last executing test programs: 4.324397227s ago: executing program 0 (id=35964): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000002700)=[{&(0x7f0000002280)="ed", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x2a, &(0x7f0000000240)=[{&(0x7f0000000980)=""/241, 0xf1}], 0x1, &(0x7f0000000280)=""/48, 0x2b}, 0xa}], 0x1, 0x40012000, 0x0) 4.225303005s ago: executing program 0 (id=35966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) close(0x3) 4.034011272s ago: executing program 0 (id=35970): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f00000001c0)={0x0, 0x16, 0x2, "f25a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x20, 0xd, 0x2, "84f0"}, 0x0, 0x0}) 3.49983753s ago: executing program 2 (id=35977): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3f", 0x6}], 0x1}}], 0x1, 0x20000001) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/248, 0xf8}], 0x1}, 0x8}], 0x1, 0x16d, 0x0) 2.543422324s ago: executing program 2 (id=35983): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000bc0)=[{r0}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) 1.576115736s ago: executing program 2 (id=35995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x1, 0x2000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 1.357567706s ago: executing program 2 (id=35999): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x117, 0x3, "36ff"}], 0x10}}], 0x2, 0x8810) 1.112612461s ago: executing program 1 (id=36003): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="0201"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ffffffffffffe5, 0x0) 1.093527718s ago: executing program 2 (id=36004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x10a}]}) 1.04764587s ago: executing program 3 (id=36005): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0xfffffff8}}}, 0x108) 998.928167ms ago: executing program 4 (id=36006): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x4}) write$UHID_DESTROY(r0, &(0x7f0000000100), 0x4) 982.173382ms ago: executing program 1 (id=36007): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) 949.149485ms ago: executing program 0 (id=36008): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffff030200"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r1, 0x540b, 0x2) 948.177954ms ago: executing program 3 (id=36009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2, 0x0, @rand_addr=0x64010102, @broadcast, {[@generic={0x7, 0x3, "83"}]}}, "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"}}, 0xfce) 754.837618ms ago: executing program 0 (id=36010): bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 754.417656ms ago: executing program 4 (id=36011): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000140)) 733.558587ms ago: executing program 3 (id=36012): ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000200)={{@my=0x0, 0x5}, {@any, 0x200}, 0x400, "23872263c982c72be6aaceb4f937f7468048368fde6a5bb01161d654dcfc2c23efcfb53c3bdd9a45e11512083797e4816b517b4386e3ffb3e91011616d64314bc88a466b14567966bb8d22251778adaae2c052ec6a2903c3533056a0e939cb554d380a76ab5e80d7cb847ddb59f650d31c99dffc48723b90817be4a1bcd9aeef08a2729d9b9cffaded7210b4ff8ac7c80f8620e080d199aa34d736adbc05ebc6fad2e70fb1b913934595e76656709f70af4c08267e0f8d7c79bb5d2a9dcfe48718d4a696e0524d04ad4fa0585ce5c3a46b4b6166abc66b84b78c887e240fc5a8efadf449afa2c45a05d2a186950dbd70924cb6c65810412c59d50a106db7a6df82ecefa9d6755b4ea43ca31b7f49674b3c6649b331238af2e5fd711b23b50fbde0ee5843d13a4e4649c7c3d58f09db6285f8d88a21a909a057db205bbb90256801ee0734521e585f5024ef2b74bbbc37fcc70a4b0adb0afe5e3dd76c2398e025f609ffbeba260cd06bb56f641c75436af2edc9798bca51668ce2d9c7bc7699bfb0706a0aaf2193fe460e63595f432468f80b77f30a9e75d958eef9810df01959523abf757623bd612de327da112b551babcd47814e3a29771bd348a5fe74cc2fb6315a5f7d26af365be0d5c207d660ca6b221dfba45fda32b8cdfe2ae27eb0857456347389efee02c0845d9c6b375a013c4ad150b3205d7eed14abd050158bbedecf783490784742857169ec763975db010a6b0a3b32e197e70113de4ec6fc2953018ea5ed923702de2255771e78218b4b2172aebccdc5398a5c383ebd3092457a5eda4b41efe4a212fd492ae98240310d67fdb30dab8a0501e4b4d1ba1a76dfbf1e2bd3cdd107f1a82cf1d0a31bdf606e2c98dd2815d61d32420a4b604999333aa72a05562510327b9eeb105ea1f805112bb3f0eeaed57c0f5770d1bd908eecf23e778b49840531677a1410f9bb9bfb19a5272a9e79e7119283831114dd80a354b643f2e0cf12f4fc99afa29b4e48e9c9952ea2d1b8b630b14081929bb5c5686ddebfb897a40cc7a4c882fdb4aa46c00b9536b545239a22d9f6321aa256fd54d324598209c6b4a213d57a0140ef853b0be6f6f7431ef4c1fee39c06bc5ac18eafa8a14b5c89378fe7885a70c4126b6775b568396b5816ee8f67a17987e4211138406b21508128cb0c2be3cd4b7ba124913124325c831c3d771d0db7e28f62c21dfd11d32968f92e41a4ff331a2265b24609d25df658c4ecee1a481586b3d9bf4fc6706a17765c20e4f5189a553bab1e2b13324baf5fc6670e9bf9a6a0830af9f31960050f460e25a1fe83e48d7ac88ab4fc8981675482636e3ee738a8dae092041863e150ab4a53c701e8a086574873911e2fcebc31359ed7d5606c18340ef85933a0ddc465b7fc3f1599e1d5bf1dbe74e4d1ca570c7e65b69e498feece0399"}, 0x418, 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="0000520006000500010000000800"], 0x2c}}, 0x20008000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2004c800) 719.27027ms ago: executing program 1 (id=36013): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x96) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860000, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x2c, 0x1, 0x0, 0x1, [{0x28, 0x16}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 670.501304ms ago: executing program 0 (id=36014): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f00000000c0)=0x18) 553.752786ms ago: executing program 4 (id=36015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x11, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48044}, 0x880) 524.088ms ago: executing program 1 (id=36016): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x37e, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 511.109894ms ago: executing program 3 (id=36017): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 444.596951ms ago: executing program 4 (id=36018): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x9c3}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x4000000c000000, &(0x7f0000000000), 0x0, 0x1e}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 395.092318ms ago: executing program 2 (id=36019): openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x1001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x381, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8080) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x800, 0x3}, 0x7, 0x1, 'id0\x00', 'timer0\x00'}) 322.194256ms ago: executing program 3 (id=36020): write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x5, 0x7, 0x7a, @time={0x5, 0x8}, {0x90, 0x81}, {0x7, 0x2}, @quote={{0x4d, 0x4}, 0x5, &(0x7f0000002800)={0x6, 0x4, 0x2, 0x7f, @tick=0x5, {0x7, 0xf0}, {0x6, 0x1}, @addr={0x3}}}}], 0x1c) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000027c0), 0x62202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x3fa, @time={0x1, 0x8}, 0x0, {0x3}}) 258.614631ms ago: executing program 1 (id=36021): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x12) r1 = syz_io_uring_setup(0x231, &(0x7f0000000c80)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 166.820744ms ago: executing program 4 (id=36022): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f0000000040), 0xffc1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 66.736447ms ago: executing program 4 (id=36023): syz_open_dev$usbfs(&(0x7f0000000000), 0x12cb, 0x8000) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000200)={0x0, 0xaee2, 0x800, 0xffffffff, 0x3aa}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x4100, 0x2, 0x0, 0x300) 37.003046ms ago: executing program 3 (id=36024): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 0s ago: executing program 1 (id=36025): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000002640)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, &(0x7f0000002500)=[{&(0x7f0000000d00)=']', 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001200)=""/2, 0x2}], 0x1, &(0x7f00000046c0)=""/244, 0xf4}, 0x0) kernel console output (not intermixed with test programs): trings: Mfr=2, Product=0, SerialNumber=0 [ 2005.055240][T20718] usb 5-1: Manufacturer: syz [ 2005.072603][T20718] usb 5-1: config 0 descriptor?? [ 2005.138861][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2005.138883][ T30] audit: type=1326 audit(1765656507.113:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.0.33457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2005.171600][ T30] audit: type=1326 audit(1765656507.153:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.0.33457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2005.286089][ T30] audit: type=1326 audit(1765656507.193:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.0.33457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2005.321560][ T30] audit: type=1326 audit(1765656507.193:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.0.33457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2005.348705][ T30] audit: type=1326 audit(1765656507.193:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.0.33457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2005.377294][ T30] audit: type=1326 audit(1765656507.193:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.0.33457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2005.403684][ T30] audit: type=1326 audit(1765656507.193:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.0.33457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2005.428894][ T30] audit: type=1326 audit(1765656507.193:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.0.33457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2005.453777][ T30] audit: type=1326 audit(1765656507.193:3191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.0.33457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2005.477981][ T30] audit: type=1326 audit(1765656507.193:3192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5000 comm="syz.0.33457" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2005.704247][T20718] uclogic 0003:256C:006D.004E: failed retrieving Huion firmware version: -71 [ 2005.715857][T20718] uclogic 0003:256C:006D.004E: failed probing parameters: -71 [ 2005.724847][T20718] uclogic 0003:256C:006D.004E: probe with driver uclogic failed with error -71 [ 2005.742486][T20718] usb 5-1: USB disconnect, device number 14 [ 2006.188880][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33478'. [ 2007.173525][ T5309] usb usb8: usbfs: process 5309 (syz.4.33487) did not claim interface 0 before use [ 2008.105884][ T5479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33501'. [ 2008.126476][ T5479] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33501'. [ 2008.303923][ T5595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33504'. [ 2009.719156][ T5684] netlink: 774 bytes leftover after parsing attributes in process `syz.3.33525'. [ 2009.941359][ T5681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33526'. [ 2010.019323][ T5692] netlink: 'syz.1.33530': attribute type 16 has an invalid length. [ 2010.031575][ T5692] netlink: 'syz.1.33530': attribute type 3 has an invalid length. [ 2010.042712][ T5692] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.33530'. [ 2010.049912][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.420329][ T5708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33535'. [ 2011.085548][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2011.085568][ T30] audit: type=1326 audit(1765656513.063:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.4.33547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2011.123890][ T30] audit: type=1326 audit(1765656513.063:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.4.33547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2011.148723][ T30] audit: type=1326 audit(1765656513.093:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.4.33547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2011.174479][ T30] audit: type=1326 audit(1765656513.093:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.4.33547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2011.198386][ T30] audit: type=1326 audit(1765656513.093:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.4.33547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2011.223394][ T30] audit: type=1326 audit(1765656513.093:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.4.33547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2011.249913][ T30] audit: type=1326 audit(1765656513.093:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.4.33547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2011.273311][ T30] audit: type=1326 audit(1765656513.093:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.4.33547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2011.306653][ T30] audit: type=1326 audit(1765656513.103:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5743 comm="syz.4.33547" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2011.901562][ T5777] netlink: 'syz.1.33562': attribute type 11 has an invalid length. [ 2012.930421][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33574'. [ 2012.940229][ T5819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33574'. [ 2012.953619][ T5819] netlink: 'syz.2.33574': attribute type 18 has an invalid length. [ 2013.248595][ T5970] ptrace attach of "./syz-executor exec"[5971] was attempted by "./syz-executor exec"[5970] [ 2013.793516][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33589'. [ 2013.798876][ T5998] netlink: 116 bytes leftover after parsing attributes in process `syz.3.33588'. [ 2013.810900][ T5997] netlink: 228 bytes leftover after parsing attributes in process `syz.0.33589'. [ 2014.052103][ T6014] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.33594'. [ 2014.392802][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33602'. [ 2014.421412][ T6035] netlink: 228 bytes leftover after parsing attributes in process `syz.4.33602'. [ 2015.201106][T20718] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2015.373114][ T6088] netlink: 16 bytes leftover after parsing attributes in process `syz.0.33626'. [ 2015.384835][T20718] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2015.415403][T20718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2015.431243][T20718] usb 2-1: Product: syz [ 2015.435784][T20718] usb 2-1: Manufacturer: syz [ 2015.441132][T20718] usb 2-1: SerialNumber: syz [ 2015.474945][T20718] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2015.592336][T27227] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2015.818180][T20727] usb 2-1: USB disconnect, device number 19 [ 2016.067390][ T6124] loop9: detected capacity change from 0 to 7 [ 2016.091106][ T6124] Dev loop9: unable to read RDB block 7 [ 2016.117648][ T6124] loop9: unable to read partition table [ 2016.131886][ T6124] loop9: partition table beyond EOD, truncated [ 2016.144280][ T6124] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2016.664869][T27227] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2016.681410][T27227] ath9k_htc: Failed to initialize the device [ 2016.702274][T20727] usb 2-1: ath9k_htc: USB layer deinitialized [ 2017.224269][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33650'. [ 2017.238331][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33650'. [ 2018.739427][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33671'. [ 2019.314582][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33682'. [ 2020.160409][ T6585] input: syz1 as /devices/virtual/input/input227 [ 2020.386088][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33699'. [ 2020.397767][ T6603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33699'. [ 2020.501167][ T5086] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2020.661176][ T5086] usb 2-1: Using ep0 maxpacket: 32 [ 2020.668993][ T5086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2020.682355][ T5086] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2020.693731][ T5086] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 2020.704935][ T5086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2020.732700][ T5086] usb 2-1: config 0 descriptor?? [ 2020.822711][ T6626] loop4: detected capacity change from 0 to 1 [ 2020.832116][ T5394] Dev loop4: unable to read RDB block 1 [ 2020.838341][ T5394] loop4: unable to read partition table [ 2020.845213][ T5394] loop4: partition table beyond EOD, truncated [ 2020.855525][ T6626] Dev loop4: unable to read RDB block 1 [ 2020.862286][ T6626] loop4: unable to read partition table [ 2020.868828][ T6626] loop4: partition table beyond EOD, truncated [ 2020.881163][ T6626] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 2020.910714][ T5198] Dev loop4: unable to read RDB block 1 [ 2020.918471][ T5198] loop4: unable to read partition table [ 2020.928838][ T5198] loop4: