last executing test programs: 6.159620833s ago: executing program 3 (id=8198): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0xfffe}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 4.189867305s ago: executing program 3 (id=8216): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read(r1, &(0x7f0000001380)=""/4115, 0x1013) 3.835516663s ago: executing program 1 (id=8220): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xffff}, 0x19) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x229}, 0x14}}, 0x0) clock_gettime(0x0, &(0x7f0000007680)) recvmmsg(r0, &(0x7f0000007440)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x100, 0x0) 3.763549034s ago: executing program 4 (id=8221): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) pread64(r1, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 3.691679004s ago: executing program 1 (id=8222): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000880)={0x1d, r2}, 0x10) sendmsg$inet(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000740)="1c9ca1fb88a402aed73a4364a5593768ae", 0x11}, {&(0x7f00000015c0)="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", 0x19f}, {&(0x7f0000000180)="089ac0c1e955ef204d91740257a17cc3fac9babd1c46685d45f5a83a57fc1f304d66f7a02562a67b601fff40b9d4d33750784dd41e2370f96cd64db637f2f0e1c2a9cd22bb3c50c52b5a2d92e17cde2cc5e10fc9a3c2310e576efefe1320e13e3ffaec8c97b930e56806ec3e54eeecc16511f9c8b6d9d4a0e00475554c53d6e15dead20608c4ad45337ef5a5f75716e97d28f6f07c5b7ce6136d8bc3433069a2ad2c76dd", 0xa4}, {&(0x7f0000000500)="ff52b31410d9bc32656fe6e33de3a8667b01f76b553c389d85235d3a29272e1b5e45da102d3619080bcccc57d12ac1740468589b29ba0da2c5d1258aca5a11b4a086949792fe4b212660a595f6ccfc815906a1ca3df268f38ff5ebef22fea176051bdca251679870b33901d8dd9a01d70231e231000137818f4f0800000014e6b4f30856d470dc0109e7b1de08061c2420c8271bdd4906ec67e1cef27ebdac482cf978477f21a5c0ccea64ece13d4595a5af818a17b4ace348ba3a9e496f461dd82c728ef31dbae6661542f3d7df72e3ed491f5aee7ea0822abcb2a3f641031323e0ed221eaa28500eb98838cc0884b5d379", 0xf2}, {&(0x7f0000000340)="c83c", 0x2}], 0x5}, 0x20004000) 3.633699392s ago: executing program 4 (id=8223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8802, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x1) 3.502422465s ago: executing program 1 (id=8226): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) 3.441562891s ago: executing program 4 (id=8227): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) unshare(0x2c020400) fsync(r1) 3.232160774s ago: executing program 3 (id=8228): syz_mount_image$fuse(0x0, 0x0, 0x40822, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@dont_appraise}]}}, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @private2, 0x4, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x29, 0x3, "01"}], 0x18}}], 0x1, 0x4000000) 3.159059303s ago: executing program 3 (id=8229): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x2}, &(0x7f00000004c0)=0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.002835422s ago: executing program 1 (id=8230): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 2.79097025s ago: executing program 1 (id=8232): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x5f501}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x40004) 2.05820008s ago: executing program 3 (id=8237): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "d32052f2"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc040480c, 0x0) 2.016432663s ago: executing program 0 (id=8238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x8080000, 0x1d000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x8000000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x4000, 0x10000}) 1.820008034s ago: executing program 0 (id=8241): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[{0xc, 0x10b, 0x4}, {0xc, 0x117, 0x3}], 0x18}}], 0x2, 0x8810) 1.650627178s ago: executing program 0 (id=8243): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x22, 0x2, 0x1) recvmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) 1.638339072s ago: executing program 4 (id=8244): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) write$UHID_INPUT(r0, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) 1.595404766s ago: executing program 1 (id=8245): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000fa461ad7e48489bffa56020013001118", 0x13}], 0x1) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 1.429949899s ago: executing program 4 (id=8246): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0xffffffff, @remote, 0x6}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000440)={&(0x7f0000000000)={0xa, 0x4e24, 0xfff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000200)='!', 0x1}], 0x1}, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000003c0)=@int=0x9, 0x4) 1.249212497s ago: executing program 4 (id=8248): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000000)={0x0, 0xffffffff, 0x0, 0x4, 0x100, 0x9}) 1.074448186s ago: executing program 2 (id=8249): mmap(&(0x7f00002e4000/0x4000)=nil, 0x4000, 0x5, 0x31, 0xffffffffffffffff, 0x9236d000) r0 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0xffffffce) 824.290662ms ago: executing program 2 (id=8250): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36) 669.106287ms ago: executing program 0 (id=8251): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6721d5874f72cf86d73d32f46380feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x7, 0x1) 628.324555ms ago: executing program 2 (id=8252): add_key$user(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x7012d) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) 354.157037ms ago: executing program 2 (id=8253): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 223.704742ms ago: executing program 0 (id=8254): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x24000840) 222.913113ms ago: executing program 2 (id=8255): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) lseek(r0, 0x289e0cb5, 0x0) 122.666174ms ago: executing program 3 (id=8256): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000008c0), 0x4) 375.859µs ago: executing program 2 (id=8257): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x0, 0x201, 0x80, 0x7, 0x2, 0x9, 0x10000, r2}, 0x20) 0s ago: executing program 0 (id=8258): ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000300)={0x0, 0x2, 0xffffffffffffffff, 0x7ff}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x8501) fcntl$setstatus(r1, 0x4, 0x2400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) kernel console output (not intermixed with test programs): ) failed -71 request 0e [ 612.590496][ T5862] airspy 3-1:0.0: Registered as swradio24 [ 612.597397][ T5862] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 612.618885][ T5862] usb 3-1: USB disconnect, device number 47 [ 613.256197][ T5952] gspca_ov534_9: reg_w failed -71 [ 613.570274][ T5952] gspca_ov534_9: Unknown sensor 0000 [ 613.570386][ T5952] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 613.600714][ T5952] usb 4-1: USB disconnect, device number 50 [ 613.876886][T21590] af_packet: tpacket_rcv: packet too big, clamped from 4378 to 4294967272. macoff=96 [ 614.650343][T21608] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 614.898222][T21615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6696'. [ 614.960748][T21618] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6696'. [ 616.989652][ T981] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 617.175651][ T981] usb 2-1: Using ep0 maxpacket: 32 [ 617.191954][ T981] usb 2-1: config 0 interface 0 has no altsetting 0 [ 617.198703][ T981] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 617.229159][ T981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.289938][ T981] usb 2-1: config 0 descriptor?? [ 617.774457][ T981] corsair-psu 0003:1B1C:1C0D.002B: unknown main item tag 0x0 [ 617.784462][ T981] corsair-psu 0003:1B1C:1C0D.002B: unknown main item tag 0x0 [ 617.815732][ T981] corsair-psu 0003:1B1C:1C0D.002B: unknown main item tag 0x0 [ 617.840539][ T981] corsair-psu 0003:1B1C:1C0D.002B: unknown main item tag 0x0 [ 617.858753][ T981] corsair-psu 0003:1B1C:1C0D.002B: unknown main item tag 0x0 [ 617.882307][ T981] corsair-psu 0003:1B1C:1C0D.002B: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.1-1/input0 [ 618.239865][ T981] corsair-psu 0003:1B1C:1C0D.002B: unable to initialize device (-110) [ 618.261237][ T981] corsair-psu 0003:1B1C:1C0D.002B: probe with driver corsair-psu failed with error -110 [ 618.342597][ T981] usb 2-1: USB disconnect, device number 47 [ 618.787966][ T30] audit: type=1326 audit(1756058568.104:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.6739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 618.847183][ T30] audit: type=1326 audit(1756058568.134:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.6739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 618.919315][ T30] audit: type=1326 audit(1756058568.144:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.6739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=80 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 618.959363][ T30] audit: type=1326 audit(1756058568.144:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.6739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 618.983435][ T30] audit: type=1326 audit(1756058568.144:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.6739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 619.008927][ T30] audit: type=1326 audit(1756058568.144:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.6739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 619.092068][ T30] audit: type=1326 audit(1756058568.144:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.6739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 619.180747][ T30] audit: type=1326 audit(1756058568.144:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.6739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 619.254538][ T30] audit: type=1326 audit(1756058568.144:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.6739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=233 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 619.293082][ T30] audit: type=1326 audit(1756058568.144:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.6739" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 619.949677][ T5952] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 620.135435][ T5952] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 620.144137][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 620.178539][ T5952] usb 2-1: config 0 has no interface number 0 [ 620.200911][ T5952] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 620.232897][ T5952] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 620.280708][ T5952] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 620.294071][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.323583][ T5952] usb 2-1: Product: syz [ 620.327813][ T5952] usb 2-1: Manufacturer: syz [ 620.349573][ T5952] usb 2-1: SerialNumber: syz [ 620.375829][ T5952] usb 2-1: config 0 descriptor?? [ 621.108013][ T5952] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.117/input/input65 [ 621.206142][T21757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6760'. [ 621.331515][ T5952] usb 2-1: USB disconnect, device number 48 [ 621.393476][T21757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6760'. [ 621.779726][ T44] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 621.949623][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 621.967823][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.997265][ T44] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 622.029569][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.065189][ T44] usb 4-1: config 0 descriptor?? [ 622.134386][T21774] netlink: 'syz.1.6767': attribute type 15 has an invalid length. [ 622.391996][T21657] Set syz1 is full, maxelem 65536 reached [ 622.522491][ T44] mcp2221 0003:04D8:00DD.002C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 622.612436][T21792] input: syz0 as /devices/virtual/input/input66 [ 622.620202][T21793] ALSA: mixer_oss: invalid OSS volume '' [ 622.964345][ T44] usb 4-1: USB disconnect, device number 51 [ 623.791039][T21847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6802'. [ 623.840157][ T5952] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 624.001397][ T5952] usb 2-1: Using ep0 maxpacket: 16 [ 624.012685][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.039567][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.084924][ T5952] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 624.125428][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.157383][ T5952] usb 2-1: config 0 descriptor?? [ 624.698896][T21888] ======================================================= [ 624.698896][T21888] WARNING: The mand mount option has been deprecated and [ 624.698896][T21888] and is ignored by this kernel. Remove the mand [ 624.698896][T21888] option from the mount to silence this warning. [ 624.698896][T21888] ======================================================= [ 624.734076][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.787990][ T5952] usb 2-1: string descriptor 0 read error: -71 [ 624.827882][ T5952] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 624.849089][ T5952] letsketch 0003:6161:4D15.002D: probe with driver letsketch failed with error -32 [ 624.899924][ T5952] usb 2-1: USB disconnect, device number 49 [ 625.361828][T21905] netpci0: tun_chr_ioctl cmd 2147767507 [ 625.595041][T21917] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6834'. [ 625.606464][T21917] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 625.613820][T21917] IPv6: NLM_F_CREATE should be set when creating new route [ 625.621177][T21917] IPv6: NLM_F_CREATE should be set when creating new route [ 625.659599][ T5952] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 625.704591][T21919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.724331][ T30] audit: type=1326 audit(1756058575.044:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21920 comm="syz.4.6836" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa4539 code=0x0 [ 625.830195][ T5952] usb 2-1: Using ep0 maxpacket: 8 [ 625.837589][ T5952] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 625.849634][ T5952] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 625.869531][ T5952] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 625.891293][ T5952] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.908213][ T5952] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 625.919397][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.158897][ T5952] usb 2-1: GET_CAPABILITIES returned 0 [ 626.168990][ T5952] usbtmc 2-1:16.0: can't read capabilities [ 626.376779][ T5952] usb 2-1: USB disconnect, device number 50 [ 627.138633][T21948] kvm: kvm [21947]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0x3 [ 627.909333][T21979] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 627.909333][T21979] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 627.909333][T21979] ~^>Ƥr&Dq.;쀯<2AU' [ 629.109581][ T5952] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 629.289656][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 629.314123][ T5952] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 629.349675][ T5952] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 629.374346][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 629.386693][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 629.403297][ T5952] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.429098][ T5952] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 629.462619][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.747630][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.754529][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.809619][ T5952] usb 5-1: GET_CAPABILITIES returned 0 [ 629.815221][ T5952] usbtmc 5-1:16.0: can't read capabilities [ 630.063266][T21999] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 630.142385][ T44] usb 5-1: USB disconnect, device number 50 [ 630.859549][ T5862] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 631.034197][ T5862] usb 4-1: Using ep0 maxpacket: 16 [ 631.047876][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.090815][ T5862] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.121277][ T5862] usb 4-1: config 0 interface 0 has no altsetting 0 [ 631.127977][ T5862] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 631.150256][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.178072][ T5862] usb 4-1: config 0 descriptor?? [ 631.615381][ T5862] apple 0003:05AC:0247.002E: unknown main item tag 0x0 [ 631.635597][ T5862] apple 0003:05AC:0247.002E: unknown main item tag 0x0 [ 631.643083][ T5862] apple 0003:05AC:0247.002E: unexpected long global item [ 631.660420][ T5862] apple 0003:05AC:0247.002E: parse failed [ 631.666335][ T5862] apple 0003:05AC:0247.002E: probe with driver apple failed with error -22 [ 631.815803][ T44] usb 4-1: USB disconnect, device number 52 [ 631.870471][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 631.891629][T22089] netlink: 'syz.4.6909': attribute type 13 has an invalid length. [ 632.031882][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 632.044468][ T9] usb 2-1: config 166 has an invalid interface number: 177 but max is 1 [ 632.061902][ T9] usb 2-1: config 166 has an invalid interface number: 34 but max is 1 [ 632.090071][ T9] usb 2-1: config 166 has no interface number 0 [ 632.113263][ T9] usb 2-1: config 166 has no interface number 1 [ 632.139003][ T9] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 632.176196][ T9] usb 2-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 632.208031][ T9] usb 2-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 632.243964][ T9] usb 2-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 632.249832][T22089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.276323][ T9] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 632.288951][ T9] usb 2-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 632.302437][ T9] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 632.317695][ T9] usb 2-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 632.324930][T22089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.349622][ T9] usb 2-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 632.382866][ T9] usb 2-1: config 166 interface 177 has no altsetting 0 [ 632.414967][ T9] usb 2-1: config 166 interface 34 has no altsetting 0 [ 632.476525][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 632.520163][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.528394][ T9] usb 2-1: Product: syz [ 632.533453][ T9] usb 2-1: Manufacturer: syz [ 632.538229][ T9] usb 2-1: SerialNumber: syz [ 632.582281][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6912'. [ 632.593905][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6912'. [ 632.802088][ T9] ums-realtek 2-1:166.177: USB Mass Storage device detected [ 633.005961][ T9] ums-realtek 2-1:166.34: USB Mass Storage device detected [ 633.270469][ T9] ums-realtek 2-1:166.34: probe with driver ums-realtek failed with error -5 [ 633.404302][ T9] usb 2-1: Found UVC 0.00 device syz (0bda:0138) [ 633.412441][ T9] usb 2-1: No valid video chain found. [ 633.430029][ T9] usb 2-1: USB disconnect, device number 51 [ 633.583744][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.601433][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.621896][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.640308][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.189556][T22092] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 634.301155][T22146] kvm: user requested TSC rate below hardware speed [ 634.364669][T22092] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 634.389747][T22092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.423543][T22092] usb 5-1: config 0 descriptor?? [ 634.451941][T22092] cp210x 5-1:0.0: cp210x converter detected [ 634.841285][T22092] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 634.881313][T22092] usb 5-1: cp210x converter now attached to ttyUSB0 [ 635.090216][ T9] usb 5-1: USB disconnect, device number 51 [ 635.140363][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 635.172051][ T9] cp210x 5-1:0.0: device disconnected [ 635.274725][T22166] vlan2: entered allmulticast mode [ 635.285084][T22166] veth1: entered allmulticast mode [ 635.698459][ T5953] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 635.878064][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 635.885341][ T5953] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 635.922016][ T5953] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 635.941574][ T5953] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 635.973015][ T5953] usb 2-1: Product: syz [ 635.977285][ T5953] usb 2-1: Manufacturer: syz [ 635.989600][ T5953] usb 2-1: SerialNumber: syz [ 636.219600][ T5953] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 636.227956][ T5953] usb 2-1: Handspring Visor / Palm OS: port 79, is for unknown use [ 636.259549][ T5953] usb 2-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 636.267693][ T5953] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 636.416381][ T5953] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 636.460426][ T5953] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 636.490057][ T5953] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 636.514977][ T5953] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 636.541545][ T5953] usb 2-1: USB disconnect, device number 52 [ 636.566794][ T5953] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 636.592044][ T5953] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 636.608419][ T5953] visor 2-1:1.0: device disconnected [ 636.990491][T22228] openvswitch: netlink: Multiple metadata blocks provided [ 637.080143][T17253] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 637.260305][T17253] usb 3-1: Using ep0 maxpacket: 8 [ 637.275971][T17253] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 637.294506][T17253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.304616][T17253] usb 3-1: Product: syz [ 637.308929][T17253] usb 3-1: Manufacturer: syz [ 637.320821][T17253] usb 3-1: SerialNumber: syz [ 637.325706][T22242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6969'. [ 637.348002][T17253] usb 3-1: config 0 descriptor?? [ 637.378176][T17253] gspca_main: sq930x-2.14.0 probing 2770:930c [ 637.613798][ T5953] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 637.749740][ T5951] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 637.779674][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 637.795710][ T5953] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 637.804966][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.813838][ T5953] usb 2-1: Product: syz [ 637.818065][ T5953] usb 2-1: Manufacturer: syz [ 637.823517][ T5953] usb 2-1: SerialNumber: syz [ 637.833364][ T5953] usb 2-1: config 0 descriptor?? [ 637.842637][ T5953] gspca_main: se401-2.14.0 probing 047d:5003 [ 637.909781][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 