674.989478][T22294] input_pass_values+0x288/0x890 [ 1674.994514][T22294] input_event_dispose+0x3e5/0x6b0 [ 1674.999741][T22294] input_event+0x89/0xe0 [ 1675.004093][T22294] hidinput_hid_event+0x145e/0x1e50 [ 1675.009413][T22294] hid_process_event+0x4be/0x620 [ 1675.014461][T22294] hid_report_raw_event+0xe91/0x1720 [ 1675.019850][T22294] hid_input_report+0x44b/0x580 [ 1675.024807][T22294] hid_irq_in+0x47e/0x6d0 [ 1675.029249][T22294] __usb_hcd_giveback_urb+0x376/0x540 [ 1675.034745][T22294] dummy_timer+0x85f/0x45b0 [ 1675.039378][T22294] __hrtimer_run_queues+0x51c/0xc30 [ 1675.044700][T22294] hrtimer_run_softirq+0x187/0x2b0 [ 1675.049923][T22294] handle_softirqs+0x22b/0x7c0 [ 1675.054795][T22294] __irq_exit_rcu+0x60/0x150 [ 1675.059483][T22294] irq_exit_rcu+0x9/0x30 [ 1675.063839][T22294] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1675.069587][T22294] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1675.075707][T22294] __do_fast_syscall_32+0xb9/0x570 [ 1675.080957][T22294] do_fast_syscall_32+0x34/0x80 [ 1675.085901][T22294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1675.092323][T22294] [ 1675.092323][T22294] to a SOFTIRQ-irq-unsafe lock: [ 1675.099353][T22294] (tasklist_lock){.+.+}-{3:3} [ 1675.099388][T22294] [ 1675.099388][T22294] ... which became SOFTIRQ-irq-unsafe at: [ 1675.112063][T22294] ... [ 1675.112073][T22294] lock_acquire+0x107/0x340 [ 1675.119258][T22294] _raw_read_lock+0x36/0x50 [ 1675.123884][T22294] __do_wait+0xde/0x740 [ 1675.128151][T22294] do_wait+0x1e8/0x4f0 [ 1675.132354][T22294] kernel_wait+0xab/0x170 [ 1675.136790][T22294] call_usermodehelper_exec_work+0xbe/0x230 [ 1675.142781][T22294] process_scheduled_works+0xad1/0x1770 [ 1675.148436][T22294] worker_thread+0x8a0/0xda0 [ 1675.153135][T22294] kthread+0x711/0x8a0 [ 1675.157319][T22294] ret_from_fork+0x510/0xa50 [ 1675.162012][T22294] ret_from_fork_asm+0x1a/0x30 [ 1675.166884][T22294] [ 1675.166884][T22294] other info that might help us debug this: [ 1675.166884][T22294] [ 1675.177103][T22294] Chain exists of: [ 1675.177103][T22294] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1675.177103][T22294] [ 1675.190256][T22294] Possible interrupt unsafe locking scenario: [ 1675.190256][T22294] [ 1675.198589][T22294] CPU0 CPU1 [ 1675.203958][T22294] ---- ---- [ 1675.209338][T22294] lock(tasklist_lock); [ 1675.213614][T22294] local_irq_disable(); [ 1675.220361][T22294] lock(&client->buffer_lock); [ 1675.227754][T22294] lock(&new->fa_lock); [ 1675.234532][T22294] [ 1675.237989][T22294] lock(&client->buffer_lock); [ 1675.243033][T22294] [ 1675.243033][T22294] *** DEADLOCK *** [ 1675.243033][T22294] [ 1675.251182][T22294] 7 locks held by syz.3.20516/22294: [ 1675.256472][T22294] #0: ffff88823bede918 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1675.265645][T22294] #1: ffff888144adc230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 1675.275769][T22294] #2: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 1675.285464][T22294] #3: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1675.295045][T22294] #4: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1675.304242][T22294] #5: ffff888032882028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1675.314648][T22294] #6: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1675.323730][T22294] [ 1675.323730][T22294] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1675.334151][T22294] -> (&client->buffer_lock){..-.