partition table beyond EOD, truncated [ 2021.170791][ T5086] logitech 0003:046D:C29C.004F: hidraw0: USB HID vb4.30 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 2021.561553][ T5086] logitech 0003:046D:C29C.004F: no inputs found [ 2021.589392][ T5086] usb 2-1: USB disconnect, device number 20 [ 2021.902349][ T30] audit: type=1326 audit(1765656523.883:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.33723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2021.985581][ T30] audit: type=1326 audit(1765656523.903:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.33723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2022.009866][ T30] audit: type=1326 audit(1765656523.913:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.33723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=65 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2022.037472][ T30] audit: type=1326 audit(1765656523.913:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.33723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2022.061078][ T30] audit: type=1326 audit(1765656523.913:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.33723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2022.084987][ T30] audit: type=1326 audit(1765656523.913:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.33723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2022.108009][ T30] audit: type=1326 audit(1765656523.913:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.33723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2022.203948][ T30] audit: type=1326 audit(1765656523.913:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.33723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2022.233150][ T30] audit: type=1326 audit(1765656523.913:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6687 comm="syz.0.33723" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2022.752502][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.33736'. [ 2023.280566][ T6844] kvm: kvm [6843]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 2023.683738][ T30] audit: type=1326 audit(1765656525.653:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6857 comm="syz.1.33749" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2024.507014][T11884] Bluetooth: hci3: command 0x0406 tx timeout [ 2024.964136][ T7099] netlink: 136 bytes leftover after parsing attributes in process `syz.1.33765'. [ 2024.974038][ T7099] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2025.644228][ T7234] netlink: 'syz.4.33778': attribute type 11 has an invalid length. [ 2025.896300][ T7253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.33784'. [ 2026.054829][T27226] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2026.221171][T27226] usb 5-1: Using ep0 maxpacket: 16 [ 2026.228952][T27226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2026.240986][T27226] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 2026.250514][T27226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.270683][T27226] usb 5-1: config 0 descriptor?? [ 2026.718687][T27226] mcp2200 0003:04D8:00DF.0050: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 2026.885216][ T7300] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2027.150092][T27227] usb 5-1: USB disconnect, device number 15 [ 2027.651184][ T7434] netlink: 'syz.1.33807': attribute type 2 has an invalid length. [ 2027.659891][ T7434] netlink: 16158 bytes leftover after parsing attributes in process `syz.1.33807'. [ 2028.162663][ T7558] vlan0: entered promiscuous mode [ 2028.178544][ T7558] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 2028.192250][ T7558] vlan0: entered allmulticast mode [ 2028.215300][ T7558] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 2029.132197][ T7609] netlink: 'syz.1.33830': attribute type 9 has an invalid length. [ 2029.156191][ T7609] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.33830'. [ 2031.257672][ T7905] program syz.3.33867 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2031.291203][T27226] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2031.461273][T27226] usb 5-1: Using ep0 maxpacket: 8 [ 2031.469117][T27226] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 2031.483258][T27226] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2031.494789][T27226] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2031.504796][T27226] usb 5-1: Product: syz [ 2031.509108][T27226] usb 5-1: Manufacturer: syz [ 2031.514150][T27226] usb 5-1: SerialNumber: syz [ 2031.733190][T27226] usb 5-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 2031.742610][T27226] usb 5-1: Handspring Visor / Palm OS: port 255, is for unknown use [ 2031.753892][T27226] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 2031.911270][ T7940] netlink: 44 bytes leftover after parsing attributes in process `syz.1.33878'. [ 2031.934904][T27226] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 2031.952271][T27226] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 2031.966429][T27226] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 2031.986404][T27226] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 2032.004890][T27226] usb 5-1: USB disconnect, device number 16 [ 2032.017133][T27226] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 2032.038971][T27226] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 2032.063484][T27226] visor 5-1:1.0: device disconnected [ 2033.331606][ T8243] sock: sock_set_timeout: `syz.3.33897' (pid 8243) tries to set negative timeout [ 2033.498329][T27227] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2033.518277][ T8249] input: syz0 as /devices/virtual/input/input228 [ 2033.641870][ T8258] macvlan0: entered promiscuous mode [ 2033.647540][ T8258] netlink: 'syz.3.33900': attribute type 1 has an invalid length. [ 2033.659383][ T8258] netlink: 'syz.3.33900': attribute type 2 has an invalid length. [ 2033.712187][T27227] usb 2-1: Using ep0 maxpacket: 16 [ 2033.725635][T27227] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 2033.770181][T27227] usb 2-1: config 0 has no interface number 0 [ 2033.814736][T27227] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2033.830544][T27227] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2033.844603][T27227] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2033.877283][T27227] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2033.908468][T27227] usb 2-1: Product: syz [ 2033.918392][T27227] usb 2-1: SerialNumber: syz [ 2033.940138][T27227] usb 2-1: config 0 descriptor?? [ 2033.943393][ T8276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.33908'. [ 2033.950761][T27227] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 2033.967148][T27227] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input229 [ 2034.170207][ C1] cm109_urb_ctl_callback: 48 callbacks suppressed [ 2034.170235][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2034.184980][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2034.192972][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2034.200494][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2034.208649][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2034.216901][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2034.224602][T27227] usb 2-1: USB disconnect, device number 21 [ 2034.230614][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 2034.230635][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 2034.258560][T27227] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 2034.435293][ T8316] netem: incorrect gi model size [ 2034.441633][ T8316] netem: change failed [ 2036.105273][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.33941'. [ 2036.497212][ T8503] netlink: 52 bytes leftover after parsing attributes in process `syz.1.33947'. [ 2036.854645][ T8513] netlink: 'syz.4.33951': attribute type 1 has an invalid length. [ 2037.474339][ T8546] netlink: 16 bytes leftover after parsing attributes in process `syz.1.33961'. [ 2037.543375][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33961'. [ 2037.581093][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33961'. [ 2037.767901][ T8563] ªªªªªªÛœ}J¹ÖXÎ: renamed from lo (while UP) [ 2037.794038][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.801087][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.671359][ T8603] sctp: [Deprecated]: syz.4.33979 (pid 8603) Use of int in max_burst socket option. [ 2038.671359][ T8603] Use struct sctp_assoc_value instead [ 2039.521373][ T8841] team0: Device xfrm1 is of different type [ 2040.411285][T27227] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2040.564939][T27227] usb 5-1: Using ep0 maxpacket: 16 [ 2040.601647][T27227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2040.615868][T27227] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 2040.633223][T27227] usb 5-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 2040.642277][T27227] usb 5-1: Product: syz [ 2040.646588][T27227] usb 5-1: Manufacturer: syz [ 2040.657330][T27227] usb 5-1: SerialNumber: syz [ 2040.671004][T27227] usb 5-1: config 0 descriptor?? [ 2040.977734][T27227] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 2041.031581][T27227] usb 5-1: USB disconnect, device number 17 [ 2041.103699][ T5394] udevd[5394]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2041.362161][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2041.362183][ T30] audit: type=1326 audit(1765656543.333:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.2.34018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2041.393279][ T30] audit: type=1326 audit(1765656543.333:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.2.34018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2041.463826][ T30] audit: type=1326 audit(1765656543.443:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.2.34018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2041.504132][ T30] audit: type=1326 audit(1765656543.463:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.2.34018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2041.577111][ T30] audit: type=1326 audit(1765656543.523:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.2.34018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2041.654972][ T30] audit: type=1326 audit(1765656543.523:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.2.34018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2041.750661][ T30] audit: type=1326 audit(1765656543.523:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.2.34018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2041.900923][ T30] audit: type=1326 audit(1765656543.553:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.2.34018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=339 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2041.991154][ T30] audit: type=1326 audit(1765656543.553:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.2.34018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2042.041738][ T30] audit: type=1326 audit(1765656543.553:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9157 comm="syz.2.34018" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2042.912804][ T9314] veth0_to_team: entered promiscuous mode [ 2042.966599][ T9314] veth0_to_team: entered allmulticast mode [ 2043.453775][ T9328] netlink: 'syz.3.34041': attribute type 4 has an invalid length. [ 2043.464962][ T9328] netlink: 120 bytes leftover after parsing attributes in process `syz.3.34041'. [ 2043.872680][T27226] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2044.073730][T27226] usb 2-1: Using ep0 maxpacket: 32 [ 2044.106007][T27226] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 2044.139743][T27226] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2044.159200][T27226] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2044.170923][T27226] usb 2-1: config 1 has no interface number 0 [ 2044.178065][T27226] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2044.245162][T27226] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2044.258865][T27226] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2044.269156][T27226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.477005][T27226] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 2044.678347][T27226] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 2044.868054][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34054'. [ 2045.120485][T27226] usb 2-1: USB disconnect, device number 22 [ 2045.132642][T27226] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 2045.587546][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34061'. [ 2045.601500][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34061'. [ 2046.042677][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34068'. [ 2046.062919][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34068'. [ 2046.381063][T20730] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2046.570985][T20730] usb 5-1: Using ep0 maxpacket: 16 [ 2046.612936][T20730] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2046.674162][T20730] usb 5-1: config 0 has no interfaces? [ 2046.731334][T20730] usb 5-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 2046.764047][T20730] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.775651][T20730] usb 5-1: Product: syz [ 2046.789367][T20730] usb 5-1: Manufacturer: syz [ 2046.794917][T20730] usb 5-1: SerialNumber: syz [ 2046.815938][T20730] usb 5-1: config 0 descriptor?? [ 2047.302230][T20718] usb 5-1: USB disconnect, device number 18 [ 2048.976576][ T9750] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2051.803070][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34147'. [ 2051.815502][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34147'. [ 2052.540686][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34162'. [ 2052.594567][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34162'. [ 2053.226569][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34175'. [ 2053.240695][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34175'. [ 2053.241114][T20718] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2053.400921][T20718] usb 2-1: Using ep0 maxpacket: 32 [ 2053.408688][T20718] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 2053.421081][T20718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.451664][T20718] usb 2-1: config 0 descriptor?? [ 2053.473101][T20718] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 2054.330103][T20718] gspca_vc032x: reg_w err -71 [ 2054.335673][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.341868][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.347572][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.354266][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.359746][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.365813][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.371659][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.377168][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.383372][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.388864][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.409547][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.422241][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.491164][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.496608][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.530309][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.536260][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.542143][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.547636][T20718] gspca_vc032x: I2c Bus Busy Wait 00 [ 2054.553567][T20718] gspca_vc032x: Unknown sensor... [ 2054.558854][T20718] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 2054.570476][T20718] usb 2-1: USB disconnect, device number 23 [ 2055.510965][T27226] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2055.690974][T27226] usb 5-1: Using ep0 maxpacket: 8 [ 2055.723227][T27226] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2055.770969][T27226] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2055.783552][T27226] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2055.795200][T27226] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2055.810045][T27226] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2055.819861][T27226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2056.078371][T27226] usb 5-1: GET_CAPABILITIES returned 0 [ 2056.097987][T27226] usbtmc 5-1:16.0: can't read capabilities [ 2056.319060][T20718] usb 5-1: USB disconnect, device number 19 [ 2056.472910][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34211'. [ 2056.503788][T10493] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34212'. [ 2056.511783][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34211'. [ 2057.105022][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34226'. [ 