637.917453][ T5951] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 637.927729][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.947118][ T5951] usb 5-1: config 0 descriptor?? [ 637.960570][ T5951] gspca_main: sunplus-2.14.0 probing 041e:400b [ 638.181720][T17253] gspca_sq930x: ucbus_write failed -71 [ 638.191260][T17253] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 638.207062][T17253] usb 3-1: USB disconnect, device number 48 [ 638.249300][ T5953] gspca_se401: ExtraFeatures: 99 [ 638.255039][ T5953] gspca_se401: Too many frame sizes [ 638.461804][ T5953] usb 2-1: USB disconnect, device number 53 [ 638.774150][ T5951] gspca_sunplus: reg_r err -71 [ 638.779114][ T5951] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 638.806694][ T5951] usb 5-1: USB disconnect, device number 52 [ 639.013890][T22260] loop9: detected capacity change from 0 to 8 [ 639.023806][T22260] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 639.029170][T22260] loop9: partition table partially beyond EOD, truncated [ 639.043266][T22260] loop9: p1 size 81768186 extends beyond EOD, truncated [ 639.154656][ T6017] udevd[6017]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 639.319634][ T5951] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 639.356829][T22272] kvm: kvm [22271]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000002a) = 0x4 [ 639.470491][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 639.487674][ T5951] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 639.517572][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.558429][ T5951] usb 2-1: config 0 descriptor?? [ 639.807175][ T5951] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 639.837343][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 639.870765][ T5951] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 639.878471][ T5951] usb 2-1: media controller created [ 639.920208][T22102] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 639.934123][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 640.045027][ T5951] az6027: usb out operation failed. (-71) [ 640.065924][ T5951] az6027: usb out operation failed. (-71) [ 640.087451][T22102] usb 3-1: Using ep0 maxpacket: 32 [ 640.109215][ T5951] stb0899_attach: Driver disabled by Kconfig [ 640.125242][T22102] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 640.129919][ T5951] az6027: no front-end attached [ 640.129919][ T5951] [ 640.148273][T22102] usb 3-1: config 0 has no interface number 0 [ 640.174585][T22102] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 640.186168][ T5951] az6027: usb out operation failed. (-71) [ 640.186191][ T5951] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 640.189220][ T5951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input67 [ 640.252507][T22102] usb 3-1: config 0 interface 85 has no altsetting 0 [ 640.289002][T22102] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 640.309707][ T5951] dvb-usb: schedule remote query interval to 400 msecs. [ 640.321516][T22102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.339612][ T5951] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 640.358596][T22102] usb 3-1: Product: syz [ 640.367742][T22102] usb 3-1: Manufacturer: syz [ 640.380722][ T5951] usb 2-1: USB disconnect, device number 54 [ 640.389832][T22102] usb 3-1: SerialNumber: syz [ 640.422928][T22102] usb 3-1: config 0 descriptor?? [ 640.553869][ T5951] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 640.564403][T22304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6996'. [ 640.980629][T22320] netlink: 136784 bytes leftover after parsing attributes in process `syz.0.7003'. [ 641.019003][T22320] netlink: zone id is out of range [ 641.028727][T22320] netlink: zone id is out of range [ 641.050209][T22320] netlink: zone id is out of range [ 641.055455][T22320] netlink: zone id is out of range [ 641.068478][T22320] netlink: zone id is out of range [ 641.096012][T22102] appletouch 3-1:0.85: Geyser mode initialized. [ 641.103011][T22320] netlink: zone id is out of range [ 641.127466][T22320] netlink: zone id is out of range [ 641.129569][T22102] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input68 [ 641.170387][T22320] netlink: zone id is out of range [ 641.176502][T22320] netlink: zone id is out of range [ 641.305112][T22102] usb 3-1: USB disconnect, device number 49 [ 641.431812][T22102] appletouch 3-1:0.85: input: appletouch disconnected [ 641.624780][T22336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7010'. [ 642.001612][T22351] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.7017'. [ 642.067907][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7018'. [ 642.094120][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7018'. [ 642.190049][T22359] vxcan1: entered allmulticast mode [ 642.200780][T22359] vxcan1: left allmulticast mode [ 642.359341][T22369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7026'. [ 642.427663][T22369] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7026'. [ 642.437685][T22369] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7026'. [ 642.605201][T22376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7029'. [ 642.707184][T22380] loop9: detected capacity change from 0 to 7 [ 642.738011][T22380] buffer_io_error: 10 callbacks suppressed [ 642.738036][T22380] Buffer I/O error on dev loop9, logical block 0, async page read [ 642.765216][T22380] Buffer I/O error on dev loop9, logical block 0, async page read [ 642.777314][T22380] Buffer I/O error on dev loop9, logical block 0, async page read [ 642.798591][T22380] Buffer I/O error on dev loop9, logical block 0, async page read [ 642.854277][T22380] Buffer I/O error on dev loop9, logical block 0, async page read [ 642.891533][T22380] Buffer I/O error on dev loop9, logical block 0, async page read [ 642.915649][T22380] Buffer I/O error on dev loop9, logical block 0, async page read [ 642.950322][T22380] ldm_validate_partition_table(): Disk read failed. [ 642.957080][T22380] Buffer I/O error on dev loop9, logical block 0, async page read [ 642.993315][T22380] Buffer I/O error on dev loop9, logical block 0, async page read [ 643.002144][T22396] netlink: 'syz.1.7037': attribute type 13 has an invalid length. [ 643.034074][T22380] Buffer I/O error on dev loop9, logical block 0, async page read [ 643.058842][T22380] Dev loop9: unable to read RDB block 0 [ 643.077570][T22380] loop9: unable to read partition table [ 643.089050][T22380] loop9: partition table beyond EOD, truncated [ 643.108484][T22380] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 643.108484][T22380] ) failed (rc=-5) [ 643.527734][T22396] team_slave_0: left promiscuous mode [ 643.541992][T22396] team_slave_1: left promiscuous mode [ 643.556841][T22396] batadv1: left promiscuous mode [ 643.820856][T22396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.852328][T22413] input: syz0 as /devices/virtual/input/input69 [ 643.920869][T22396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.468309][T22396] mac80211_hwsim hwsim13 wlan0: left allmulticast mode [ 644.484379][T22396] mac80211_hwsim hwsim13 wlan0: left promiscuous mode [ 644.565782][ T7009] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.589714][ T7009] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.598770][ T7009] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.653498][ T7009] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.670232][ T30] audit: type=1800 audit(1756058593.984:296): pid=22426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7050" name="bus" dev="tmpfs" ino=7713 res=0 errno=0 [ 644.962595][T22438] cifs: Unknown parameter 'f' [ 646.419836][ T5951] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 646.478372][T22496] ALSA: mixer_oss: invalid OSS volume '' [ 646.484396][T22496] ALSA: mixer_oss: invalid OSS volume '' [ 646.579785][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 646.600543][ T5951] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 646.608635][ T5951] usb 5-1: config 0 has no interface number 0 [ 646.639649][ T5951] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 646.663534][ T5951] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 646.685028][ T5951] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 646.706079][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.718255][ T5951] usb 5-1: config 0 descriptor?? [ 647.173384][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 647.365836][ T5951] input: HID 28bd:0094 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0094.002F/input/input70 [ 647.489733][ T5951] uclogic 0003:28BD:0094.002F: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.4-1/input1 [ 647.628326][ T5951] usb 5-1: USB disconnect, device number 53 [ 649.819972][T22092] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 649.983316][T22092] usb 5-1: Using ep0 maxpacket: 16 [ 650.003077][T22092] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 204, changing to 11 [ 650.034967][T22092] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 650.055562][T22092] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 650.089843][T22092] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 650.109547][T22092] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.127902][T22092] usb 5-1: Product: syz [ 650.139028][T22092] usb 5-1: Manufacturer: syz [ 650.148317][T22092] usb 5-1: SerialNumber: syz [ 650.211017][ T122] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 650.309503][T22605] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.372840][ T122] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 650.391498][ T122] usb 4-1: config 0 has no interface number 0 [ 650.408789][T22607] __nla_validate_parse: 1 callbacks suppressed [ 650.408811][T22607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7132'. [ 650.414048][T22092] cdc_ncm 5-1:1.0: bind() failure [ 650.415370][ T122] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 650.461785][T22092] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 650.476308][T22092] cdc_ncm 5-1:1.1: bind() failure [ 650.488532][ T122] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 650.490314][T22092] usb 5-1: USB disconnect, device number 54 [ 650.531778][ T122] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 650.573122][ T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.607428][ T122] usb 4-1: config 0 descriptor?? [ 650.615427][T22611] netlink: 'syz.2.7134': attribute type 13 has an invalid length. [ 650.624764][T22599] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 650.643709][ T122] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 650.812593][T22611] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.899206][ T122] usb 4-1: USB disconnect, device number 53 [ 650.906162][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 650.970983][T22611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.021613][T22611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.272671][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.294629][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.314062][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.351005][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.471178][T22625] tun0: tun_chr_ioctl cmd 1074025675 [ 651.479555][T22625] tun0: persist disabled [ 653.677229][T22718] netlink: 'syz.0.7180': attribute type 3 has an invalid length. [ 653.687694][T22718] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7180'. [ 653.788191][T22721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7181'. [ 653.800378][T22721] netlink: 'syz.0.7181': attribute type 34 has