}-{3:3} { [ 1675.339902][T22294] IN-SOFTIRQ-W at: [ 1675.343898][T22294] lock_acquire+0x107/0x340 [ 1675.350055][T22294] _raw_spin_lock+0x2e/0x40 [ 1675.356246][T22294] evdev_pass_values+0xb9/0xbd0 [ 1675.362758][T22294] evdev_events+0x1e6/0x340 [ 1675.368943][T22294] input_pass_values+0x288/0x890 [ 1675.375561][T22294] input_event_dispose+0x3e5/0x6b0 [ 1675.382344][T22294] input_event+0x89/0xe0 [ 1675.388262][T22294] hidinput_hid_event+0x145e/0x1e50 [ 1675.395143][T22294] hid_process_event+0x4be/0x620 [ 1675.401748][T22294] hid_report_raw_event+0xe91/0x1720 [ 1675.408700][T22294] hid_input_report+0x44b/0x580 [ 1675.415245][T22294] hid_irq_in+0x47e/0x6d0 [ 1675.421234][T22294] __usb_hcd_giveback_urb+0x376/0x540 [ 1675.428273][T22294] dummy_timer+0x85f/0x45b0 [ 1675.434467][T22294] __hrtimer_run_queues+0x51c/0xc30 [ 1675.441339][T22294] hrtimer_run_softirq+0x187/0x2b0 [ 1675.448222][T22294] handle_softirqs+0x22b/0x7c0 [ 1675.454657][T22294] __irq_exit_rcu+0x60/0x150 [ 1675.460916][T22294] irq_exit_rcu+0x9/0x30 [ 1675.466802][T22294] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1675.474085][T22294] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1675.481730][T22294] __do_fast_syscall_32+0xb9/0x570 [ 1675.488515][T22294] do_fast_syscall_32+0x34/0x80 [ 1675.495056][T22294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1675.503058][T22294] INITIAL USE at: [ 1675.506965][T22294] lock_acquire+0x107/0x340 [ 1675.513062][T22294] _raw_spin_lock_irqsave+0x40/0x60 [ 1675.519949][T22294] evdev_ioctl_handler+0x1969/0x1f10 [ 1675.526821][T22294] __ia32_compat_sys_ioctl+0x543/0x840 [ 1675.533954][T22294] __do_fast_syscall_32+0x1dc/0x570 [ 1675.540746][T22294] do_fast_syscall_32+0x34/0x80 [ 1675.547177][T22294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1675.555086][T22294] } [ 1675.557601][T22294] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 1675.565776][T22294] [ 1675.565776][T22294] the dependencies between the lock to be acquired [ 1675.565792][T22294] and SOFTIRQ-irq-unsafe lock: [ 1675.579311][T22294] -> (tasklist_lock){.+.+}-{3:3} { [ 1675.584668][T22294] HARDIRQ-ON-R at: [ 1675.588857][T22294] lock_acquire+0x107/0x340 [ 1675.595386][T22294] _raw_read_lock+0x36/0x50 [ 1675.601909][T22294] __do_wait+0xde/0x740 [ 1675.608082][T22294] do_wait+0x1e8/0x4f0 [ 1675.614157][T22294] kernel_wait+0xab/0x170 [ 1675.620503][T22294] call_usermodehelper_exec_work+0xbe/0x230 [ 1675.628403][T22294] process_scheduled_works+0xad1/0x1770 [ 1675.635980][T22294] worker_thread+0x8a0/0xda0 [ 1675.642606][T22294] kthread+0x711/0x8a0 [ 1675.648698][T22294] ret_from_fork+0x510/0xa50 [ 1675.655320][T22294] ret_from_fork_asm+0x1a/0x30 [ 1675.662099][T22294] SOFTIRQ-ON-R at: [ 1675.666273][T22294] lock_acquire+0x107/0x340 [ 1675.672781][T22294] _raw_read_lock+0x36/0x50 [ 1675.679310][T22294] __do_wait+0xde/0x740 [ 1675.685525][T22294] do_wait+0x1e8/0x4f0 [ 1675.691625][T22294] kernel_wait+0xab/0x170 [ 1675.697984][T22294] call_usermodehelper_exec_work+0xbe/0x230 [ 1675.705884][T22294] process_scheduled_works+0xad1/0x1770 [ 1675.713443][T22294] worker_thread+0x8a0/0xda0 [ 1675.720048][T22294] kthread+0x711/0x8a0 [ 1675.726134][T22294] ret_from_fork+0x510/0xa50 [ 1675.732740][T22294] ret_from_fork_asm+0x1a/0x30 [ 1675.739538][T22294] INITIAL USE at: [ 1675.743639][T22294] lock_acquire+0x107/0x340 [ 1675.750067][T22294] _raw_write_lock_irq+0x3d/0x50 [ 1675.756931][T22294] copy_process+0x2185/0x3950 [ 1675.763542][T22294] kernel_clone+0x21e/0x820 [ 1675.769989][T22294] user_mode_thread+0xdd/0x140 [ 1675.776679][T22294] rest_init+0x23/0x300 [ 1675.782746][T22294] start_kernel+0x381/0x3d0 [ 1675.789178][T22294] x86_64_start_reservations+0x24/0x30 [ 1675.796596][T22294] x86_64_start_kernel+0x143/0x1c0 [ 1675.803643][T22294] common_startup_64+0x13e/0x147 [ 1675.810503][T22294] INITIAL