2057.114256][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34226'. [ 2057.409482][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34229'. [ 2057.446963][T10524] syz.1.34227 (10524): drop_caches: 3 [ 2058.398234][T10678] IPv6: NLM_F_CREATE should be specified when creating new route [ 2058.880960][T20718] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2059.098291][T20718] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 2059.145379][T20718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2059.155154][T20718] usb 2-1: Product: syz [ 2059.159565][T20718] usb 2-1: Manufacturer: syz [ 2059.185251][T20718] usb 2-1: SerialNumber: syz [ 2059.212499][T20718] usb 2-1: config 0 descriptor?? [ 2059.226279][T20718] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 024 [ 2059.642081][T20718] (null): failure reading functionality [ 2059.697554][T20718] i2c i2c-2: connected i2c-tiny-usb device [ 2059.915939][T27226] usb 2-1: USB disconnect, device number 24 [ 2061.232733][T10910] netlink: 44 bytes leftover after parsing attributes in process `syz.1.34288'. [ 2062.041006][T11047] netlink: 'syz.4.34302': attribute type 2 has an invalid length. [ 2063.046191][T11095] macvlan0: entered promiscuous mode [ 2063.554205][T11130] kvm: user requested TSC rate below hardware speed [ 2063.662898][T11138] input: syz0 as /devices/virtual/input/input232 [ 2064.031284][T20718] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 2064.201037][T20718] usb 5-1: Using ep0 maxpacket: 16 [ 2064.213576][T20718] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2064.230976][T20718] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2064.251323][T20718] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 2064.271220][T20718] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2064.277926][T20718] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2064.301639][T20718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.323497][T20718] usb 5-1: config 0 descriptor?? [ 2064.807874][T20718] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2064.817054][T20718] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2064.827269][T20718] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2064.836491][T20718] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2064.846959][T20718] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2064.888547][T20718] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2064.898048][T20718] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2064.914435][T20718] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2064.926362][T20718] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2064.934706][T11397] kvm: kvm [11396]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 2064.954298][T27227] usb 5-1: USB disconnect, device number 20 [ 2064.972944][T20718] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 2064.987544][T20718] hid-generic 0000:0000:0000.0052: hidraw0: HID v0.03 Device [syz1] on syz1 [ 2065.316237][T11409] fido_id[11409]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2065.331889][T11426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34352'. [ 2065.721878][T11441] usb usb8: usbfs: process 11441 (syz.0.34358) did not claim interface 0 before use [ 2065.741629][T11441] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2066.216389][T11464] netlink: 'syz.1.34365': attribute type 14 has an invalid length. [ 2066.270422][T11468] netlink: 67 bytes leftover after parsing attributes in process `syz.4.34366'. [ 2066.399997][T11474] vivid-000: disconnect [ 2066.405325][T11473] vivid-000: reconnect [ 2066.783725][T11382] syz.2.34343 (11382): drop_caches: 3 [ 2069.607746][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34414'. [ 2069.623290][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34414'. [ 2069.918478][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34417'. [ 2070.580478][T11772] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34427'. [ 2070.610076][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2070.629178][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2070.637572][T27227] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2070.663796][T11778] netlink: 40 bytes leftover after parsing attributes in process `syz.1.34428'. [ 2070.674463][T11778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.34428'. [ 2070.686605][T11778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.34428'. [ 2070.696488][T11778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.34428'. [ 2070.808170][T11785] random: crng reseeded on system resumption [ 2070.848809][T27227] hid-generic 0000:0002:0005.0053: item fetching failed at offset 0/1 [ 2070.864085][T27227] hid-generic 0000:0002:0005.0053: probe with driver hid-generic failed with error -22 [ 2071.027158][T11797] netlink: 20 bytes leftover after parsing attributes in process `syz.1.34436'. [ 2071.203968][T27227] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2071.275807][T11811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.34441'. [ 2071.308152][T16161] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2071.326177][T16161] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2071.341293][T20730] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2071.541908][T27227] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2071.662481][T20730] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2071.742470][T11831] netlink: 112 bytes leftover after parsing attributes in process `syz.3.34446'. [ 2071.784564][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.34446'. [ 2072.027480][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2072.027502][ T30] audit: type=1326 audit(1765656574.003:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11838 comm="syz.3.34462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2072.101288][T20730] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2072.145700][ T30] audit: type=1326 audit(1765656574.003:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11838 comm="syz.3.34462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2072.216191][ T30] audit: type=1326 audit(1765656574.043:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11838 comm="syz.3.34462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2072.267123][ T30] audit: type=1326 audit(1765656574.043:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11838 comm="syz.3.34462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2072.303369][ T30] audit: type=1326 audit(1765656574.043:3245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11838 comm="syz.3.34462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2072.331605][ T30] audit: type=1326 audit(1765656574.043:3246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11838 comm="syz.3.34462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2072.358014][ T30] audit: type=1326 audit(1765656574.053:3247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11838 comm="syz.3.34462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2072.401336][ T30] audit: type=1326 audit(1765656574.053:3248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11838 comm="syz.3.34462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2072.442164][T27227] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2072.485288][ T30] audit: type=1326 audit(1765656574.053:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11838 comm="syz.3.34462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2072.565790][ T30] audit: type=1326 audit(1765656574.053:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11838 comm="syz.3.34462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2072.645040][T27227] usb 2-1: Using ep0 maxpacket: 8 [ 2072.663255][T27227] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2072.702946][T27227] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2072.741152][T27227] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2072.778128][T27227] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2072.813535][T27227] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2072.871516][T27227] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2072.881129][T27227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2073.142344][T27227] usb 2-1: GET_CAPABILITIES returned 0 [ 2073.149292][T27227] usbtmc 2-1:16.0: can't read capabilities [ 2073.392154][T20730] usb 2-1: USB disconnect, device number 25 [ 2074.703485][T20718] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2074.833604][T12060] netlink: 87 bytes leftover after parsing attributes in process `syz.1.34487'. [ 2074.860987][T20718] usb 5-1: Using ep0 maxpacket: 32 [ 2074.874239][T20718] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 2074.894195][T20718] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 2074.911067][T20718] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 2074.930463][T20718] usb 5-1: config 1 has no interface number 0 [ 2074.943890][T20718] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2074.971566][T20718] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 2075.002564][T20718] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 2075.022816][T20718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.095821][T20718] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 2075.325572][T20718] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 2075.546687][T12044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2075.558217][T12044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2075.786748][T20730] usb 5-1: USB disconnect, device number 21 [ 2075.808682][T20730] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 2075.817348][T12127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.34502'. [ 2077.330994][T20730] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2077.349227][T12205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.34527'. [ 2077.490984][T20730] usb 2-1: Using ep0 maxpacket: 16 [ 2077.510450][T20730] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.529270][T20730] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2077.550246][T20730] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2077.570230][T20730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.605172][T20730] usb 2-1: Product: syz [ 2077.609410][T20730] usb 2-1: Manufacturer: syz [ 2077.629716][T20730] usb 2-1: SerialNumber: syz [ 2077.879554][T20730] usb 2-1: 0:2 : does not exist [ 2077.942720][T20730] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2077.982904][T20730] usb 2-1: USB disconnect, device number 26 [ 2078.129377][ T5394] udevd[5394]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2080.946936][T12490] netlink: 36 bytes leftover after parsing attributes in process `syz.0.34581'. [ 2080.974983][T20730] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2081.131035][T20730] usb 2-1: Using ep0 maxpacket: 16 [ 2081.143867][T20730] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2081.163394][T20730] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2081.178246][T20730] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2081.195335][T20730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.208982][T20730] usb 2-1: Product: syz [ 2081.215810][T20730] usb 2-1: Manufacturer: syz [ 2081.220542][T20730] usb 2-1: SerialNumber: syz [ 2081.240020][T20730] usb 2-1: config 0 descriptor?? [ 2081.253104][T20730] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2081.262942][T20730] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 2081.892118][T20730] em28xx 2-1:0.0: chip ID is em2800 [ 2082.111879][T20730] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 2082.238221][T20730] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 2082.294412][T20730] em28xx 2-1:0.0: No AC97 audio processor [ 2082.331253][T20730] usb 2-1: USB disconnect, device number 27 [ 2082.338808][T20730] em28xx 2-1:0.0: Disconnecting em28xx [ 2082.385726][T20730] em28xx 2-1:0.0: Freeing device [ 2082.581040][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 2082.581062][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2083.111215][T12611] input: syz0 as /devices/virtual/input/input233 [ 2083.221017][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2085.711514][T13063] netlink: 92 bytes leftover after parsing attributes in process `syz.4.34652'. [ 2086.566988][ T30] audit: type=1326 audit(1765656588.513:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.34666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2086.590290][ T30] audit: type=1326 audit(1765656588.513:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.34666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2086.663276][ T30] audit: type=1326 audit(1765656588.513:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.34666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2086.709331][ T30] audit: type=1326 audit(1765656588.513:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.34666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2086.778629][ T30] audit: type=1326 audit(1765656588.523:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.34666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2086.833774][ T30] audit: type=1326 audit(1765656588.523:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.34666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=232 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2086.928285][ T30] audit: type=1326 audit(1765656588.523:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.34666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2087.010946][T27227] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2087.086764][T13125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.34674'. [ 2087.091219][ T30] audit: type=1326 audit(1765656588.523:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.34666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2087.140111][T13125] netem: change failed [ 2087.145981][ T30] audit: type=1326 audit(1765656588.523:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.34666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2087.168572][ T30] audit: type=1326 audit(1765656588.523:3260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13101 comm="syz.1.34666" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2087.221159][T27227] usb 2-1: Using ep0 maxpacket: 8 [ 2087.232400][T27227] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 2087.251061][T27227] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 2087.270033][T27227] usb 2-1: config 0 has no interface number 0 [ 2087.288962][T27227] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2087.334045][T27227] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2087.381711][T27227] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2087.402588][T27227] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 2087.415738][T27227] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 2087.435007][T27227] usb 2-1: Product: syz [ 2087.442783][T27227] usb 2-1: Manufacturer: syz [ 2087.471154][T27227] usb 2-1: config 0 descriptor?? [ 2087.503178][T13113] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2088.140599][T27227] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input234 [ 2088.326759][T13171] loop9: detected capacity change from 0 to 8 [ 2088.339774][T13171] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 2088.398285][T13171] loop9: partition table partially beyond EOD, truncated [ 2088.407076][T13171] loop9: p1 size 81768186 extends beyond EOD, truncated [ 2088.462080][T27227] usb 2-1: USB disconnect, device number 28 [ 2088.468284][ C1] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 2088.791434][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34697'. [ 2089.469418][T13232] random: crng reseeded on system resumption [ 2090.031243][T13254] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 2090.049253][T13254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2090.239863][T13261] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 2090.247572][T13261] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2090.317705][T13265] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.34720'. [ 2090.657741][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34726'. [ 2090.668419][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34726'. [ 2090.907509][T13296] netlink: 176 bytes leftover after parsing attributes in process `syz.3.34731'. [ 2091.225994][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34738'. [ 2091.251772][T13411] netlink: 72 bytes leftover after parsing attributes in process `syz.1.34738'. [ 2091.823627][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34748'. [ 2091.854507][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34748'. [ 2092.157642][T13554] netlink: 203340 bytes leftover after parsing attributes in process `syz.4.34754'. [ 2093.680505][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34775'. [ 