an invalid length. [ 654.604796][T22755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7197'. [ 654.620240][T22755] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7197'. [ 654.749992][ T5951] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 654.826981][T22765] kernel read not supported for file /eth0 (pid: 22765 comm: syz.3.7202) [ 654.843873][ T30] audit: type=1800 audit(1756058604.164:297): pid=22765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7202" name="eth0" dev="mqueue" ino=104809 res=0 errno=0 [ 654.919684][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 654.928703][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.941260][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.956690][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 655.080624][ T5951] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 655.109504][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.145553][ T5951] usb 3-1: config 0 descriptor?? [ 655.603476][ T5951] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 655.634457][ T5951] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 655.659367][ T5951] microsoft 0003:045E:07DA.0030: unknown main item tag 0x4 [ 655.666831][ T5951] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 655.704410][ T5951] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 655.724953][ T5951] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 655.739765][ T5951] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 655.761354][ T5951] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 655.781369][ T5951] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 655.812517][ T5951] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 655.849551][ T5951] microsoft 0003:045E:07DA.0030: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 655.879581][ T5951] microsoft 0003:045E:07DA.0030: no inputs found [ 655.890903][ T5951] microsoft 0003:045E:07DA.0030: could not initialize ff, continuing anyway [ 655.947211][ T5951] usb 3-1: USB disconnect, device number 50 [ 656.087378][T22806] fido_id[22806]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 656.442929][T22829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7230'. [ 656.467518][T22829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7230'. [ 656.642754][ T30] audit: type=1326 audit(1756058605.954:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22838 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 656.686298][ T30] audit: type=1326 audit(1756058605.954:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22838 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 656.717115][ T30] audit: type=1326 audit(1756058605.984:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22838 comm="syz.4.7236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7fa4539 code=0x7ffc0000 [ 657.661680][T22092] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 657.831687][T22092] usb 2-1: Using ep0 maxpacket: 32 [ 657.842716][T22092] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 657.851064][T22092] usb 2-1: config 0 has no interface number 0 [ 657.861728][T22092] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 657.889678][T22092] usb 2-1: config 0 interface 85 has no altsetting 0 [ 657.909765][T22092] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 657.929559][T22092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.940331][T22092] usb 2-1: Product: syz [ 657.945100][T22092] usb 2-1: Manufacturer: syz [ 657.950116][T22092] usb 2-1: SerialNumber: syz [ 657.964509][T22092] usb 2-1: config 0 descriptor?? [ 657.974198][T22897] syzkaller1: entered promiscuous mode [ 657.980354][T22897] syzkaller1: entered allmulticast mode [ 658.603912][T22092] appletouch 2-1:0.85: Geyser mode initialized. [ 658.615434][T22092] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input72 [ 658.843672][ T122] usb 2-1: USB disconnect, device number 55 [ 658.922288][ T122] appletouch 2-1:0.85: input: appletouch disconnected [ 659.169852][T22924] netlink: 'syz.4.7274': attribute type 1 has an invalid length. [ 659.195345][T22924] (unnamed net_device) (uninitialized): option mode: invalid value (119) [ 659.817832][ T7009] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.841051][ T7009] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.876984][ T7009] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 659.898903][ T7009] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 660.036036][T22955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7289'. [ 660.072668][T22955] batadv_slave_0: entered promiscuous mode [ 660.085891][T22955] batadv_slave_1: entered promiscuous mode [ 660.139481][T22955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 660.151126][T22955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 660.162254][T22955] debugfs: 'hsr1' already exists in 'hsr' [ 660.168134][T22955] Cannot create hsr debugfs directory [ 660.274606][T22966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7294'. [ 660.339914][T22102] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 660.590668][T22102] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 660.601546][T22102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.620381][T22102] usb 4-1: config 0 descriptor?? [ 660.946529][T22987] netlink: 35 bytes leftover after parsing attributes in process `syz.1.7302'. [ 660.993479][T22987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7302'. [ 661.497745][T23006] loop9: detected capacity change from 0 to 7 [ 661.514002][T23006] loop9: [POWERTEC] p1 p2 p3 [ 661.519095][T23006] loop9: p1 start 1600481121 is beyond EOD, truncated [ 661.529006][T23006] loop9: p2 size 1680801792 extends beyond EOD, truncated [ 661.546528][T23006] loop9: p3 start 1680801792 is beyond EOD, truncated [ 661.645562][ T6017] udevd[6017]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 661.661459][T22102] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 661.669866][ T5951] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 661.703635][T22102] usb 4-1: USB disconnect, device number 54 [ 661.833311][ T5951] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 661.854577][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.868203][ T5951] usb 5-1: config 0 descriptor?? [ 661.882882][ T5951] cp210x 5-1:0.0: cp210x converter detected [ 662.237395][ T30] audit: type=1326 audit(1756058611.554:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23021 comm="syz.2.7319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 662.259769][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.304048][ T5951] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 662.312017][ T30] audit: type=1326 audit(1756058611.554:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23021 comm="syz.2.7319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 662.363107][ T5951] usb 5-1: cp210x converter now attached to ttyUSB0 [ 662.381643][ T30] audit: type=1326 audit(1756058611.554:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23021 comm="syz.2.7319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 662.404354][ T30] audit: type=1326 audit(1756058611.554:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23021 comm="syz.2.7319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 662.426487][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.433458][ T30] audit: type=1326 audit(1756058611.554:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23021 comm="syz.2.7319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 662.457111][ T30] audit: type=1326 audit(1756058611.554:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23021 comm="syz.2.7319" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 662.479141][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.620945][T22102] usb 5-1: USB disconnect, device number 55 [ 662.658324][T22102] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 662.683210][T22102] cp210x 5-1:0.0: device disconnected [ 662.743065][T23035] syzkaller1: entered promiscuous mode [ 662.759121][T23035] syzkaller1: entered allmulticast mode [ 662.869628][ T5951] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 663.019572][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 663.026835][ T5951] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 663.042935][ T5951] usb 3-1: config 0 has no interface number 0 [ 663.049191][ T5951] usb 3-1: config 0 interface 184 has no altsetting 0 [ 663.066568][ T5951] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 663.083092][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.107205][ T5951] usb 3-1: Product: syz [ 663.112605][ T5951] usb 3-1: Manufacturer: syz [ 663.117306][ T5951] usb 3-1: SerialNumber: syz [ 663.149249][ T5951] usb 3-1: config 0 descriptor?? [ 663.169194][ T5951] smsc75xx v1.0.0 [ 663.177057][ T5951] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 663.205996][ T5951] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 663.261706][T23050] pim6reg1: entered promiscuous mode [ 663.267099][T23050] pim6reg1: entered allmulticast mode [ 663.396245][ T5951] usb 3-1: USB disconnect, device number 51 [ 665.978435][T23156] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7375'. [ 667.495143][T22102] IPVS: starting estimator thread 0... [ 667.511293][T23200] tipc: Started in network mode [ 667.516435][T23200] tipc: Node identity ac1414aa, cluster identity 4711 [ 667.547677][T23200] tipc: Enabled bearer , priority 10 [ 667.589566][T23202] IPVS: using max 28 ests per chain, 67200 per kthread [ 668.660450][ T122] tipc: Node number set to 2886997162 [ 670.199701][ T5953] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 670.372447][ T5953] usb 2-1: Using ep0 maxpacket: 32 [ 670.405127][ T5953] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 670.422388][ T5953] usb 2-1: config 0 has no interface number 0 [ 670.444588][ T5953] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 670.469750][ T5953] usb 2-1: config 0 interface 85 has no altsetting 0 [ 670.495689][ T5953] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 670.518219][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.534071][ T5953] usb 2-1: Product: syz [ 670.538396][ T5953] usb 2-1: Manufacturer: syz [ 670.546156][ T5953] usb 2-1: SerialNumber: syz [ 670.563067][ T5953] usb 2-1: config 0 descriptor?? [ 670.828883][ T30] audit: type=1326 audit(1756058620.144:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23246 comm="syz.2.7412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 670.881997][ T30] audit: type=1326 audit(1756058620.144:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23246 comm="syz.2.7412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 670.911685][ T30] audit: type=1326 audit(1756058620.144:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23246 comm="syz.2.7412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 670.947039][ T30] audit: type=1326 audit(1756058620.144:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23246 comm="syz.2.7412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 670.978853][ T30] audit: type=1326 audit(1756058620.174:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23246 comm="syz.2.7412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 671.060355][ T30] audit: type=1326 audit(1756058620.174:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23246 comm="syz.2.7412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 671.149681][ T30] audit: type=1326 audit(1756058620.174:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23246 comm="syz.2.7412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 