READ USE at: [ 1675.815013][T22294] lock_acquire+0x107/0x340 [ 1675.821874][T22294] _raw_read_lock+0x36/0x50 [ 1675.828749][T22294] __do_wait+0xde/0x740 [ 1675.835283][T22294] do_wait+0x1e8/0x4f0 [ 1675.841741][T22294] kernel_wait+0xab/0x170 [ 1675.848448][T22294] call_usermodehelper_exec_work+0xbe/0x230 [ 1675.856703][T22294] process_scheduled_works+0xad1/0x1770 [ 1675.864617][T22294] worker_thread+0x8a0/0xda0 [ 1675.871554][T22294] kthread+0x711/0x8a0 [ 1675.877997][T22294] ret_from_fork+0x510/0xa50 [ 1675.884945][T22294] ret_from_fork_asm+0x1a/0x30 [ 1675.892077][T22294] } [ 1675.894763][T22294] ... key at: [] tasklist_lock+0x18/0x40 [ 1675.902675][T22294] ... acquired at: [ 1675.903793][T32024] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1675.906653][T22294] _raw_read_lock+0x36/0x50 [ 1675.918542][T22294] send_sigurg+0x12b/0x420 [ 1675.920443][T32024] usb 6-1: Warning! Unlikely big volume range (=23808), cval->res is probably wrong. [ 1675.923172][T22294] sk_send_sigurg+0x6c/0x2e0 [ 1675.923201][T22294] queue_oob+0x420/0x4f0 [ 1675.923219][T22294] unix_stream_sendmsg+0xc32/0xde0 [ 1675.923235][T22294] __sock_sendmsg+0x21c/0x270 [ 1675.923261][T22294] ____sys_sendmsg+0x52d/0x820 [ 1675.923281][T22294] ___sys_sendmsg+0x21f/0x2a0 [ 1675.936307][T32024] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = -23808/0/1 [ 1675.937478][T22294] __sys_sendmmsg+0x28e/0x430 [ 1675.954809][T32024] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1675.956954][T22294] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1675.956985][T22294] __do_fast_syscall_32+0x1dc/0x570 [ 1675.968358][T32024] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1675.969444][T22294] do_fast_syscall_32+0x34/0x80 [ 1675.969470][T22294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1676.011631][T22294] [ 1676.013979][T22294] -> (&f_owner->lock){....}-{3:3} { [ 1676.018416][T32024] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1676.026882][T22294] INITIAL USE at: [ 1676.026898][T22294] lock_acquire+0x107/0x340 [ 1676.026918][T22294] _raw_write_lock_irq+0x3d/0x50 [ 1676.026936][T22294] __f_setown+0x67/0x370 [ 1676.026962][T22294] f_setown+0x23a/0x300 [ 1676.026986][T22294] do_fcntl+0x68b/0x1a50 [ 1676.027011][T22294] do_compat_fcntl64+0x477/0x720 [ 1676.027039][T22294] __do_fast_syscall_32+0x1dc/0x570 [ 1676.027060][T22294] do_fast_syscall_32+0x34/0x80 [ 1676.027081][T22294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1676.027104][T22294] INITIAL READ USE at: [ 1676.027117][T22294] lock_acquire+0x107/0x340 [ 1676.081766][T32024] usb 6-1: USB disconnect, device number 25 [ 1676.082053][T22294] _raw_read_lock_irq+0x45/0x60 [ 1676.114156][T22294] f_getown+0x54/0x2a0 [ 1676.120437][T22294] do_fcntl+0x198/0x1a50 [ 1676.126871][T22294] do_compat_fcntl64+0x477/0x720 [ 1676.133996][T22294] __do_fast_syscall_32+0x1dc/0x570 [ 1676.141371][T22294] do_fast_syscall_32+0x34/0x80 [ 1676.148402][T22294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1676.156916][T22294] } [ 1676.159502][T22294] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1676.168461][T22294] ... acquired at: [ 1676.172358][T22294] _raw_read_lock_irqsave+0x48/0x60 [ 1676.177747][T22294] send_sigio+0x38/0x370 [ 1676.182184][T22294] kill_fasync+0x24d/0x4d0 [ 1676.186791][T22294] lease_break_callback+0x26/0x30 [ 1676.192003][T22294] __break_lease+0x730/0x1620 [ 1676.196864][T22294] do_dentry_open+0x73a/0x1420 [ 1676.201806][T22294] vfs_open+0x3b/0x340 [ 1676.206055][T22294] dentry_open+0x61/0xa0 [ 1676.210479][T22294] pidfs_alloc_file+0x186/0x270 [ 1676.215504][T22294] pidfd_prepare+0x14e/0x1b0 [ 1676.220273][T22294] __se_sys_pidfd_open+0xcf/0x250 [ 1676.225472][T22294] __do_fast_syscall_32+0x1dc/0x570 [ 1676.230845][T22294] do_fast_syscall_32+0x34/0x80 [ 1676.235874][T22294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1676.242380][T22294] [ 1676.244698][T22294] -> (&new->fa_lock){....