2093.988224][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34781'. [ 2095.210989][T20730] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2095.381241][T20730] usb 5-1: Using ep0 maxpacket: 32 [ 2095.390318][T20730] usb 5-1: config 0 has an invalid interface number: 247 but max is 0 [ 2095.399021][T20730] usb 5-1: config 0 has no interface number 0 [ 2095.414099][T20730] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 2095.428177][T20730] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 2095.437129][T20730] usb 5-1: Product: syz [ 2095.443609][T20730] usb 5-1: Manufacturer: syz [ 2095.459794][T20730] usb 5-1: config 0 descriptor?? [ 2095.618744][T13714] sch_tbf: burst 0 is lower than device lo mtu (35) ! [ 2095.724692][T20730] usb 5-1: USB disconnect, device number 22 [ 2096.115959][T13741] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2096.339000][T13748] vlan0: entered promiscuous mode [ 2096.356555][T13748] bond0: entered promiscuous mode [ 2096.362997][T13748] bond9: entered promiscuous mode [ 2096.419260][T13753] bond0: entered promiscuous mode [ 2097.041170][T20727] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2097.210900][T20727] usb 5-1: Using ep0 maxpacket: 16 [ 2097.219201][T20727] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2097.242506][T20727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2097.257309][T20727] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2097.269595][T20727] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2097.280672][T20727] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2097.296621][T20727] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2097.306401][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2097.315248][T20727] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2097.323795][T20727] usb 5-1: Manufacturer: syz [ 2097.339820][T20727] usb 5-1: config 0 descriptor?? [ 2097.684183][T20727] rc_core: IR keymap rc-hauppauge not found [ 2097.691702][T20727] Registered IR keymap rc-empty [ 2097.704110][T20727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2097.742391][T20727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2097.789289][T20727] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 2097.809028][T20727] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input235 [ 2097.836999][T20727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2097.891361][T20727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2097.922066][T20727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2097.959963][T20727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2098.001494][T20727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2098.021908][T20727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2098.043946][T20727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2098.071260][T20727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2098.091237][T20727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2098.121228][T20727] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 2098.158181][T20727] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 2098.179491][T20727] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2098.207380][T20727] usb 5-1: USB disconnect, device number 23 [ 2098.236856][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34841'. [ 2098.478348][T14178] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.34844'. [ 2099.216016][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.34862'. [ 2099.232191][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.238759][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.861061][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2100.266377][T14364] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2100.862173][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34889'. [ 2101.053073][T14498] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[14498] [ 2101.228635][T14504] macsec1: entered promiscuous mode [ 2101.246121][T14504] ip6gretap0: entered promiscuous mode [ 2101.271231][T14504] macsec1: entered allmulticast mode [ 2101.287281][T14504] ip6gretap0: entered allmulticast mode [ 2101.984881][T14548] kvm: kvm [14547]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x81 [ 2102.151626][T27227] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2102.323196][T27227] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 2102.341347][T27227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2102.371240][T27227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2102.388104][T27227] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2102.402539][T27227] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2102.412736][T27227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.445809][T27227] usb 2-1: config 0 descriptor?? [ 2102.629861][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34921'. [ 2102.875207][T27227] plantronics 0003:047F:FFFF.0054: reserved main item tag 0xd [ 2102.912661][T27227] plantronics 0003:047F:FFFF.0054: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2103.136283][T27227] usb 2-1: USB disconnect, device number 29 [ 2104.373727][T14677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.34951'. [ 2104.803908][T14795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34960'. [ 2105.136354][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34968'. [ 2105.146613][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34968'. [ 2106.150155][T14970] netlink: 704 bytes leftover after parsing attributes in process `syz.1.34988'. [ 2106.171134][T14970] netlink: 704 bytes leftover after parsing attributes in process `syz.1.34988'. [ 2106.439450][T15086] loop2: detected capacity change from 0 to 7 [ 2106.471139][T26008] Dev loop2: unable to read RDB block 7 [ 2106.477047][T26008] loop2: AHDI p2 p3 [ 2106.483956][T26008] loop2: partition table partially beyond EOD, truncated [ 2106.492918][T26008] loop2: p2 start 13841266 is beyond EOD, truncated [ 2106.504594][T15086] Dev loop2: unable to read RDB block 7 [ 2106.513177][T15086] loop2: AHDI p2 p3 [ 2106.517368][T15086] loop2: partition table partially beyond EOD, truncated [ 2106.528300][T15086] loop2: p2 start 13841266 is beyond EOD, truncated [ 2106.711449][T15105] netlink: 'syz.2.34994': attribute type 29 has an invalid length. [ 2106.722657][T15105] netlink: 'syz.2.34994': attribute type 29 has an invalid length. [ 2106.814679][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34999'. [ 2106.850546][T15111] netlink: 600 bytes leftover after parsing attributes in process `syz.2.34994'. [ 2106.891095][T20727] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2107.051062][T20727] usb 5-1: Using ep0 maxpacket: 32 [ 2107.063530][T20727] usb 5-1: config 0 has an invalid interface number: 125 but max is 0 [ 2107.080923][T20727] usb 5-1: config 0 has no interface number 0 [ 2107.097465][T20727] usb 5-1: config 0 interface 125 has no altsetting 0 [ 2107.109176][T20727] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 2107.121658][T20727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.129929][T20727] usb 5-1: Product: syz [ 2107.134729][T20727] usb 5-1: Manufacturer: syz [ 2107.139570][T20727] usb 5-1: SerialNumber: syz [ 2107.152844][T20727] usb 5-1: config 0 descriptor?? [ 2107.406773][T20727] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 2107.864953][T15250] input: syz1 as /devices/virtual/input/input237 [ 2107.913713][T20727] usb 5-1: reset high-speed USB device number 24 using dummy_hcd [ 2108.251339][T27227] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2108.405149][T27227] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2108.414917][T27227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2108.423438][T27227] usb 2-1: Product: syz [ 2108.427753][T27227] usb 2-1: Manufacturer: syz [ 2108.432756][T27227] usb 2-1: SerialNumber: syz [ 2108.446429][T27227] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2108.495431][ T5079] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2108.517358][T20727] ueagle-atm 5-1:0.125: usbatm_usb_probe: bind failed: -19! [ 2108.772174][T20727] usb 2-1: USB disconnect, device number 30 [ 2108.810627][T20730] usb 5-1: USB disconnect, device number 24 [ 2109.541692][ T5079] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2109.571142][ T5079] ath9k_htc: Failed to initialize the device [ 2109.578032][T20727] usb 2-1: ath9k_htc: USB layer deinitialized [ 2109.763893][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2109.763914][ T30] audit: type=1326 audit(1765656611.743:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15322 comm="syz.1.35021" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x0 [ 2110.012065][T15335] sctp: [Deprecated]: syz.4.35025 (pid 15335) Use of int in max_burst socket option. [ 2110.012065][T15335] Use struct sctp_assoc_value instead [ 2111.348707][T15511] netlink: 40 bytes leftover after parsing attributes in process `syz.2.35039'. [ 2112.211179][T27226] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2112.378497][T27226] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2112.398094][T27226] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2112.411074][T27226] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2112.423720][T27226] usb 2-1: config 220 has no interface number 2 [ 2112.430222][T27226] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2112.444308][T27226] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2112.451685][T27226] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2112.458864][T27226] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2112.467924][T27226] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2112.477149][T27226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.485645][T27226] usb 2-1: Product: syz [ 2112.489842][T27226] usb 2-1: Manufacturer: syz [ 2112.494588][T27226] usb 2-1: SerialNumber: syz [ 2112.722837][T27226] usb 2-1: selecting invalid altsetting 0 [ 2112.730464][T27226] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2112.738776][T27226] uvcvideo 2-1:220.0: No valid video chain found. [ 2112.758001][T27226] usb 2-1: selecting invalid altsetting 0 [ 2112.781509][T27226] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 2112.806640][T27226] usb 2-1: USB disconnect, device number 31 [ 2112.995295][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35058'. [ 2113.183040][T15613] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35060'. [ 2113.600912][T27226] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2113.613320][T27227] hid_parser_main: 73 callbacks suppressed [ 2113.613344][T27227] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 2113.630126][T27227] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2113.757423][T27226] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2113.767162][T27226] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 2113.776339][T27226] usb 5-1: Product: syz [ 2113.782088][T27226] usb 5-1: Manufacturer: syz [ 2113.786835][T27226] usb 5-1: SerialNumber: syz [ 2113.804446][T27226] usb 5-1: config 0 descriptor?? [ 2113.836694][T27226] ch341 5-1:0.0: ch341-uart converter detected [ 2114.481295][T27227] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2114.633199][T27227] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 2114.642320][T27227] usb 2-1: config 160 has no interface number 0 [ 2114.648639][T27227] usb 2-1: config 160 interface 200 has no altsetting 0 [ 2114.661277][T27227] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 2114.671894][T27227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.680010][T27227] usb 2-1: Product: syz [ 2114.685149][T27227] usb 2-1: Manufacturer: syz [ 2114.689959][T27227] usb 2-1: SerialNumber: syz [ 2114.857852][T27226] usb 5-1: failed to send control message: -71 [ 2114.871415][T27226] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 2114.903771][T27226] usb 5-1: USB disconnect, device number 25 [ 2114.912298][T27226] ch341 5-1:0.0: device disconnected [ 2114.937820][T27227] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2114.952046][T27227] usb 2-1: MIDIStreaming interface descriptor not found [ 2115.033273][T27227] usb 2-1: USB disconnect, device number 32 [ 2115.099723][ T3805] udevd[3805]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2116.288273][T16036] tipc: Enabling of bearer rejected, already enabled [ 2116.297554][T16036] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 2116.885919][T16300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2117.371376][T27227] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2117.434071][T16342] binder: 16341:16342 ioctl 40046205 0 returned -22 [ 2117.541420][T27227] usb 2-1: Using ep0 maxpacket: 8 [ 2117.549032][T27227] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 2117.570101][T27227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2117.582736][T27227] usb 2-1: config 0 has no interface number 0 [ 2117.592452][T27227] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 2117.602583][T27227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.612283][T27227] usb 2-1: Product: syz [ 2117.616771][T27227] usb 2-1: Manufacturer: syz [ 2117.622115][T27227] usb 2-1: SerialNumber: syz [ 2117.648230][T27227] usb 2-1: config 0 descriptor?? [ 2117.891007][T27227] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 2117.907430][T27227] uvcvideo 2-1:0.31: No valid video chain found. [ 2118.129958][T27226] usb 2-1: USB disconnect, device number 33 [ 2119.494746][T16443] netlink: 60 bytes leftover after parsing attributes in process `syz.4.35121'. [ 2119.504354][T16443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.35121'. [ 2119.519740][T16443] netlink: 60 bytes leftover after parsing attributes in process `syz.4.35121'. [ 2120.671330][ T5079] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2120.864932][ T5079] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2120.877122][ T5079] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2120.886602][ T5079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2120.897227][ T5079] usb 5-1: config 0 descriptor?? [ 2120.918361][ T5079] pwc: Askey VC010 type 2 USB webcam detected. [ 2121.332696][ T5079] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2121.345384][ T5079] pwc: recv_control_msg error -32 req 02 val 2700 [ 2121.556645][ T5079] pwc: recv_control_msg error -71 req 04 val 1000 [ 2121.565159][ T5079] pwc: recv_control_msg error -71 req 04 val 1300 [ 2121.572385][ T5079] pwc: recv_control_msg error -71 req 04 val 1400 [ 2121.579404][ T5079] pwc: recv_control_msg error -71 req 02 val 2000 [ 2121.586479][ T5079] pwc: recv_control_msg error -71 req 02 val 2100 [ 2121.593724][ T5079] pwc: recv_control_msg error -71 req 04 val 1500 [ 2121.600606][ T5079] pwc: recv_control_msg error -71 req 02 val 2500 [ 2121.607867][ T5079] pwc: recv_control_msg error -71 req 02 val 2400 [ 2121.615115][ T5079] pwc: recv_control_msg error -71 req 02 val 2600 [ 2121.622790][ T5079] pwc: recv_control_msg error -71 req 02 val 2900 [ 2121.629620][ T5079] pwc: recv_control_msg error -71 req 02 val 2800 [ 2121.636941][ T5079] pwc: recv_control_msg error -71 req 04 val 1100 [ 2121.643886][ T5079] pwc: recv_control_msg error -71 req 04 val 1200 [ 2121.653421][ T5079] pwc: Registered as video103. [ 2121.664901][ T5079] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input238 [ 2121.695571][ T5079] usb 5-1: USB disconnect, device number 27 [ 2121.923246][T27226] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2122.091093][T27226] usb 2-1: Using ep0 maxpacket: 16 [ 2122.100311][T27226] usb 2-1: config 0 has no interfaces? [ 2122.109548][T27226] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2122.119224][T27226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2122.133455][T27226] usb 2-1: config 0 descriptor?? [ 2122.347756][T27226] usb 2-1: USB disconnect, device number 34 [ 2123.622415][T27227] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2123.679052][T16947] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.35171'. [ 2123.781420][T27227] usb 2-1: Using ep0 maxpacket: 16 [ 2123.811520][T27227] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2123.839517][T27227] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 2123.852270][T27227] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 24676, setting to 1024 [ 2123.865705][T27227] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2123.877632][T27227] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 2123.888500][T27227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.952071][T27227] usb 2-1: Product: syz [ 2123.957092][T27227] usb 2-1: Manufacturer: syz [ 2123.962590][T27227] usb 2-1: SerialNumber: syz [ 2123.976090][T27227] usb 2-1: config 0 descriptor?? [ 2124.217690][T27227] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input239 [ 2124.239011][T16974] netlink: 20 