671.219208][ T5953] appletouch 2-1:0.85: Geyser mode initialized. [ 671.248158][ T5953] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input74 [ 671.266544][ T30] audit: type=1326 audit(1756058620.174:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23246 comm="syz.2.7412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 671.356758][ T30] audit: type=1326 audit(1756058620.174:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23246 comm="syz.2.7412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ce558 code=0x7ffc0000 [ 671.378813][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.386711][ T30] audit: type=1326 audit(1756058620.174:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23246 comm="syz.2.7412" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x7ffc0000 [ 671.463077][ T5953] usb 2-1: USB disconnect, device number 56 [ 671.615796][ T5953] appletouch 2-1:0.85: input: appletouch disconnected [ 672.441987][T23271] input: syz1 as /devices/virtual/input/input75 [ 672.519543][ T5953] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 672.640254][T23275] input: syz0 as /devices/virtual/input/input76 [ 672.679639][ T5953] usb 2-1: Using ep0 maxpacket: 8 [ 672.718008][ T5953] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 672.739274][ T5953] usb 2-1: config 150 has no interface number 0 [ 672.769580][ T5953] usb 2-1: config 150 interface 204 has no altsetting 0 [ 672.776876][ T5953] usb 2-1: config 150 interface 1 has no altsetting 0 [ 672.805554][ T5953] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 672.829518][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.859658][ T5953] usb 2-1: Product: syz [ 672.863977][ T5953] usb 2-1: Manufacturer: syz [ 672.868810][ T5953] usb 2-1: SerialNumber: syz [ 673.130610][ T5953] xr_serial 2-1:150.204: xr_serial converter detected [ 673.940371][ T5953] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 673.947895][ T5953] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 673.989563][ T5953] usb 2-1: USB disconnect, device number 57 [ 674.024385][ T5953] xr_serial 2-1:150.204: device disconnected [ 674.265998][T23306] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 674.267887][ T5849] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 675.082488][T23328] sctp: [Deprecated]: syz.0.7450 (pid 23328) Use of struct sctp_assoc_value in delayed_ack socket option. [ 675.082488][T23328] Use struct sctp_sack_info instead [ 676.619735][T23378] syzkaller1: entered promiscuous mode [ 676.655355][T23378] syzkaller1: entered allmulticast mode [ 679.014510][ T30] kauditd_printk_skb: 251 callbacks suppressed [ 679.014530][ T30] audit: type=1800 audit(1756058628.334:568): pid=23446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7497" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 680.218899][ T5994] syz_tun (unregistering): left allmulticast mode [ 680.226603][ T5994] syz_tun (unregistering): left promiscuous mode [ 680.237899][ T5994] bridge0: port 3(syz_tun) entered disabled state [ 680.955399][ T7009] bridge_slave_1: left allmulticast mode [ 680.964560][ T7009] bridge_slave_1: left promiscuous mode [ 680.976615][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.040766][ T7009] bridge_slave_0: left promiscuous mode [ 681.059908][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.652950][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 681.664270][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 681.678337][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 681.699068][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 681.709259][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 682.754205][ T7009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.765586][ T7009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.775685][ T7009] bond0 (unregistering): Released all slaves [ 682.793297][ T7009] bond1 (unregistering): Released all slaves [ 682.824530][T23521] veth0: entered promiscuous mode [ 682.830096][T23521] veth0: left promiscuous mode [ 682.835806][T23522] syzkaller1: entered promiscuous mode [ 682.843586][T23522] syzkaller1: entered allmulticast mode [ 683.486481][ T7009] hsr_slave_0: left promiscuous mode [ 683.529904][ T7009] hsr_slave_1: left promiscuous mode [ 683.538517][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.560445][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.587363][ T7009] batman_adv: batadv0: Removing interface: ipvlan2 [ 683.809536][ T51] Bluetooth: hci2: command tx timeout [ 684.316016][T23561] input: syz1 as /devices/virtual/input/input77 [ 684.599620][ T122] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 684.778350][ T122] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 684.795210][ T122] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 684.807146][ T122] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 684.849100][ T122] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 684.868727][ T122] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.888263][ T122] usb 4-1: Product: syz [ 684.893332][ T122] usb 4-1: Manufacturer: syz [ 684.898204][ T122] usb 4-1: SerialNumber: syz [ 684.959075][T23573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7536'. [ 685.176592][ T122] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 685.248704][T23581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7540'. [ 685.290458][ T5953] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 685.485900][ T5953] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 685.498752][ T5953] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 685.519933][ T7009] team0 (unregistering): Port device team_slave_1 removed [ 685.537507][ T5953] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 685.558678][ T5953] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 685.586898][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.601360][ T7009] team0 (unregistering): Port device team_slave_0 removed [ 685.601615][ T5953] usb 2-1: Product: syz [ 685.617399][ T5953] usb 2-1: Manufacturer: syz [ 685.625244][ T5953] usb 2-1: SerialNumber: syz [ 685.857314][ T5953] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 685.889709][ T51] Bluetooth: hci2: command tx timeout [ 685.980055][ T122] usb 4-1: USB disconnect, device number 55 [ 685.996717][ T122] usblp0: removed [ 686.090798][ T5953] usb 2-1: USB disconnect, device number 58 [ 686.109043][ T5953] usblp1: removed [ 686.371654][T23501] chnl_net:caif_netlink_parms(): no params data found [ 686.882395][T23501] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.890412][T23501] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.897744][T23501] bridge_slave_0: entered allmulticast mode [ 686.928805][T23501] bridge_slave_0: entered promiscuous mode [ 686.963848][T23501] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.980985][T23501] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.988302][T23501] bridge_slave_1: entered allmulticast mode [ 687.001537][T23501] bridge_slave_1: entered promiscuous mode [ 687.025471][ T7009] IPVS: stop unused estimator thread 0... [ 687.059654][ T122] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 687.133841][T23501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.175728][T23501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.234754][ T122] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 687.261659][ T122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.302179][ T122] usb 3-1: Product: syz [ 687.306639][ T122] usb 3-1: Manufacturer: syz [ 687.313429][ T122] usb 3-1: SerialNumber: syz [ 687.340761][ T122] usb 3-1: config 0 descriptor?? [ 687.386854][T23501] team0: Port device team_slave_0 added [ 687.422341][T23501] team0: Port device team_slave_1 added [ 687.649152][ T122] usb 3-1: USB disconnect, device number 52 [ 687.789098][T23501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.819587][T23501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.845741][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.889541][T23501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.939334][T23501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.956668][T23501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.982617][ C1] vkms_vblank_simulate: vblank timer overrun [ 687.989321][ T51] Bluetooth: hci2: command tx timeout [ 687.998290][T23501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.182007][T23501] hsr_slave_0: entered promiscuous mode [ 688.195093][T23501] hsr_slave_1: entered promiscuous mode [ 688.203709][T23501] debugfs: 'hsr0' already exists in 'hsr' [ 688.210212][T23501] Cannot create hsr debugfs directory [ 688.789549][ T122] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 688.963977][ T122] usb 2-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 689.002570][ T122] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 689.020721][ T122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.055468][ T122] usb 2-1: Product: syz [ 689.070105][ T122] usb 2-1: Manufacturer: syz [ 689.092112][ T122] usb 2-1: SerialNumber: syz [ 689.135383][ T122] usb 2-1: config 0 descriptor?? [ 689.167040][T23676] netlink: 'syz.2.7566': attribute type 11 has an invalid length. [ 689.378380][ T122] usb 2-1: bad CDC descriptors [ 689.386784][ T122] usb 2-1: unsupported MDLM descriptors [ 689.452486][ T122] usb 2-1: USB disconnect, device number 59 [ 689.703263][T23501] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 689.752849][T23501] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 689.778370][T23501] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 689.804583][T23501] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 690.049526][ T51] Bluetooth: hci2: command tx timeout [ 690.247071][T23501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.312362][T23501] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.335498][ T7009] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.342814][ T7009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.382896][ T7009] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.390238][ T7009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.541805][T23501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.570340][ T122] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 690.702399][T23501] veth0_vlan: entered promiscuous mode [ 690.728653][T23501] veth1_vlan: entered promiscuous mode [ 690.760148][ T122] usb 4-1: Using ep0 maxpacket: 16 [ 690.775855][ T122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.814481][ T122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.844829][ T122] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 690.855381][ T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.887178][ T122] usb 4-1: config 0 descriptor?? [ 690.905898][T23501] veth0_macvtap: entered promiscuous mode [ 690.934276][T23501] veth1_macvtap: entered promiscuous mode [ 691.047260][T23501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.108397][T23501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.185939][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.196010][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.205109][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.217071][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.238600][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.267963][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.416392][ T122] input: HID 041e:3100 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:041E:3100.0031/input/input78 [ 691.598181][ T122] creative-sb0540 0003:041E:3100.0031: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 