}-{3:3} { [ 1676.249827][T22294] INITIAL USE at: [ 1676.253728][T22294] lock_acquire+0x107/0x340 [ 1676.259802][T22294] _raw_write_lock_irq+0x3d/0x50 [ 1676.266302][T22294] fasync_remove_entry+0xf1/0x1c0 [ 1676.272906][T22294] tun_chr_fasync+0x87/0x1a0 [ 1676.279092][T22294] __fput+0x8a2/0xa70 [ 1676.284654][T22294] task_work_run+0x1d4/0x260 [ 1676.290821][T22294] exit_to_user_mode_loop+0xef/0x4e0 [ 1676.297676][T22294] __do_fast_syscall_32+0x398/0x570 [ 1676.304447][T22294] do_fast_syscall_32+0x34/0x80 [ 1676.310860][T22294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1676.318754][T22294] INITIAL READ USE at: [ 1676.323097][T22294] lock_acquire+0x107/0x340 [ 1676.329597][T22294] _raw_read_lock_irqsave+0x48/0x60 [ 1676.336806][T22294] kill_fasync+0x199/0x4d0 [ 1676.343230][T22294] vcs_notifier+0x14b/0x1f0 [ 1676.349735][T22294] notifier_call_chain+0x19d/0x3a0 [ 1676.356850][T22294] atomic_notifier_call_chain+0xda/0x180 [ 1676.364484][T22294] vcs_scr_updated+0x8c/0xd0 [ 1676.371090][T22294] vcs_write+0x105f/0x1260 [ 1676.377542][T22294] vfs_write+0x27e/0xb30 [ 1676.383793][T22294] ksys_write+0x145/0x250 [ 1676.390117][T22294] __do_fast_syscall_32+0x1dc/0x570 [ 1676.397314][T22294] do_fast_syscall_32+0x34/0x80 [ 1676.404169][T22294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1676.412498][T22294] } [ 1676.414997][T22294] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1676.423707][T22294] ... acquired at: [ 1676.427515][T22294] _raw_read_lock_irqsave+0x48/0x60 [ 1676.432898][T22294] kill_fasync+0x199/0x4d0 [ 1676.437497][T22294] evdev_pass_values+0x627/0xbd0 [ 1676.442606][T22294] evdev_events+0x1e6/0x340 [ 1676.447283][T22294] input_pass_values+0x288/0x890 [ 1676.452394][T22294] input_event_dispose+0x330/0x6b0 [ 1676.457692][T22294] input_inject_event+0x1dd/0x340 [ 1676.462895][T22294] evdev_write+0x2fc/0x480 [ 1676.467490][T22294] vfs_write+0x27e/0xb30 [ 1676.471909][T22294] ksys_write+0x145/0x250 [ 1676.476415][T22294] __do_fast_syscall_32+0x1dc/0x570 [ 1676.481793][T22294] do_fast_syscall_32+0x34/0x80 [ 1676.486816][T22294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1676.493318][T22294] [ 1676.495640][T22294] [ 1676.495640][T22294] stack backtrace: [ 1676.501527][T22294] CPU: 1 UID: 0 PID: 22294 Comm: syz.3.20516 Tainted: G L syzkaller #0 PREEMPT(full) [ 1676.501550][T22294] Tainted: [L]=SOFTLOCKUP [ 1676.501556][T22294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1676.501566][T22294] Call Trace: [ 1676.501574][T22294] [ 1676.501580][T22294] dump_stack_lvl+0xe8/0x150 [ 1676.501601][T22294] __lock_acquire+0x2a95/0x2cf0 [ 1676.501624][T22294] ? kill_fasync+0x199/0x4d0 [ 1676.501646][T22294] lock_acquire+0x107/0x340 [ 1676.501659][T22294] ? kill_fasync+0x199/0x4d0 [ 1676.501683][T22294] ? do_raw_spin_lock+0x121/0x290 [ 1676.501703][T22294] ? evdev_pass_values+0xb9/0xbd0 [ 1676.501721][T22294] _raw_read_lock_irqsave+0x48/0x60 [ 1676.501745][T22294] ? kill_fasync+0x199/0x4d0 [ 1676.501766][T22294] kill_fasync+0x199/0x4d0 [ 1676.501792][T22294] ? kill_fasync+0x53/0x4d0 [ 1676.501815][T22294] evdev_pass_values+0x627/0xbd0 [ 1676.501832][T22294] ? evdev_pass_values+0x5e1/0xbd0 [ 1676.501849][T22294] evdev_events+0x1e6/0x340 [ 1676.501862][T22294] ? evdev_events+0x79/0x340 [ 1676.501877][T22294] ? input_pass_values+0x8d/0x890 [ 