bytes leftover after parsing attributes in process `syz.3.35181'. [ 2124.297960][T16980] cifs: Unknown parameter 'fd' [ 2124.450443][T27227] usb 2-1: USB disconnect, device number 35 [ 2124.451705][ T5183] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 2124.911476][ T5079] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2125.081374][ T5079] usb 5-1: Using ep0 maxpacket: 32 [ 2125.090040][ T5079] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 2125.098867][ T5079] usb 5-1: config 0 has no interface number 0 [ 2125.106796][ T5079] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2125.122582][ T5079] usb 5-1: config 0 interface 85 has no altsetting 0 [ 2125.132323][ T5079] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2125.142560][ T5079] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.151528][ T5079] usb 5-1: Product: syz [ 2125.155925][ T5079] usb 5-1: Manufacturer: syz [ 2125.161716][ T5079] usb 5-1: SerialNumber: syz [ 2125.186206][ T5079] usb 5-1: config 0 descriptor?? [ 2125.822079][ T5079] appletouch 5-1:0.85: Geyser mode initialized. [ 2125.843763][ T5079] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input240 [ 2126.039094][ T5079] usb 5-1: USB disconnect, device number 28 [ 2126.101078][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2126.127765][ T5079] appletouch 5-1:0.85: input: appletouch disconnected [ 2126.771145][ T5079] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2126.923265][ T5079] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2126.932327][ T5079] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2126.942986][ T5079] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2126.953326][ T5079] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2126.977631][ T5079] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2126.993863][ T5079] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2127.003776][ T5079] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2127.014931][ T5079] usb 2-1: Product: syz [ 2127.019247][ T5079] usb 2-1: Manufacturer: syz [ 2127.040454][ T5079] cdc_wdm 2-1:1.0: skipping garbage [ 2127.047694][ T5079] cdc_wdm 2-1:1.0: skipping garbage [ 2127.057034][ T5079] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2127.063900][ T5079] cdc_wdm 2-1:1.0: Unknown control protocol [ 2127.351730][ T5079] usb 2-1: USB disconnect, device number 36 [ 2127.554255][ T30] audit: type=1326 audit(1765656629.533:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17178 comm="syz.4.35209" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7fc00000 [ 2128.117116][T22509] hid-generic 0000:0000:0000.0056: unknown main item tag 0x7 [ 2128.125074][T22509] hid-generic 0000:0000:0000.0056: ignoring exceeding usage max [ 2128.134374][T22509] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 2128.142067][T22509] hid-generic 0000:0000:0000.0056: unknown main item tag 0x6 [ 2128.149499][T22509] hid-generic 0000:0000:0000.0056: reserved main item tag 0xd [ 2128.158969][T22509] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2128.240494][T17347] fido_id[17347]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2128.311064][T27227] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2128.465084][T27227] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 2128.474763][T27227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.483203][T27227] usb 5-1: Product: syz [ 2128.487503][T27227] usb 5-1: Manufacturer: syz [ 2128.492414][T27227] usb 5-1: SerialNumber: syz [ 2128.505052][T27227] hub 5-1:24.0: bad descriptor, ignoring hub [ 2128.513572][T27227] hub 5-1:24.0: probe with driver hub failed with error -5 [ 2128.561038][T22509] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2128.705546][T27227] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 2128.710969][T22509] usb 2-1: Using ep0 maxpacket: 16 [ 2128.720062][T27227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2128.721732][T22509] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2128.730743][T27227] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 2128.741463][T22509] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2128.751542][T27227] usb 5-1: media controller created [ 2128.760578][T22509] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2128.772123][T22509] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 2128.779465][T27227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2128.782182][T22509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.812755][T22509] usb 2-1: config 0 descriptor?? [ 2128.847491][T27227] DVB: Unable to find symbol dib7000p_attach() [ 2128.856283][T27227] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 2128.925238][T27227] rc_core: IR keymap rc-dib0700-rc5 not found [ 2128.932708][T27227] Registered IR keymap rc-empty [ 2128.937977][T27227] dvb-usb: could not initialize remote control. [ 2128.944913][T27227] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 2128.964658][T27227] usb 5-1: USB disconnect, device number 29 [ 2129.013198][T27227] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 2129.231773][T22509] hid (null): invalid report_size 21303 [ 2129.237899][T22509] hid (null): unknown global tag 0xc [ 2129.257303][T22509] cougar 0003:060B:500A.0057: usage count exceeds max: fixing up report descriptor [ 2129.267371][T22509] cougar 0003:060B:500A.0057: unexpected long global item [ 2129.275632][T22509] cougar 0003:060B:500A.0057: parse failed [ 2129.281784][T22509] cougar 0003:060B:500A.0057: probe with driver cougar failed with error -22 [ 2129.357479][T17389] netlink: 372 bytes leftover after parsing attributes in process `syz.2.35229'. [ 2129.465897][T22509] usb 2-1: USB disconnect, device number 37 [ 2130.091104][ T5079] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2130.251228][ T5079] usb 5-1: Using ep0 maxpacket: 8 [ 2130.264255][ T5079] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2130.313765][ T5079] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2130.324337][ T5079] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 2130.336523][ T5079] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 2130.350063][ T5079] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2130.359937][ T5079] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.381935][ T5079] hub 5-1:1.0: bad descriptor, ignoring hub [ 2130.387955][ T5079] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2130.402128][ T5079] cdc_wdm 5-1:1.0: skipping garbage [ 2130.407581][ T5079] cdc_wdm 5-1:1.0: skipping garbage [ 2130.415818][ T5079] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2130.422730][ T5079] cdc_wdm 5-1:1.0: Unknown control protocol [ 2131.062678][T22509] usb 5-1: USB disconnect, device number 30 [ 2131.246334][ T30] audit: type=1326 audit(1765656633.223:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17666 comm="syz.0.35248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2131.275348][ T30] audit: type=1326 audit(1765656633.223:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17666 comm="syz.0.35248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2131.298985][ T30] audit: type=1326 audit(1765656633.223:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17666 comm="syz.0.35248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2131.324372][ T30] audit: type=1326 audit(1765656633.223:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17666 comm="syz.0.35248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2131.371535][ T30] audit: type=1326 audit(1765656633.223:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17666 comm="syz.0.35248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2131.401142][ T30] audit: type=1326 audit(1765656633.223:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17666 comm="syz.0.35248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2131.426787][ T30] audit: type=1326 audit(1765656633.223:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17666 comm="syz.0.35248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2131.469050][ T30] audit: type=1326 audit(1765656633.223:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17666 comm="syz.0.35248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2131.514306][ T30] audit: type=1326 audit(1765656633.223:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17666 comm="syz.0.35248" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7fc3539 code=0x7ffc0000 [ 2131.635673][T17675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35251'. [ 2132.051353][T22509] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2132.195528][T17725] netlink: 'syz.1.35260': attribute type 10 has an invalid length. [ 2132.220867][T22509] usb 5-1: Using ep0 maxpacket: 32 [ 2132.250295][T22509] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 2132.270711][T22509] usb 5-1: config 0 has no interface number 0 [ 2132.290501][T22509] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2132.323152][T22509] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.345945][T22509] usb 5-1: Product: syz [ 2132.350357][T22509] usb 5-1: Manufacturer: syz [ 2132.371342][T22509] usb 5-1: SerialNumber: syz [ 2132.391750][T22509] usb 5-1: config 0 descriptor?? [ 2132.425740][T22509] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2132.501058][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2132.632213][T22509] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2132.656177][T22509] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2132.984192][T17747] netlink: 112 bytes leftover after parsing attributes in process `syz.1.35266'. [ 2133.024409][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2133.025090][ T5079] usb 5-1: USB disconnect, device number 31 [ 2133.062709][ T5079] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2133.097317][ T5079] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2133.116115][ T5079] quatech2 5-1:0.51: device disconnected [ 2133.154108][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2133.154128][ T30] audit: type=1326 audit(1765656635.133:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.1.35268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2133.189204][ T30] audit: type=1326 audit(1765656635.133:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.1.35268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2133.222461][ T30] audit: type=1326 audit(1765656635.133:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.1.35268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2133.247330][ T30] audit: type=1326 audit(1765656635.133:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.1.35268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2133.273116][ T30] audit: type=1326 audit(1765656635.133:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.1.35268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2133.297321][ T30] audit: type=1326 audit(1765656635.133:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.1.35268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2133.322575][ T30] audit: type=1326 audit(1765656635.133:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.1.35268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2133.345801][ T30] audit: type=1326 audit(1765656635.133:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.1.35268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2133.369733][ T30] audit: type=1326 audit(1765656635.133:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.1.35268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2133.401765][ T30] audit: type=1326 audit(1765656635.143:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.1.35268" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 2133.669385][T17886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.35275'. [ 2133.682074][T17886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.35275'. [ 2134.021195][T22509] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2134.091301][T27227] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2134.170949][T22509] usb 2-1: Using ep0 maxpacket: 8 [ 2134.178363][T22509] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2134.187167][T22509] usb 2-1: config 0 has no interface number 0 [ 2134.193973][T22509] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2134.205897][T22509] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2134.216077][T22509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2134.226790][T22509] usb 2-1: config 0 descriptor?? [ 2134.243819][T22509] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2134.251179][T27227] usb 5-1: Using ep0 maxpacket: 32 [ 2134.266995][T27227] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 2134.277596][T27227] usb 5-1: config 0 has no interface number 0 [ 2134.283994][T27227] usb 5-1: config 0 interface 230 has no altsetting 0 [ 2134.295044][T27227] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 2134.305131][T27227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.313833][T27227] usb 5-1: Product: syz [ 2134.318175][T27227] usb 5-1: Manufacturer: syz [ 2134.323347][T27227] usb 5-1: SerialNumber: syz [ 2134.332285][T27227] usb 5-1: config 0 descriptor?? [ 2134.341229][T27227] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 2134.362652][T27227] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 2134.765273][T18023] loop2: detected capacity change from 0 to 7 [ 2134.774150][T18023] Dev loop2: unable to read RDB block 7 [ 2134.779887][T18023] loop2: unable to read partition table [ 2134.787153][T18023] loop2: partition table beyond EOD, truncated [ 2134.794137][T18023] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2135.026052][T18036] netlink: 60 bytes leftover after parsing attributes in process `syz.3.35284'. [ 2135.134972][T18041] input: syz1 as /devices/virtual/input/input242 [ 2135.145277][T18041] input: failed to attach handler leds to device input242, error: -6 [ 2135.270522][T18048] netlink: 5 bytes leftover after parsing attributes in process `syz.3.35287'. [ 2135.279978][T18048] netlink: 5 bytes leftover after parsing attributes in process `syz.3.35287'. [ 2135.504583][T18059] kvm: user requested TSC rate below hardware speed [ 2135.567564][ T5079] usb 2-1: USB disconnect, device number 38 [ 2135.907493][T18083] UHID_CREATE from different security context by process 14581 (syz.0.35296), this is not allowed. [ 2135.928674][T22509] hid-generic 0000:0000:0004.0058: unknown main item tag 0x0 [ 2135.938517][T22509] hid-generic 0000:0000:0004.0058: unknown main item tag 0x0 [ 2135.951112][T22509] hid-generic 0000:0000:0004.0058: unknown main item tag 0x0 [ 2135.959034][T22509] hid-generic 0000:0000:0004.0058: unknown main item tag 0x0 [ 2135.967507][T22509] hid-generic 0000:0000:0004.0058: unknown main item tag 0x0 [ 2135.976696][T22509] hid-generic 0000:0000:0004.0058: unknown main item tag 0x0 [ 2135.985210][T22509] hid-generic 0000:0000:0004.0058: unknown main item tag 0x0 [ 2135.993574][T22509] hid-generic 0000:0000:0004.0058: unknown main item tag 0x0 [ 2136.001576][T22509] hid-generic 0000:0000:0004.0058: unknown main item tag 0x0 [ 2136.009531][T22509] hid-generic 0000:0000:0004.0058: unknown main item tag 0x0 [ 2136.043985][T22509] hid-generic 0000:0000:0004.0058: hidraw0: HID v0.03 Device [syz1] on syz0 [ 2136.172542][T18087] fido_id[18087]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2136.568202][T18210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35303'. [ 2136.651639][T27227] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 2136.804751][T22509] usb 5-1: USB disconnect, device number 32 [ 2137.240731][T18253] @: renamed from vlan0 (while UP) [ 2137.508115][T18270] binder: 18269:18270 ioctl c0306201 800003c0 returned -14 [ 2138.881935][T18328] lo: entered allmulticast mode [ 2138.892248][T18328] pim6reg: left allmulticast mode [ 2138.897781][T18328] lo: left allmulticast mode [ 2139.002319][T18334] binder: 18333:18334 ioctl c0306201 0 returned -14 [ 2139.010667][T18334] binder: 18333:18334 ioctl 541b 0 returned -22 [ 2139.838235][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35358'. [ 2140.360342][T18714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.35368'. [ 2140.381198][T18714] netlink: 40 bytes leftover after parsing attributes in process `syz.1.35368'. [ 2140.835302][T18739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35376'. [ 2141.408871][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2141.408893][ T30] audit: type=1326 audit(1765656643.383:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18737 comm="syz.3.35375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2141.477869][ T30] audit: type=1326 audit(1765656643.413:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18737 comm="syz.3.35375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2141.526421][ T30] audit: type=1326 audit(1765656643.413:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18737 