691.603124][ T7009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.663526][ T122] usb 4-1: USB disconnect, device number 56 [ 691.716280][ T7009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.886106][ T7009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.906413][T23756] fido_id[23756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 691.939472][ T7009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.399010][T23776] input: syz1 as /devices/virtual/input/input79 [ 692.962929][T22102] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 693.151175][T22102] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 693.161850][T22102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.192489][T22102] usb 3-1: Product: syz [ 693.196756][T22102] usb 3-1: Manufacturer: syz [ 693.223238][T22102] usb 3-1: SerialNumber: syz [ 693.245033][T22102] usb 3-1: config 0 descriptor?? [ 693.260776][T22102] ch341 3-1:0.0: ch341-uart converter detected [ 693.592930][T23768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7512'. [ 694.324366][T22102] usb 3-1: failed to send control message: -71 [ 694.339647][T22102] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 694.382852][T22102] usb 3-1: USB disconnect, device number 53 [ 694.414688][T22102] ch341 3-1:0.0: device disconnected [ 695.473611][T23863] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 695.595607][T23868] vivid-004: disconnect [ 695.611734][T23867] vivid-004: reconnect [ 696.133807][T23878] netlink: 'syz.3.7624': attribute type 29 has an invalid length. [ 696.159709][T23878] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7624'. [ 697.030240][ T122] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 697.190233][ T122] usb 3-1: Using ep0 maxpacket: 16 [ 697.202486][ T122] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 697.222767][ T122] usb 3-1: config 0 has no interface number 0 [ 697.228947][ T122] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 697.240862][ T122] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 697.258387][ T122] usb 3-1: config 0 interface 41 has no altsetting 0 [ 697.272002][ T122] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 697.283067][ T122] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.291565][ T122] usb 3-1: Product: syz [ 697.296348][ T122] usb 3-1: Manufacturer: syz [ 697.301614][ T122] usb 3-1: SerialNumber: syz [ 697.307616][T23924] input: syz0 as /devices/virtual/input/input80 [ 697.319126][ T122] usb 3-1: config 0 descriptor?? [ 697.325968][T23912] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 697.334100][T23912] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 697.568009][T23912] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 697.584985][T23912] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 697.866879][T23946] lo: entered allmulticast mode [ 697.873690][T23946] lo: left allmulticast mode [ 697.937302][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7646'. [ 697.947720][T23948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7646'. [ 698.411482][ T122] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 698.436655][ T122] usb 3-1: USB disconnect, device number 54 [ 698.657007][T23971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7666'. [ 698.669744][T23971] net_ratelimit: 4053 callbacks suppressed [ 698.669767][T23971] openvswitch: netlink: nsh attr 0 has unexpected len 152 expected 0 [ 698.692852][T23971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.729685][T22102] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 698.903295][T22102] usb 2-1: Using ep0 maxpacket: 32 [ 698.916577][T22102] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 698.935177][T22102] usb 2-1: config 0 has no interface number 0 [ 698.948498][T22102] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 698.978532][T22102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.002448][T22102] usb 2-1: Product: syz [ 699.006703][T22102] usb 2-1: Manufacturer: syz [ 699.031140][T22102] usb 2-1: SerialNumber: syz [ 699.052964][T22102] usb 2-1: config 0 descriptor?? [ 699.071614][T22102] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 699.287159][T22102] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 699.336019][T22102] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 699.691232][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 699.700327][T22102] usb 2-1: USB disconnect, device number 60 [ 699.724709][T22102] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 699.746944][T22102] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 699.767776][T22102] quatech2 2-1:0.51: device disconnected [ 701.332995][T24052] VFS: Mount too revealing [ 702.120154][T22102] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 702.311801][T22102] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 702.321761][T22102] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 702.342868][T22102] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 702.377033][T22102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.436674][T22102] usb 3-1: Product: syz [ 702.455067][T22102] usb 3-1: Manufacturer: syz [ 702.464886][T22102] usb 3-1: SerialNumber: syz [ 702.508271][T22102] usb 3-1: config 0 descriptor?? [ 702.949909][T24096] netlink: 'syz.1.7710': attribute type 34 has an invalid length. [ 703.154886][T22102] mos7840 3-1:0.0: required endpoints missing [ 703.201900][T22102] usb 3-1: USB disconnect, device number 55 [ 703.544589][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 703.720668][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 703.736864][ T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 703.751863][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.768672][T24119] binder: 24118:24119 ioctl c0306201 80000480 returned -14 [ 703.777937][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 703.793166][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 703.809506][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.831836][ T9] usb 4-1: Product: syz [ 703.836144][ T9] usb 4-1: Manufacturer: syz [ 703.841414][ T9] usb 4-1: SerialNumber: syz [ 704.119843][T22098] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 704.268069][ T9] usb 4-1: 0:2 : does not exist [ 704.291898][T22098] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 704.321025][T22098] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 704.349541][T22098] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 704.369190][T22098] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 704.439518][T22098] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 704.473147][T22098] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.491790][T22098] usb 3-1: config 0 descriptor?? [ 704.880362][ T9] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 704.960290][T22098] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 704.988422][ T9] usb 4-1: USB disconnect, device number 57 [ 705.235063][T17253] usb 3-1: USB disconnect, device number 56 [ 705.735930][T24164] loop9: detected capacity change from 0 to 7 [ 705.759843][T24164] Dev loop9: unable to read RDB block 7 [ 705.766535][T24164] loop9: unable to read partition table [ 705.790984][T24164] loop9: partition table beyond EOD, truncated [ 705.797249][T24164] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 706.279525][T22098] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 706.474456][T22098] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 706.495188][T22098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.532217][T22098] usb 5-1: config 0 descriptor?? [ 706.561982][T22098] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 706.951712][T22098] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 707.048814][T24209] loop8: detected capacity change from 0 to 8 [ 707.087059][ T6017] Dev loop8: unable to read RDB block 8 [ 707.097778][ T6017] loop8: unable to read partition table [ 707.107202][ T6017] loop8: partition table beyond EOD, truncated [ 707.151757][T24209] Dev loop8: unable to read RDB block 8 [ 707.184276][T24209] loop8: unable to read partition table [ 707.204504][T24209] loop8: partition table beyond EOD, truncated [ 707.219210][T24209] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 707.361667][T22098] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 707.468555][T24222] syzkaller1: entered promiscuous mode [ 707.474520][T24222] syzkaller1: entered allmulticast mode [ 707.567948][ T9] usb 5-1: USB disconnect, device number 56 [ 707.838389][T24229] syzkaller1: entered promiscuous mode [ 707.844488][T24229] syzkaller1: entered allmulticast mode [ 707.973442][ T30] audit: type=1326 audit(1756058657.294:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24230 comm="syz.2.7771" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ce539 code=0x0 [ 708.940386][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 709.100049][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 709.134641][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 709.159338][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 709.182495][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 709.202772][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 709.223739][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.252694][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 709.276111][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.530865][ T9] usb 4-1: usb_control_msg returned -32 [ 709.536532][ T9] usbtmc 4-1:16.0: can't read capabilities [ 709.910936][T24283] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 709.920570][ T9] usb 4-1: USB disconnect, device number 58 [ 710.398217][T24285] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7795'. [ 710.889759][T22098] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 711.034845][T24302] input: syz0 as /devices/virtual/input/input82 [ 711.054017][T24302] input: failed to attach handler leds to device input82, error: -6 [ 711.064443][T24304] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.7804'. [ 711.078183][T22098] usb 3-1: config 0 has no interfaces? [ 711.092258][T22098] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 711.121931][T22098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.150227][T22098] usb 3-1: Product: syz [ 711.161534][T22098] usb 3-1: Manufacturer: syz [ 711.166361][T22098] usb 3-1: SerialNumber: syz [ 711.183887][T22098] usb 3-1: config 0 descriptor?? [ 711.570940][ T9] usb 3-1: USB disconnect, device number 57 [ 712.925251][T24339] sctp: [Deprecated]: syz.1.7820 (pid 24339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 712.925251][T24339] Use struct sctp_sack_info instead [ 713.438052][T24336] netlink: 'syz.0.7819': attribute type 13 has an invalid length. [ 713.456718][T24336] netlink: 'syz.0.7819': attribute type 17 has an invalid length. [ 713.484571][T24336] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 713.648712][T24353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7825'. [ 714.059526][T22092] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 714.441509][T22092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.459473][T22092] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.469303][T22092] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 714.496389][T22092] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.514038][T22092] usb 3-1: config 0 descriptor?? [ 714.931492][T22092] hid_parser_main: 7 callbacks suppressed [ 714.931523][T22092] pyra 0003:1E7D:2CF6.0033: unknown main item tag 0x0 [ 714.958935][T22092] pyra 0003:1E7D:2CF6.0033: unknown main item tag 0x0 [ 714.986394][T22092] pyra 0003:1E7D:2CF6.