1676.501889][T22294] input_pass_values+0x288/0x890 [ 1676.501905][T22294] ? input_handle_event+0x70c/0xf30 [ 1676.501926][T22294] input_event_dispose+0x330/0x6b0 [ 1676.501947][T22294] input_inject_event+0x1dd/0x340 [ 1676.501968][T22294] ? input_inject_event+0xb6/0x340 [ 1676.501988][T22294] evdev_write+0x2fc/0x480 [ 1676.502005][T22294] ? __pfx_evdev_write+0x10/0x10 [ 1676.502021][T22294] ? bpf_lsm_file_permission+0x9/0x20 [ 1676.502037][T22294] ? security_file_permission+0x75/0x290 [ 1676.502053][T22294] ? rw_verify_area+0x255/0x4d0 [ 1676.502075][T22294] ? __pfx_evdev_write+0x10/0x10 [ 1676.502090][T22294] vfs_write+0x27e/0xb30 [ 1676.502107][T22294] ? __pfx_vfs_write+0x10/0x10 [ 1676.502120][T22294] ? __fget_files+0x2a/0x420 [ 1676.502140][T22294] ? __fget_files+0x2a/0x420 [ 1676.502158][T22294] ? __fget_files+0x3a0/0x420 [ 1676.502176][T22294] ? __fget_files+0x2a/0x420 [ 1676.502197][T22294] ksys_write+0x145/0x250 [ 1676.502212][T22294] ? __pfx_ksys_write+0x10/0x10 [ 1676.502229][T22294] __do_fast_syscall_32+0x1dc/0x570 [ 1676.502246][T22294] ? lockdep_hardirqs_on+0x7b/0x110 [ 1676.502261][T22294] ? do_fast_syscall_32+0x34/0x80 [ 1676.502277][T22294] ? irqentry_exit+0x10f/0x670 [ 1676.502293][T22294] do_fast_syscall_32+0x34/0x80 [ 1676.502310][T22294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1676.502329][T22294] RIP: 0023:0xf70cd539 [ 1676.502343][T22294] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1676.502357][T22294] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1676.502373][T22294] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1676.502384][T22294] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 1676.502394][T22294] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1676.502403][T22294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1676.502413][T22294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1676.502428][T22294] [ 1677.172950][T32018] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1677.342718][T32018] usb 3-1: Using ep0 maxpacket: 8 [ 1677.349114][T32018] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1677.359509][T32018] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1677.369722][T32018] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1677.379956][T32018] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1677.393387][T32018] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1677.402450][T32018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.626908][T32018] usb 3-1: GET_CAPABILITIES returned 0 [ 1677.633105][T32018] usbtmc 3-1:16.0: can't read capabilities [ 1677.843144][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.852195][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.861221][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.870261][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.879331][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.888388][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.897454][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.906519][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.915555][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.924605][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.937268][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.946430][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.955510][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.964555][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.973580][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1677.982623][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1678.001214][T32018] usb 3-1: USB disconnect, device number 108