comm="syz.3.35375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2141.581154][ T30] audit: type=1326 audit(1765656643.413:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18737 comm="syz.3.35375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f41558 code=0x7ffc0000 [ 2141.618289][ T30] audit: type=1326 audit(1765656643.413:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18737 comm="syz.3.35375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2141.647711][ T30] audit: type=1326 audit(1765656643.423:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18737 comm="syz.3.35375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2141.670976][T22509] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2141.726204][ T30] audit: type=1326 audit(1765656643.423:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18737 comm="syz.3.35375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f41558 code=0x7ffc0000 [ 2141.754090][ T30] audit: type=1326 audit(1765656643.423:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18737 comm="syz.3.35375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f41558 code=0x7ffc0000 [ 2141.783056][ T30] audit: type=1326 audit(1765656643.423:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18737 comm="syz.3.35375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x7ffc0000 [ 2141.807879][ T30] audit: type=1326 audit(1765656643.423:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18737 comm="syz.3.35375" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f41558 code=0x7ffc0000 [ 2141.821210][T22509] usb 2-1: Using ep0 maxpacket: 8 [ 2141.858925][T22509] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2141.864203][T18786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35393'. [ 2141.880430][T22509] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2141.895808][T22509] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2141.919006][T22509] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2141.939842][T22509] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2141.967130][T22509] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2141.980172][T22509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2142.223693][T22509] usb 2-1: usb_control_msg returned -32 [ 2142.229968][T22509] usbtmc 2-1:16.0: can't read capabilities [ 2142.750934][T27227] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2142.758960][ T5079] usb 2-1: USB disconnect, device number 39 [ 2142.951320][T27227] usb 5-1: Using ep0 maxpacket: 32 [ 2142.969862][T27227] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2142.979584][T27227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.026369][T27227] usb 5-1: Product: syz [ 2143.030865][T27227] usb 5-1: Manufacturer: syz [ 2143.036223][T27227] usb 5-1: SerialNumber: syz [ 2143.060550][T27227] usb 5-1: config 0 descriptor?? [ 2143.073270][T27227] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2143.212535][T18957] tipc: Enabling of bearer rejected, already enabled [ 2144.191629][T27227] gspca_ov534_9: reg_w failed -110 [ 2144.510891][T27227] gspca_ov534_9: Unknown sensor 0000 [ 2144.510978][T27227] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 2144.920126][T22509] usb 5-1: USB disconnect, device number 33 [ 2144.998336][T19230] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.35427'. [ 2146.060943][T19274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35442'. [ 2146.306876][T19286] trusted_key: syz.4.35447 sent an empty control message without MSG_MORE. [ 2146.672331][T20718] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2146.841231][T20718] usb 5-1: Using ep0 maxpacket: 8 [ 2146.868797][T20718] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2146.926375][T20718] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2146.944766][T20718] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2146.956072][T20718] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2146.971313][T20718] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2146.986609][T20718] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2146.997182][T20718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.275788][T20718] usb 5-1: usb_control_msg returned -32 [ 2147.324805][T20718] usbtmc 5-1:16.0: can't read capabilities [ 2147.657752][T19351] usbtmc 5-1:16.0: usb_bulk_msg returned -71 [ 2147.856614][T19360] macvlan1: entered promiscuous mode [ 2147.858129][T27226] usb 5-1: USB disconnect, device number 34 [ 2147.864813][T19360] ipvlan0: entered promiscuous mode [ 2147.896812][T19360] ipvlan0: left promiscuous mode [ 2147.913953][T19360] macvlan1: left promiscuous mode [ 2148.849575][T19428] netlink: 64 bytes leftover after parsing attributes in process `syz.1.35492'. [ 2149.075492][T19441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.35498'. [ 2149.086582][T19441] netlink: 28 bytes leftover after parsing attributes in process `syz.4.35498'. [ 2149.981564][T22509] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2150.144903][T22509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2150.162234][T22509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2150.173002][T22509] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2150.187821][T22509] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2150.197668][T22509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.221014][T22509] usb 2-1: config 0 descriptor?? [ 2150.644942][T22509] hid_parser_main: 91 callbacks suppressed [ 2150.644970][T22509] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 2150.663346][T22509] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 2150.682147][T22509] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 2150.689996][T22509] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 2150.710313][T22509] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 2150.722878][T22509] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 2150.736045][T22509] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 2150.745024][T22509] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 2150.753171][T22509] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 2150.760926][T22509] plantronics 0003:047F:FFFF.0059: unknown main item tag 0x0 [ 2150.780691][T22509] plantronics 0003:047F:FFFF.0059: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2150.827563][T19634] loop2: detected capacity change from 0 to 7 [ 2150.837080][T19634] Dev loop2: unable to read RDB block 7 [ 2150.856925][T19634] loop2: unable to read partition table [ 2150.867999][T19634] loop2: partition table beyond EOD, truncated [ 2150.875146][T19634] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2150.926075][T20718] usb 2-1: USB disconnect, device number 40 [ 2152.016089][T19825] netlink: 44 bytes leftover after parsing attributes in process `syz.3.35535'. [ 2152.035547][T19825] netlink: 43 bytes leftover after parsing attributes in process `syz.3.35535'. [ 2152.050380][T19825] netlink: 'syz.3.35535': attribute type 6 has an invalid length. [ 2152.059611][T19825] netlink: 'syz.3.35535': attribute type 5 has an invalid length. [ 2152.079836][T19825] netlink: 43 bytes leftover after parsing attributes in process `syz.3.35535'. [ 2152.620393][T19827] syz.4.35534 (19827): drop_caches: 3 [ 2153.253205][T20089] binder: 20087:20089 ioctl 4018620d 0 returned -22 [ 2153.361968][T27226] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 2153.523385][T27226] usb 5-1: config 0 has no interfaces? [ 2153.537134][T27226] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 2153.548153][T27226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.564447][T27226] usb 5-1: config 0 descriptor?? [ 2153.673616][T20217] loop9: detected capacity change from 0 to 7 [ 2153.686566][ T5394] Dev loop9: unable to read RDB block 7 [ 2153.692533][ T5394] loop9: unable to read partition table [ 2153.698809][ T5394] loop9: partition table beyond EOD, truncated [ 2153.709203][T20217] Dev loop9: unable to read RDB block 7 [ 2153.715390][T20217] loop9: unable to read partition table [ 2153.722004][T20217] loop9: partition table beyond EOD, truncated [ 2153.728302][T20217] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2153.833741][T22509] usb 5-1: USB disconnect, device number 35 [ 2153.882596][T27226] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2154.041193][T27226] usb 2-1: Using ep0 maxpacket: 8 [ 2154.050015][T27226] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2154.058400][T27226] usb 2-1: config 16 has an invalid interface number: 3 but max is 0 [ 2154.066927][T27226] usb 2-1: config 16 has no interface number 0 [ 2154.073265][T27226] usb 2-1: config 16 interface 3 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2154.083230][T27226] usb 2-1: config 16 interface 3 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2154.094319][T27226] usb 2-1: config 16 interface 3 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2154.106272][T27226] usb 2-1: config 16 interface 3 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2154.122649][T27226] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2154.133207][T27226] usb 2-1: New USB device strings: Mfr=0, Product=199, SerialNumber=0 [ 2154.172573][T27226] usb 2-1: Product: syz [ 2154.369240][T20251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35566'. [ 2154.385604][T27226] usb 2-1: usb_control_msg returned -32 [ 2154.408933][T27226] usbtmc 2-1:16.3: can't read capabilities [ 2154.542544][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35567'. [ 2154.847817][T22509] usb 2-1: USB disconnect, device number 41 [ 2155.413075][T20507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.35581'. [ 2156.422422][T20247] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 2156.424212][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 2156.435794][T20247] Bluetooth: hci3: Opcode 0x0406 failed: -110 [ 2156.658048][T20635] Set syz0 is full, maxelem 0 reached [ 2156.672155][T20635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.35593'. [ 2157.051216][T27227] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2157.104002][T20651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.35597'. [ 2157.271136][T27227] usb 2-1: Using ep0 maxpacket: 8 [ 2157.289512][T27227] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 2157.318959][T27227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2157.328681][T27227] usb 2-1: Product: syz [ 2157.333397][T27227] usb 2-1: Manufacturer: syz [ 2157.341445][T27227] usb 2-1: SerialNumber: syz [ 2157.359183][T27227] usb 2-1: config 0 descriptor?? [ 2157.404619][T27227] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 2158.412321][T20694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35613'. [ 2158.425124][T27227] gspca_sonixj: reg_w1 err -71 [ 2158.462925][T27227] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 2158.485091][T27227] usb 2-1: USB disconnect, device number 42 [ 2158.501450][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 2159.308177][T20741] netlink: 48 bytes leftover after parsing attributes in process `syz.4.35625'. [ 2159.319410][T20743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35627'. [ 2159.700921][T20730] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2159.871020][T20730] usb 5-1: Using ep0 maxpacket: 8 [ 2159.882570][T20730] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 2159.893616][T20730] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2159.905461][T20730] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2159.916174][T20730] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2159.931729][T20730] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2159.948234][T20730] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2159.958311][T20730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2160.211038][T27227] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2160.361837][T27227] usb 2-1: Using ep0 maxpacket: 16 [ 2160.369066][T20794] gretap0: entered promiscuous mode [ 2160.369664][T27227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2160.388244][T27227] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2160.399658][T27227] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2160.409950][T27227] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2160.426804][T27227] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2160.436696][T27227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2160.445555][T27227] usb 2-1: SerialNumber: syz [ 2160.463087][T27227] hub 2-1:1.0: bad descriptor, ignoring hub [ 2160.469342][T27227] hub 2-1:1.0: probe with driver hub failed with error -5 [ 2160.478693][T27227] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 2160.666347][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.673272][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.748032][T20806] usbtmc 5-1:16.0: simple usb_control_msg returned 0 [ 2160.949703][T27227] usb 5-1: USB disconnect, device number 36 [ 2161.232710][T27227] usb 2-1: USB disconnect, device number 43 [ 2161.586440][T20956] dummy0: entered promiscuous mode [ 2161.594101][T20956] bond0: entered promiscuous mode [ 2161.599190][T20956] bond_slave_0: entered promiscuous mode [ 2161.606351][T20956] bond_slave_1: entered promiscuous mode [ 2161.617536][T20956] hsr1: entered allmulticast mode [ 2161.623733][T20956] dummy0: entered allmulticast mode [ 2161.629642][T20956] bond0: entered allmulticast mode [ 2161.650937][T20956] bond_slave_0: entered allmulticast mode [ 2161.657434][T20956] bond_slave_1: entered allmulticast mode [ 2161.801032][T27227] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2161.963287][T27227] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2161.972897][T27227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2161.986143][T27227] usb 5-1: config 0 descriptor?? [ 2161.997191][T27227] cp210x 5-1:0.0: cp210x converter detected [ 2162.406576][T27227] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 2162.450465][T27227] usb 5-1: cp210x converter now attached to ttyUSB0 [ 2162.651523][T27227] usb 5-1: USB disconnect, device number 37 [ 2162.675248][T27227] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2162.691441][T27227] cp210x 5-1:0.0: device disconnected [ 2163.480956][T20730] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2163.631023][T20730] usb 5-1: Using ep0 maxpacket: 8 [ 2163.638572][T20730] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2163.649421][T20730] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2163.659625][T20730] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 2163.671328][T20730] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18277, setting to 1024 [ 2163.683423][T20730] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 2163.693321][T20730] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.705575][T21457] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2163.715729][T20730] hub 5-1:1.0: bad descriptor, ignoring hub [ 2163.723038][T20730] hub 5-1:1.0: probe with driver hub failed with error -5 [ 2163.731381][T20730] cdc_wdm 5-1:1.0: skipping garbage [ 2163.736826][T20730] cdc_wdm 5-1:1.0: skipping garbage [ 2163.744179][T20730] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2163.750276][T20730] cdc_wdm 5-1:1.0: Unknown control protocol [ 2163.993394][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2164.000670][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2164.007013][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 2164.269270][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2164.276136][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2164.283080][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2164.290140][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2164.297850][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2164.304577][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2164.311841][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2164.318719][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2164.326126][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2164.333097][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2164.339817][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2164.346541][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2164.356339][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2164.362984][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2164.369439][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2164.376067][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2164.382895][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2164.389527][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2166.261791][T22509] usb 5-1: USB disconnect, device number 38 [ 2167.875022][T21568] netlink: 28 bytes leftover after parsing attributes in process `syz.2.35699'. [ 2168.275714][T21580] Context (ID=0x0) not attached to queue pair (handle=0x4d7:0x0) [ 2169.651108][T22509] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 2169.812944][T22509] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2169.823074][T22509] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2169.836432][T22509] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2169.845699][T22509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.063093][T22509] usb 5-1: usb_control_msg returned -32 [ 2170.069252][T22509] usbtmc 5-1:16.0: can't read capabilities [ 2172.471221][T27227] usb 5-1: USB disconnect, device number 39 [ 2172.911274][T22509] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2173.093792][T22509] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2173.121378][T22509] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2173.145531][T22509] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2173.167580][T22509] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2173.186538][T22509] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2173.206958][T22509] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2173.223998][T22509] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2173.234073][T22509] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2173.244155][T22509] usb 2-1: Product: syz [ 2173.249679][T22509] usb 2-1: Manufacturer: syz [ 2173.272051][T21909] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2173.282046][T22509] cdc_wdm 2-1:1.0: skipping garbage [ 2173.287299][T22509] cdc_wdm 2-1:1.0: skipping garbage [ 2173.326600][T22509] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2173.335653][T22509] cdc_wdm 2-1:1.0: Unknown control protocol [ 2173.441225][T27227] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2173.503861][ C1] wdm_int_callback: 10014 callbacks suppressed [ 2173.503901][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2173.516770][ C1] wdm_int_callback: 10014 callbacks suppressed [ 2173.516786][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2173.529477][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 2173.530205][T22509] usb 2-1: USB disconnect, device number 44 [ 2173.536183][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 2173.536204][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2173.611731][T27227] usb 5-1: Using ep0 maxpacket: 16 [ 2173.623476][T27227] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2173.642068][T27227] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 2173.667802][T27227] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2173.683382][T27227] usb 5-1: config 1 interface 0 has no altsetting 0 [ 2173.694334][T27227] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2173.704525][T27227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.713156][T27227] usb 5-1: Product: syz [ 2173.717412][T27227] usb 5-1: Manufacturer: syz [ 2173.722237][T27227] usb 5-1: SerialNumber: syz [ 2174.153272][T21931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.165515][T21931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2174.179090][T27227] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 2174.199515][T27227] usb 5-1: USB disconnect, device number 40 [ 2174.214483][T27227] usblp0: removed [ 2174.835431][T22203] cifs: Unknown parameter 'f,' [ 2175.241130][T22509] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 2175.398142][T22509] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2175.409173][T22509] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2175.418805][T22509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2175.430253][T22509] usb 2-1: config 0 descriptor?? [ 2175.436615][T22209] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2175.892295][T22509] elan 0003:04F3:0755.005A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 2177.501955][T20718] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2177.661032][T20718] usb 5-1: Using ep0 maxpacket: 16 [ 2177.672964][T20718] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2177.698323][T20718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.718539][T20718] usb 5-1: Product: syz [ 2177.728610][T20718] usb 5-1: Manufacturer: syz [ 2177.738760][T20718] usb 5-1: SerialNumber: syz [ 2177.759048][T20718] usb 5-1: config 0 descriptor?? [ 2177.778129][T27227] usb 2-1: USB disconnect, device number 45 [ 2177.792654][T20718] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2178.594418][T20718] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 2178.630521][T20718] usb 5-1: USB disconnect, device number 41 [ 2178.961205][T20718] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2179.111282][T20718] usb 2-1: Using ep0 maxpacket: 8 [ 2179.130403][T20718] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2179.152613][T20718] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2179.163260][T20718] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2179.173896][T20718] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2179.190366][T20718] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2179.205388][T20718] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2179.215254][T20718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.388303][T22517] netlink: 'syz.4.35807': attribute type 1 has an invalid length. [ 2179.447144][T22517] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2180.163938][T22509] usb 2-1: USB disconnect, device number 46 [ 2180.771074][T20718] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2180.782700][T22707] input: syz0 as /devices/virtual/input/input243 [ 2180.931583][T20718] usb 2-1: Using ep0 maxpacket: 32 [ 2180.944120][T20718] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2180.965966][T20718] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2180.974416][T20718] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2180.985157][T20718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.002707][T20718] usb 2-1: config 0 descriptor?? [ 2181.058686][T22730] batadv_slave_1: entered promiscuous mode [ 2181.067525][T22729] batadv_slave_1: left promiscuous mode [ 2181.198379][T22736] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.35830'. [ 2181.921438][T20718] usbhid 2-1:0.0: can't add hid device: -71 [ 2181.928437][T20718] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2181.965769][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2181.965789][ T30] audit: type=1326 audit(1765656683.943:3361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.4.35842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2181.980984][T20718] usb 2-1: USB disconnect, device number 47 [ 2182.061720][ T30] audit: type=1326 audit(1765656683.973:3362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.4.35842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2182.119318][ T30] audit: type=1326 audit(1765656683.973:3363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.4.35842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2182.160885][ T30] audit: type=1326 audit(1765656683.973:3364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.4.35842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2182.211269][ T30] audit: type=1326 audit(1765656683.973:3365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.4.35842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2182.261057][ T30] audit: type=1326 audit(1765656683.973:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.4.35842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=433 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2182.311149][ T30] audit: type=1326 audit(1765656683.973:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.4.35842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2182.346216][ T30] audit: type=1326 audit(1765656683.973:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22877 comm="syz.4.35842" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000 [ 2183.704983][T23377] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 2184.341092][T27227] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 2184.406552][T23615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.35874'. [ 2184.499639][T27227] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.538584][T27227] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2184.549695][T27227] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2184.559804][T27227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.591978][T27227] usb 5-1: config 0 descriptor?? [ 2184.644335][T27227] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2184.657073][T27227] dvb-usb: bulk message failed: -22 (3/0) [ 2184.670376][T27227] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2184.695138][T27227] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2184.735710][T27227] usb 5-1: media controller created [ 2184.756154][T27227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2184.801860][T27227] dvb-usb: bulk message failed: -22 (6/0) [ 2184.807888][T27227] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2184.839565][T27227] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input244 [ 2184.879430][T27227] dvb-usb: schedule remote query interval to 150 msecs. [ 2184.896153][T27227] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2184.923658][T27227] usb 5-1: USB disconnect, device number 42 [ 2184.987011][T27227] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2185.824272][T23813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35895'. [ 2185.833857][T23813] netlink: 'syz.3.35895': attribute type 21 has an invalid length. [ 2186.261516][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2186.942003][T24164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35914'. [ 2187.026016][T24164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.35914'. [ 2187.221139][T20718] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2187.380856][T20718] usb 2-1: Using ep0 maxpacket: 16 [ 2187.394680][T20718] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 2187.404080][T20718] usb 2-1: config 0 has no interface number 0 [ 2187.410629][T20718] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 2187.422541][T20718] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 2187.440038][T20718] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 2187.466095][T20718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.485320][T20718] usb 2-1: Product: syz [ 2187.494587][T20718] usb 2-1: Manufacturer: syz [ 2187.520295][T20718] usb 2-1: SerialNumber: syz [ 2187.536223][T20718] usb 2-1: config 0 descriptor?? [ 2187.554352][T24168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2187.562611][T24168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2187.797396][T24168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2187.831558][T24168] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2188.453935][T20718] asix 2-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x80 [ 2188.581042][T22509] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2188.660517][T27226] usb 2-1: USB disconnect, device number 48 [ 2188.764494][T22509] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2188.777233][T22509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2188.788590][T22509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2188.800886][T22509] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2188.814795][T22509] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2188.824305][T22509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.835179][T22509] usb 5-1: config 0 descriptor?? [ 2189.258677][T22509] hid_parser_main: 5 callbacks suppressed [ 2189.258703][T22509] plantronics 0003:047F:FFFF.005B: unknown main item tag 0x0 [ 2189.284056][T22509] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2189.561161][T20718] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2189.713398][T20718] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 2189.721920][T20718] usb 2-1: config 1 has no interface number 0 [ 2189.729291][T20718] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 2189.741680][T20718] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 2189.751653][T20718] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2189.765048][T20718] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 2189.774790][T20718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.783342][T20718] usb 2-1: Product: syz [ 2189.787630][T20718] usb 2-1: Manufacturer: syz [ 2189.792308][T20718] usb 2-1: SerialNumber: syz [ 2189.800382][T24279] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 2190.014480][T24279] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 2190.234991][T20718] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07 [ 2190.836734][T20730] usb 2-1: USB disconnect, device number 49 [ 2190.853629][T20730] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem [ 2190.904687][T20730] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 2191.341119][T22509] usb 5-1: USB disconnect, device number 43 [ 2191.892786][T24448] netlink: 'syz.0.35949': attribute type 9 has an invalid length. [ 2192.901161][T22509] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 2192.913755][T24495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35966'. [ 2193.082281][T22509] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2193.112008][T22509] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2193.136566][T22509] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2193.149564][T22509] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.392377][T22509] usb 2-1: GET_CAPABILITIES returned 0 [ 2193.398181][T22509] usbtmc 2-1:16.0: can't read capabilities [ 2193.552139][T22509] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2193.600464][T20730] usb 2-1: USB disconnect, device number 50 [ 2193.724291][T22509] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2193.736952][T22509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2193.748581][T22509] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2193.758625][T22509] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2193.773344][T22509] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2193.783872][T22509] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.795206][T22509] usb 5-1: config 0 descriptor?? [ 2194.235219][T22509] plantronics 0003:047F:FFFF.005C: ignoring exceeding usage max [ 2194.291811][T22509] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 2194.475869][ T30] audit: type=1326 audit(1765656696.453:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24671 comm="syz.3.35981" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f41539 code=0x0 [ 2194.829589][T24687] netlink: 'syz.1.35987': attribute type 11 has an invalid length. [ 2194.838379][T24687] netlink: 36 bytes leftover after parsing attributes in process `syz.1.35987'. [ 2196.311136][T20730] usb 5-1: USB disconnect, device number 44 [ 2196.483326][T24966] netlink: 80 bytes leftover after parsing attributes in process `syz.1.36013'. [ 2196.509707][T24966] netlink: 80 bytes leftover after parsing attributes in process `syz.1.36013'. [ 2197.141760][T25093] [ 2197.144160][T25093] ===================================================== [ 2197.151110][T25093] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2197.158582][T25093] syzkaller #0 Tainted: G L [ 2197.164583][T25093] ----------------------------------------------------- [ 2197.171701][T25093] syz.3.36024/25093 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2197.179717][T25093] ffff88807e35cc90 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2197.189136][T25093] [ 2197.189136][T25093] and this task is already holding: [ 2197.196675][T25093] ffff888059d13028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2197.206872][T25093] which would create a new lock dependency: [ 2197.212951][T25093] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 2197.221424][T25093] [ 2197.221424][T25093] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2197.231142][T25093] (&dev->event_lock#2){..-.}-{3:3} [ 2197.231176][T25093] [ 2197.231176][T25093] ... which became SOFTIRQ-irq-safe at: [ 2197.244338][T25093] lock_acquire+0x117/0x340 [ 2197.248939][T25093] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2197.254243][T25093] input_event+0x76/0xe0 [ 2197.258758][T25093] xpad360_process_packet+0xda/0xdd0 [ 2197.264411][T25093] xpad_irq_in+0x14e/0x25f0 [ 2197.269098][T25093] __usb_hcd_giveback_urb+0x376/0x540 [ 2197.274909][T25093] dummy_timer+0x85f/0x45b0 [ 2197.279685][T25093] __hrtimer_run_queues+0x51c/0xc30 [ 2197.285159][T25093] hrtimer_run_softirq+0x187/0x2b0 [ 2197.290642][T25093] handle_softirqs+0x27d/0x850 [ 2197.295659][T25093] __irq_exit_rcu+0xca/0x1f0 [ 2197.300597][T25093] irq_exit_rcu+0x9/0x30 [ 2197.305017][T25093] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2197.311012][T25093] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2197.317282][T25093] __sanitizer_cov_trace_pc+0x5d/0x70 [ 2197.322848][T25093] usb_ep_queue+0x119/0x3a0 [ 2197.327575][T25093] raw_process_ep_io+0x595/0xd60 [ 2197.332892][T25093] raw_ioctl+0x2419/0x40d0 [ 2197.337523][T25093] __ia32_compat_sys_ioctl+0x543/0x840 [ 2197.343169][T25093] __do_fast_syscall_32+0x1f7/0x590 [ 2197.348840][T25093] do_fast_syscall_32+0x34/0x80 [ 2197.353839][T25093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2197.360529][T25093] [ 2197.360529][T25093] to a SOFTIRQ-irq-unsafe lock: [ 2197.367549][T25093] (tasklist_lock){.