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 715.335788][T22092] pyra 0003:1E7D:2CF6.0033: couldn't init struct pyra_device [ 715.344076][T22092] pyra 0003:1E7D:2CF6.0033: couldn't install mouse [ 715.373416][T22092] pyra 0003:1E7D:2CF6.0033: probe with driver pyra failed with error -71 [ 715.412310][T24383] syzkaller1: entered promiscuous mode [ 715.415867][T22092] usb 3-1: USB disconnect, device number 58 [ 715.429606][T24383] syzkaller1: entered allmulticast mode [ 716.435623][T24409] syzkaller1: entered promiscuous mode [ 716.457349][T24409] syzkaller1: entered allmulticast mode [ 716.600073][T22098] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 716.709689][T22102] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 716.791456][T22098] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 716.804447][T22098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 716.826031][T22098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 716.839791][T22098] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 716.863759][T22098] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 716.876133][T22098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.891987][T22098] usb 5-1: config 0 descriptor?? [ 716.901695][T22102] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.928691][T22102] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 716.951976][T22102] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 716.970489][T22102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 716.978562][T22102] usb 4-1: SerialNumber: syz [ 717.057576][ T30] audit: type=1326 audit(1756058666.374:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24418 comm="syz.2.7855" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ce539 code=0x0 [ 717.227885][T22102] usb 4-1: 0:2 : does not exist [ 717.280772][T24429] loop7: detected capacity change from 0 to 7 [ 717.288259][ C1] blk_print_req_error: 10 callbacks suppressed [ 717.288296][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.299170][T22102] usb 4-1: USB disconnect, device number 59 [ 717.303914][ C1] buffer_io_error: 9 callbacks suppressed [ 717.303932][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 717.308729][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.332992][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 717.355208][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.364496][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 717.373685][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.383315][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 717.399362][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.408707][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 717.421474][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.436352][T22098] plantronics 0003:047F:FFFF.0034: ignoring exceeding usage max [ 717.438207][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.453689][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 717.458793][T22098] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 717.480107][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.489360][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 717.505316][T24429] ldm_validate_partition_table(): Disk read failed. [ 717.512834][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.522119][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 717.531446][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 717.540712][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 717.553724][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 717.567021][T24429] Dev loop7: unable to read RDB block 0 [ 717.577147][T24429] loop7: unable to read partition table [ 717.589793][T24429] loop7: partition table beyond EOD, truncated [ 717.596209][T24429] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 718.081381][T24446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7866'. [ 718.106286][T24446] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7866'. [ 718.141233][T24446] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7866'. [ 718.232643][T24452] netlink: 'syz.3.7869': attribute type 12 has an invalid length. [ 718.240900][T24452] netlink: 'syz.3.7869': attribute type 29 has an invalid length. [ 718.248938][T24452] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7869'. [ 718.270333][T24452] netlink: 59 bytes leftover after parsing attributes in process `syz.3.7869'. [ 718.429665][T24458] input: syz1 as /devices/virtual/input/input84 [ 718.730006][T17253] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 718.758353][ T122] IPVS: starting estimator thread 0... [ 718.765514][T24467] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 718.862816][T24470] IPVS: using max 27 ests per chain, 64800 per kthread [ 718.902449][T17253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 718.921413][T17253] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 718.936865][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 718.950039][T17253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 718.972940][T17253] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 718.987603][T17253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.008781][T17253] usb 4-1: Product: syz [ 719.013759][T17253] usb 4-1: Manufacturer: syz [ 719.018469][T17253] usb 4-1: SerialNumber: syz [ 719.031368][T17253] usb 4-1: config 0 descriptor?? [ 719.037273][T24461] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 719.045469][T24461] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 719.060803][T17253] usb 4-1: ucan: probing device on interface #0 [ 719.110161][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 719.119040][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 719.130935][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 719.144520][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 719.155177][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 719.171790][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 719.181060][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.389768][T22098] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 719.428212][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 719.447793][ T9] usbtmc 2-1:16.0: can't read capabilities [ 719.468049][T17253] usb 4-1: ucan: device reported invalid tx-fifo size [ 719.468662][ T5951] usb 5-1: USB disconnect, device number 57 [ 719.486508][T17253] usb 4-1: ucan: probe failed; try to update the device firmware [ 719.574554][T22098] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 719.584783][T22098] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 719.604501][T22098] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 719.617437][T22098] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 719.631039][T22098] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 719.648327][ T9] usb 2-1: USB disconnect, device number 62 [ 719.654025][T22098] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 719.665975][T22098] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 719.689519][T22098] usb 3-1: Product: syz [ 719.696196][T22098] usb 3-1: Manufacturer: syz [ 719.710295][ T5951] usb 4-1: USB disconnect, device number 60 [ 719.737211][T22098] cdc_wdm 3-1:1.0: skipping garbage [ 719.746892][T22098] cdc_wdm 3-1:1.0: skipping garbage [ 719.759328][T22098] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 719.765752][T22098] cdc_wdm 3-1:1.0: Unknown control protocol [ 720.613430][T17253] usb 3-1: USB disconnect, device number 59 [ 720.695697][T24505] input: syz1 as /devices/virtual/input/input85 [ 721.058043][ T30] audit: type=1326 audit(1756058670.374:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24493 comm="syz.1.7887" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7fc00000 [ 721.999868][ T30] audit: type=1326 audit(1756058671.314:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24542 comm="syz.4.7908" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x0 [ 722.960308][T24582] fuse: Invalid uid '00000000000000001025' [ 723.419554][ T9] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 723.619575][ T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 723.633227][ T9] usb 5-1: config 179 has no interface number 0 [ 723.650582][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 723.672815][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 723.700262][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 723.740880][ T9] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 723.788293][ T9] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 723.875137][ T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 724.029123][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.099024][T24593] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 724.112646][T24593] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 724.717646][T22102] usb 5-1: USB disconnect, device number 58 [ 724.724147][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 724.724187][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 725.099923][ T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 725.259653][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 725.298342][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 725.345650][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 725.359885][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.418407][ T9] usb 2-1: config 0 descriptor?? [ 725.423954][T24638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7948'. [ 725.678020][ T9] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 725.930971][ T5951] usb 2-1: USB disconnect, device number 63 [ 726.564993][T24657] sctp: [Deprecated]: syz.1.7956 (pid 24657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 726.564993][T24657] Use struct sctp_sack_info instead [ 727.083517][ T30] audit: type=1326 audit(1756058676.404:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24673 comm="syz.1.7966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 727.179873][ T30] audit: type=1326 audit(1756058676.404:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24673 comm="syz.1.7966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 727.245937][ T30] audit: type=1326 audit(1756058676.404:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24673 comm="syz.1.7966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=290 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 727.319746][ T30] audit: type=1326 audit(1756058676.404:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24673 comm="syz.1.7966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 727.341965][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.389493][ T30] audit: type=1326 audit(1756058676.404:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24673 comm="syz.1.7966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 727.465001][ T30] audit: type=1326 audit(1756058676.404:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24673 comm="syz.1.7966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 727.567932][ T30] audit: type=1326 audit(1756058676.404:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24673 comm="syz.1.7966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 727.590130][ C1] vkms_vblank_simulate: vblank timer overrun [ 727.607894][ T30] audit: type=1326 audit(1756058676.404:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24673 comm="syz.1.7966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 727.658171][ T30] audit: type=1326 