+.+}-{3:3} [ 2197.367575][T25093] [ 2197.367575][T25093] ... which became SOFTIRQ-irq-unsafe at: [ 2197.380467][T25093] ... [ 2197.380475][T25093] lock_acquire+0x117/0x340 [ 2197.387929][T25093] _raw_read_lock+0x36/0x50 [ 2197.392711][T25093] __do_wait+0xde/0x740 [ 2197.396974][T25093] do_wait+0x1e8/0x4f0 [ 2197.401239][T25093] kernel_wait+0xab/0x170 [ 2197.405758][T25093] call_usermodehelper_exec_work+0xbe/0x230 [ 2197.411740][T25093] process_scheduled_works+0xad1/0x1770 [ 2197.417392][T25093] worker_thread+0x8a0/0xda0 [ 2197.422068][T25093] kthread+0x711/0x8a0 [ 2197.426230][T25093] ret_from_fork+0x599/0xb30 [ 2197.430911][T25093] ret_from_fork_asm+0x1a/0x30 [ 2197.436136][T25093] [ 2197.436136][T25093] other info that might help us debug this: [ 2197.436136][T25093] [ 2197.446622][T25093] Chain exists of: [ 2197.446622][T25093] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 2197.446622][T25093] [ 2197.460385][T25093] Possible interrupt unsafe locking scenario: [ 2197.460385][T25093] [ 2197.468967][T25093] CPU0 CPU1 [ 2197.474594][T25093] ---- ---- [ 2197.479960][T25093] lock(tasklist_lock); [ 2197.484294][T25093] local_irq_disable(); [ 2197.491045][T25093] lock(&dev->event_lock#2); [ 2197.498428][T25093] lock(&client->buffer_lock); [ 2197.506064][T25093] [ 2197.509608][T25093] lock(&dev->event_lock#2); [ 2197.514476][T25093] [ 2197.514476][T25093] *** DEADLOCK *** [ 2197.514476][T25093] [ 2197.522715][T25093] 7 locks held by syz.3.36024/25093: [ 2197.528083][T25093] #0: ffff8880297ba118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 2197.537413][T25093] #1: ffff88801c356230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 2197.548042][T25093] #2: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 2197.557983][T25093] #3: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2197.568034][T25093] #4: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 2197.577214][T25093] #5: ffff888059d13028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2197.588186][T25093] #6: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2197.597423][T25093] [ 2197.597423][T25093] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2197.608263][T25093] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2197.613930][T25093] IN-SOFTIRQ-W at: [ 2197.618029][T25093] lock_acquire+0x117/0x340 [ 2197.624726][T25093] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2197.632020][T25093] input_event+0x76/0xe0 [ 2197.638089][T25093] xpad360_process_packet+0xda/0xdd0 [ 2197.645639][T25093] xpad_irq_in+0x14e/0x25f0 [ 2197.651977][T25093] __usb_hcd_giveback_urb+0x376/0x540 [ 2197.659365][T25093] dummy_timer+0x85f/0x45b0 [ 2197.665959][T25093] __hrtimer_run_queues+0x51c/0xc30 [ 2197.673163][T25093] hrtimer_run_softirq+0x187/0x2b0 [ 2197.680464][T25093] handle_softirqs+0x27d/0x850 [ 2197.687053][T25093] __irq_exit_rcu+0xca/0x1f0 [ 2197.693470][T25093] irq_exit_rcu+0x9/0x30 [ 2197.699668][T25093] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2197.707313][T25093] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2197.715123][T25093] __sanitizer_cov_trace_pc+0x5d/0x70 [ 2197.722503][T25093] usb_ep_queue+0x119/0x3a0 [ 2197.728834][T25093] raw_process_ep_io+0x595/0xd60 [ 2197.735697][T25093] raw_ioctl+0x2419/0x40d0 [ 2197.742136][T25093] __ia32_compat_sys_ioctl+0x543/0x840 [ 2197.749494][T25093] __do_fast_syscall_32+0x1f7/0x590 [ 2197.756559][T25093] do_fast_syscall_32+0x34/0x80 [ 2197.763668][T25093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2197.772204][T25093] INITIAL USE at: [ 2197.776987][T25093] lock_acquire+0x117/0x340 [ 2197.783331][T25093] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2197.790276][T25093] input_inject_event+0xa5/0x340 [ 2197.797053][T25093] kbd_led_trigger_activate+0xbc/0x100 [ 2197.804345][T25093] led_trigger_set+0x52d/0x950 [ 2197.810945][T25093] led_trigger_set_default+0x260/0x2a0 [ 2197.818177][T25093] led_classdev_register_ext+0x73d/0x960 [ 2197.825737][T25093] input_leds_connect+0x517/0x790 [ 2197.832510][T25093] input_register_device+0xd00/0x1170 [ 2197.840322][T25093] atkbd_connect+0x73b/0xa50 [ 2197.846678][T25093] serio_driver_probe+0x82/0xd0 [ 2197.853270][T25093] really_probe+0x26d/0xad0 [ 2197.859514][T25093] __driver_probe_device+0x18c/0x320 [ 2197.866670][T25093] driver_probe_device+0x4f/0x240 [ 2197.873436][T25093] __driver_attach+0x349/0x650 [ 2197.880121][T25093] bus_for_each_dev+0x233/0x2b0 [ 2197.886716][T25093] serio_handle_event+0x1f9/0x8d0 [ 2197.893571][T25093] process_scheduled_works+0xad1/0x1770 [ 2197.901212][T25093] worker_thread+0x8a0/0xda0 [ 2197.907805][T25093] kthread+0x711/0x8a0 [ 2197.913710][T25093] ret_from_fork+0x599/0xb30 [ 2197.920135][T25093] ret_from_fork_asm+0x1a/0x30 [ 2197.926751][T25093] } [ 2197.929337][T25093] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 2197.938550][T25093] -> (&client->buffer_lock){....}-{3:3} { [ 2197.944506][T25093] INITIAL USE at: [ 2197.948593][T25093] lock_acquire+0x117/0x340 [ 2197.954843][T25093] _raw_spin_lock+0x2e/0x40 [ 2197.961354][T25093] evdev_handle_get_val+0x70/0x9f0 [ 2197.968304][T25093] evdev_ioctl_handler+0x1202/0x1f10 [ 2197.975360][T25093] __ia32_compat_sys_ioctl+0x543/0x840 [ 2197.982487][T25093] __do_fast_syscall_32+0x1f7/0x590 [ 2197.989363][T25093] do_fast_syscall_32+0x34/0x80 [ 2197.995879][T25093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2198.003976][T25093] } [ 2198.006826][T25093] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 2198.014996][T25093] ... acquired at: [ 2198.018802][T25093] _raw_spin_lock+0x2e/0x40 [ 2198.023637][T25093] evdev_handle_get_val+0x70/0x9f0 [ 2198.029108][T25093] evdev_ioctl_handler+0x1202/0x1f10 [ 2198.034846][T25093] __ia32_compat_sys_ioctl+0x543/0x840 [ 2198.040577][T25093] __do_fast_syscall_32+0x1f7/0x590 [ 2198.046125][T25093] do_fast_syscall_32+0x34/0x80 [ 2198.051349][T25093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2198.058223][T25093] [ 2198.060659][T25093] [ 2198.060659][T25093] the dependencies between the lock to be acquired [ 2198.060669][T25093] and SOFTIRQ-irq-unsafe lock: [ 2198.074450][T25093] -> (tasklist_lock){.+.+}-{3:3} { [ 2198.079962][T25093] HARDIRQ-ON-R at: [ 2198.084658][T25093] lock_acquire+0x117/0x340 [ 2198.091277][T25093] _raw_read_lock+0x36/0x50 [ 2198.097900][T25093] __do_wait+0xde/0x740 [ 2198.104278][T25093] do_wait+0x1e8/0x4f0 [ 2198.110654][T25093] kernel_wait+0xab/0x170 [ 2198.117183][T25093] call_usermodehelper_exec_work+0xbe/0x230 [ 2198.125185][T25093] process_scheduled_works+0xad1/0x1770 [ 2198.132941][T25093] worker_thread+0x8a0/0xda0 [ 2198.139800][T25093] kthread+0x711/0x8a0 [ 2198.146048][T25093] ret_from_fork+0x599/0xb30 [ 2198.152989][T25093] ret_from_fork_asm+0x1a/0x30 [ 2198.160028][T25093] SOFTIRQ-ON-R at: [ 2198.164293][T25093] lock_acquire+0x117/0x340 [ 2198.170969][T25093] _raw_read_lock+0x36/0x50 [ 2198.177478][T25093] __do_wait+0xde/0x740 [ 2198.183827][T25093] do_wait+0x1e8/0x4f0 [ 2198.190171][T25093] kernel_wait+0xab/0x170 [ 2198.196602][T25093] call_usermodehelper_exec_work+0xbe/0x230 [ 2198.204703][T25093] process_scheduled_works+0xad1/0x1770 [ 2198.212514][T25093] worker_thread+0x8a0/0xda0 [ 2198.219277][T25093] kthread+0x711/0x8a0 [ 2198.225524][T25093] ret_from_fork+0x599/0xb30 [ 2198.232290][T25093] ret_from_fork_asm+0x1a/0x30 [ 2198.239152][T25093] INITIAL USE at: [ 2198.244274][T25093] lock_acquire+0x117/0x340 [ 2198.250789][T25093] _raw_write_lock_irq+0xa2/0xf0 [ 2198.257679][T25093] copy_process+0x2185/0x3950 [ 2198.264274][T25093] kernel_clone+0x21e/0x820 [ 2198.270727][T25093] user_mode_thread+0xdd/0x140 [ 2198.277500][T25093] rest_init+0x23/0x300 [ 2198.283882][T25093] start_kernel+0x3a7/0x400 [ 2198.290567][T25093] x86_64_start_reservations+0x24/0x30 [ 2198.298147][T25093] x86_64_start_kernel+0x143/0x1c0 [ 2198.305375][T25093] common_startup_64+0x13e/0x147 [ 2198.312275][T25093] INITIAL READ USE at: [ 2198.316782][T25093] lock_acquire+0x117/0x340 [ 2198.323723][T25093] _raw_read_lock+0x36/0x50 [ 2198.330589][T25093] __do_wait+0xde/0x740 [ 2198.337105][T25093] do_wait+0x1e8/0x4f0 [ 2198.343792][T25093] kernel_wait+0xab/0x170 [ 2198.350472][T25093] call_usermodehelper_exec_work+0xbe/0x230 [ 2198.358713][T25093] process_scheduled_works+0xad1/0x1770 [ 2198.366781][T25093] worker_thread+0x8a0/0xda0 [ 2198.374066][T25093] kthread+0x711/0x8a0 [ 2198.380584][T25093] ret_from_fork+0x599/0xb30 [ 2198.387780][T25093] ret_from_fork_asm+0x1a/0x30 [ 2198.395068][T25093] } [ 2198.397743][T25093] ... key at: [] tasklist_lock+0x18/0x40 [ 2198.406163][T25093] ... acquired at: [ 2198.410226][T25093] _raw_read_lock+0x36/0x50 [ 2198.414911][T25093] send_sigurg+0x12b/0x420 [ 2198.419594][T25093] sk_send_sigurg+0x6c/0x2e0 [ 2198.424373][T25093] queue_oob+0x420/0x4f0 [ 2198.428811][T25093] unix_stream_sendmsg+0xc32/0xde0 [ 2198.434107][T25093] __sock_sendmsg+0x21c/0x270 [ 2198.438966][T25093] ____sys_sendmsg+0x505/0x820 [ 2198.443992][T25093] ___sys_sendmsg+0x21f/0x2a0 [ 2198.448849][T25093] __sys_sendmsg+0x164/0x220 [ 2198.453735][T25093] __do_fast_syscall_32+0x1f7/0x590 [ 2198.459290][T25093] do_fast_syscall_32+0x34/0x80 [ 2198.464515][T25093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2198.471203][T25093] [ 2198.473799][T25093] -> (&f_owner->lock){....}-{3:3} { [ 2198.479127][T25093] INITIAL USE at: [ 2198.483221][T25093] lock_acquire+0x117/0x340 [ 2198.489566][T25093] _raw_write_lock_irq+0xa2/0xf0 [ 2198.496348][T25093] __f_setown+0x67/0x370 [ 2198.502519][T25093] tty_fasync+0x2dc/0x350 [ 2198.508587][T25093] do_fcntl+0x11d2/0x1a50 [ 2198.514666][T25093] do_compat_fcntl64+0x477/0x720 [ 2198.521876][T25093] __do_fast_syscall_32+0x1f7/0x590 [ 2198.528991][T25093] do_fast_syscall_32+0x34/0x80 [ 2198.535667][T25093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2198.544010][T25093] INITIAL READ USE at: [ 2198.548434][T25093] lock_acquire+0x117/0x340 [ 2198.555114][T25093] _raw_read_lock_irq+0xaa/0xf0 [ 2198.562148][T25093] f_getown+0x54/0x2a0 [ 2198.568395][T25093] do_fcntl+0x198/0x1a50 [ 2198.574903][T25093] do_compat_fcntl64+0x477/0x720 [ 2198.582289][T25093] __do_fast_syscall_32+0x1f7/0x590 [ 2198.589752][T25093] do_fast_syscall_32+0x34/0x80 [ 2198.597038][T25093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2198.605546][T25093] } [ 2198.608395][T25093] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2198.617508][T25093] ... acquired at: [ 2198.621398][T25093] _raw_read_lock_irqsave+0xaf/0x100 [ 2198.626868][T25093] send_sigio+0x38/0x370 [ 2198.631290][T25093] kill_fasync+0x24d/0x4d0 [ 2198.635891][T25093] lease_break_callback+0x26/0x30 [ 2198.641098][T25093] __break_lease+0x730/0x1620 [ 2198.645966][T25093] do_dentry_open+0x73a/0x1420 [ 2198.651033][T25093] vfs_open+0x3b/0x340 [ 2198.655303][T25093] path_openat+0x340e/0x3dd0 [ 2198.660081][T25093] do_filp_open+0x1fa/0x410 [ 2198.664932][T25093] do_sys_openat2+0x121/0x200 [ 2198.669867][T25093] __ia32_compat_sys_openat+0x131/0x160 [ 2198.675603][T25093] __do_fast_syscall_32+0x1f7/0x590 [ 2198.680985][T25093] do_fast_syscall_32+0x34/0x80 [ 2198.686115][T25093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2198.693085][T25093] [ 2198.695691][T25093] -> (&new->fa_lock){....}-{3:3} { [ 2198.700923][T25093] INITIAL USE at: [ 2198.704840][T25093] lock_acquire+0x117/0x340 [ 2198.710946][T25093] _raw_write_lock_irq+0xa2/0xf0 [ 2198.717655][T25093] fasync_remove_entry+0xf1/0x1c0 [ 2198.724365][T25093] __fput+0x8a2/0xa70 [ 2198.730114][T25093] task_work_run+0x1d4/0x260 [ 2198.736618][T25093] exit_to_user_mode_loop+0xff/0x4f0 [ 2198.743858][T25093] __do_fast_syscall_32+0x3b4/0x590 [ 2198.750988][T25093] do_fast_syscall_32+0x34/0x80 [ 2198.757701][T25093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2198.765953][T25093] INITIAL READ USE at: [ 2198.770697][T25093] lock_acquire+0x117/0x340 [ 2198.777590][T25093] _raw_read_lock_irqsave+0xaf/0x100 [ 2198.785090][T25093] kill_fasync+0x199/0x4d0 [ 2198.791692][T25093] pipe_release+0x19c/0x330 [ 2198.798460][T25093] __fput+0x44c/0xa70 [ 2198.804553][T25093] task_work_run+0x1d4/0x260 [ 2198.811604][T25093] exit_to_user_mode_loop+0xff/0x4f0 [ 2198.818977][T25093] __do_fast_syscall_32+0x3b4/0x590 [ 2198.826263][T25093] do_fast_syscall_32+0x34/0x80 [ 2198.833220][T25093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2198.841913][T25093] } [ 2198.844432][T25093] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2198.853561][T25093] ... acquired at: [ 2198.857368][T25093] _raw_read_lock_irqsave+0xaf/0x100 [ 2198.862924][T25093] kill_fasync+0x199/0x4d0 [ 2198.867934][T25093] evdev_pass_values+0x627/0xbd0 [ 2198.873320][T25093] evdev_events+0x1e6/0x340 [ 2198.878093][T25093] input_pass_values+0x288/0x890 [ 2198.883299][T25093] input_event_dispose+0x330/0x6b0 [ 2198.888600][T25093] input_inject_event+0x1dd/0x340 [ 2198.893927][T25093] evdev_write+0x2fc/0x480 [ 2198.898637][T25093] vfs_write+0x27e/0xb30 [ 2198.903166][T25093] ksys_write+0x145/0x250 [ 2198.907882][T25093] __do_fast_syscall_32+0x1f7/0x590 [ 2198.913448][T25093] do_fast_syscall_32+0x34/0x80 [ 2198.918557][T25093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2198.925259][T25093] [ 2198.927601][T25093] [ 2198.927601][T25093] stack backtrace: [ 2198.933608][T25093] CPU: 0 UID: 0 PID: 25093 Comm: syz.3.36024 Tainted: G L syzkaller #0 PREEMPT(full) [ 2198.933632][T25093] Tainted: [L]=SOFTLOCKUP [ 2198.933639][T25093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2198.933650][T25093] Call Trace: [ 2198.933659][T25093] [ 2198.933668][T25093] dump_stack_lvl+0x189/0x250 [ 2198.933692][T25093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2198.933711][T25093] ? __pfx__printk+0x10/0x10 [ 2198.933738][T25093] __lock_acquire+0x2a95/0x2cf0 [ 2198.933762][T25093] ? kill_fasync+0x199/0x4d0 [ 2198.933786][T25093] lock_acquire+0x117/0x340 [ 2198.933801][T25093] ? kill_fasync+0x199/0x4d0 [ 2198.933828][T25093] _raw_read_lock_irqsave+0xaf/0x100 [ 2198.933850][T25093] ? kill_fasync+0x199/0x4d0 [ 2198.933872][T25093] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 2198.933892][T25093] ? do_raw_spin_lock+0x121/0x290 [ 2198.933917][T25093] kill_fasync+0x199/0x4d0 [ 2198.933940][T25093] ? kill_fasync+0x53/0x4d0 [ 2198.933962][T25093] evdev_pass_values+0x627/0xbd0 [ 2198.933987][T25093] ? evdev_pass_values+0x681/0xbd0 [ 2198.934012][T25093] evdev_events+0x1e6/0x340 [ 2198.934033][T25093] ? evdev_events+0x79/0x340 [ 2198.934054][T25093] ? input_pass_values+0x8d/0x890 [ 2198.934075][T25093] input_pass_values+0x288/0x890 [ 2198.934098][T25093] ? input_handle_event+0x70c/0xf30 [ 2198.934116][T25093] input_event_dispose+0x330/0x6b0 [ 2198.934135][T25093] input_inject_event+0x1dd/0x340 [ 2198.934154][T25093] ? input_inject_event+0xb6/0x340 [ 2198.934172][T25093] evdev_write+0x2fc/0x480 [ 2198.934196][T25093] ? __pfx_evdev_write+0x10/0x10 [ 2198.934219][T25093] ? bpf_lsm_file_permission+0x9/0x20 [ 2198.934237][T25093] ? security_file_permission+0x75/0x290 [ 2198.934261][T25093] ? rw_verify_area+0x255/0x4d0 [ 2198.934284][T25093] ? __pfx_evdev_write+0x10/0x10 [ 2198.934306][T25093] vfs_write+0x27e/0xb30 [ 2198.934323][T25093] ? __pfx_vfs_write+0x10/0x10 [ 2198.934338][T25093] ? __fget_files+0x2a/0x420 [ 2198.934359][T25093] ? __fget_files+0x2a/0x420 [ 2198.934377][T25093] ? __fget_files+0x3a0/0x420 [ 2198.934396][T25093] ? __fget_files+0x2a/0x420 [ 2198.934417][T25093] ksys_write+0x145/0x250 [ 2198.934432][T25093] ? __pfx_ksys_write+0x10/0x10 [ 2198.934448][T25093] ? __do_fast_syscall_32+0xbe/0x590 [ 2198.934464][T25093] __do_fast_syscall_32+0x1f7/0x590 [ 2198.934486][T25093] ? rcu_is_watching+0x15/0xb0 [ 2198.934512][T25093] ? do_fast_syscall_32+0x34/0x80 [ 2198.934528][T25093] do_fast_syscall_32+0x34/0x80 [ 2198.934542][T25093] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2198.934562][T25093] RIP: 0023:0xf7f41539 [ 2198.934577][T25093] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2198.934592][T25093] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2198.934611][T25093] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 2198.934623][T25093] RDX: 0000000000000037 RSI: 0000000000000000 RDI: 0000000000000000 [ 2198.934632][T25093] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2198.934642][T25093] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2198.934652][T25093] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2198.934667][T25093] [ 2201.620976][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!