audit(1756058676.404:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24673 comm="syz.1.7966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 727.694322][ T30] audit: type=1326 audit(1756058676.404:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24673 comm="syz.1.7966" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 727.851695][T24661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7958'. [ 729.129502][T22102] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 729.293719][T22102] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 729.322028][T22102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 729.357805][T22102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 729.411220][T22102] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 729.430594][T22102] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 729.461114][T22102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.540729][T22102] usb 5-1: config 0 descriptor?? [ 729.971851][T22102] plantronics 0003:047F:FFFF.0035: ignoring exceeding usage max [ 730.021262][T22102] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 730.353923][T24740] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 730.655747][T24747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7989'. [ 730.717803][T24747] hsr_slave_0: left promiscuous mode [ 730.738538][T24747] hsr_slave_1: left promiscuous mode [ 731.175417][T24757] sctp: [Deprecated]: syz.1.7993 (pid 24757) Use of int in max_burst socket option deprecated. [ 731.175417][T24757] Use struct sctp_assoc_value instead [ 732.079522][ T5951] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 732.174722][ T9] usb 5-1: USB disconnect, device number 59 [ 732.239875][ T5951] usb 2-1: Using ep0 maxpacket: 16 [ 732.248252][ T5951] usb 2-1: config 0 has no interfaces? [ 732.268660][ T5951] usb 2-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff [ 732.295957][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.316545][ T5951] usb 2-1: Product: syz [ 732.326791][ T5951] usb 2-1: Manufacturer: syz [ 732.334721][ T5951] usb 2-1: SerialNumber: syz [ 732.347142][ T5951] usb 2-1: config 0 descriptor?? [ 732.459547][T22098] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 732.619937][T22098] usb 3-1: Using ep0 maxpacket: 8 [ 732.634979][T22098] usb 3-1: config 0 has no interfaces? [ 732.674327][T22098] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 732.697996][T22098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.727543][T22098] usb 3-1: Product: syz [ 732.742952][T22098] usb 3-1: Manufacturer: syz [ 732.768013][T22098] usb 3-1: SerialNumber: syz [ 732.788100][T22098] usb 3-1: config 0 descriptor?? [ 732.827888][T24771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.848854][T24771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.885395][T22098] usb 2-1: USB disconnect, device number 64 [ 733.061287][T22092] usb 3-1: USB disconnect, device number 60 [ 733.517658][T24807] netlink: 'syz.0.8014': attribute type 1 has an invalid length. [ 733.608521][T24809] input: syz0 as /devices/virtual/input/input86 [ 733.801917][T24818] trusted_key: syz.0.8020 sent an empty control message without MSG_MORE. [ 734.400345][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 734.449705][T22092] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 734.570438][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 734.579334][ T9] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 734.587574][ T9] usb 2-1: config 0 has no interface number 0 [ 734.596924][ T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 734.607643][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.615884][ T9] usb 2-1: Product: syz [ 734.622418][ T9] usb 2-1: Manufacturer: syz [ 734.627136][ T9] usb 2-1: SerialNumber: syz [ 734.637072][T22092] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.647884][ T9] usb 2-1: config 0 descriptor?? [ 734.656886][ T9] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 734.676332][T22092] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 734.698848][T22092] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 734.721663][T22092] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 734.738037][T22092] usb 5-1: SerialNumber: syz [ 734.826447][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8041'. [ 734.866256][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 734.890299][ T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 734.991455][T22092] usb 5-1: 0:2 : does not exist [ 735.023678][T22092] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 735.078102][T22092] usb 5-1: USB disconnect, device number 60 [ 735.142570][ T6017] udevd[6017]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 735.310153][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 735.336219][T17253] usb 2-1: USB disconnect, device number 65 [ 735.346765][T17253] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 735.393829][T17253] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 735.426560][T17253] quatech2 2-1:0.51: device disconnected [ 736.859911][ T9] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 737.032868][ T9] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 737.041854][ T9] usb 4-1: config 8 has no interface number 0 [ 737.048492][ T9] usb 4-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 737.067461][ T9] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64 [ 737.079530][ T9] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 737.090705][ T9] usb 4-1: config 8 interface 177 has no altsetting 0 [ 737.098163][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 737.107921][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.129167][T24909] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 737.366306][ T9] usb 4-1: string descriptor 0 read error: -71 [ 737.381325][ T9] ir_toy 4-1:8.177: required endpoints not found [ 737.398054][ T9] usb 4-1: USB disconnect, device number 61 [ 737.527600][T24931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8068'. [ 737.540134][T22102] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 737.709880][T22102] usb 5-1: Using ep0 maxpacket: 16 [ 737.728235][T22102] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 737.752180][T22102] usb 5-1: config 0 has no interface number 0 [ 737.772167][T22102] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 737.784410][T22102] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.800039][T22102] usb 5-1: Product: syz [ 737.804278][T22102] usb 5-1: Manufacturer: syz [ 737.819564][T22102] usb 5-1: SerialNumber: syz [ 737.833237][T22102] usb 5-1: config 0 descriptor?? [ 737.847778][T22102] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 737.990404][T22092] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 738.190543][T22092] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 738.200111][T22092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.218360][T22092] usb 2-1: Product: syz [ 738.235507][T22092] usb 2-1: Manufacturer: syz [ 738.248997][T22092] usb 2-1: SerialNumber: syz [ 738.267086][T22092] usb 2-1: config 0 descriptor?? [ 738.302432][T22092] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 738.904534][T22102] gspca_spca1528: reg_w err -71 [ 738.912768][T22102] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 738.963804][T22102] usb 5-1: USB disconnect, device number 61 [ 739.372361][T22098] usb 2-1: USB disconnect, device number 66 [ 739.799607][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 739.971696][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.001786][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 740.030604][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 740.066056][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 740.100289][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.122018][ T9] usb 3-1: config 0 descriptor?? [ 740.281831][T24988] input: syz0 as /devices/virtual/input/input87 [ 740.590786][ T9] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 740.859793][T22098] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 740.894101][T22092] usb 3-1: USB disconnect, device number 61 [ 741.022565][T22098] usb 2-1: Using ep0 maxpacket: 8 [ 741.044713][T22098] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 741.068986][T22098] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 741.092133][T22098] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 741.112603][T22098] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 741.126965][T22098] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.141160][T22098] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 741.150764][T22098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.288933][T25011] kvm: user requested TSC rate below hardware speed [ 741.395128][T22098] usb 2-1: usb_control_msg returned -32 [ 741.406895][T22098] usbtmc 2-1:16.0: can't read capabilities [ 741.492076][T25017] syzkaller1: entered promiscuous mode [ 741.514035][T25017] syzkaller1: entered allmulticast mode [ 741.818398][T25028] usb 2-1: usbtmc_ioctl_clear_in_halt returned -32 [ 741.852581][T25029] kvm: kvm [25027]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x8b63ffe8c69a232 [ 742.239818][T22092] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 742.420493][T22092] usb 3-1: Using ep0 maxpacket: 8 [ 742.428202][T22092] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 742.470900][T22092] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1 [ 742.491542][T22092] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 742.513495][T22092] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 742.539919][T22092] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.560626][T22092] usb 3-1: Product: syz [ 742.575785][T22092] usb 3-1: Manufacturer: syz [ 742.582435][T22092] usb 3-1: SerialNumber: syz [ 742.594653][T25033] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 742.969728][T22098] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 743.140163][T22098] usb 4-1: Using ep0 maxpacket: 8 [ 743.181004][T22098] usb 4-1: config 0 has no interfaces? [ 743.205668][T22098] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 743.226014][T22098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.239161][T22098] usb 4-1: Product: syz [ 743.244175][T22098] usb 4-1: Manufacturer: syz [ 743.250789][T22098] usb 4-1: SerialNumber: syz [ 743.258817][T22098] usb 4-1: config 0 descriptor?? [ 743.490872][T22098] usb 4-1: USB disconnect, device number 62 [ 743.579651][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 743.625335][T17253] usb 2-1: USB disconnect, device number 67 [ 743.656978][T22092] cdc_ncm 3-1:1.0: bind() failure [ 743.684657][T22092] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 743.711223][T22092] usb 3-1: USB disconnect, device number 62 [ 743.730723][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 743.743988][ T9] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 743.753707][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.769468][ T9] usb 5-1: Product: syz [ 743.773713][ T9] usb 5-1: Manufacturer: syz [ 743.778353][ T9] usb 5-1: SerialNumber: syz [ 743.786791][ T9] usb 5-1: config 0 descriptor?? [ 743.797344][ T9] gspca_main: sq930x-2.14.0 probing 2770:930c [ 744.009732][T17253] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 744.172491][T17253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.186612][T17253] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.203787][T17253] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 744.217928][T17253] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 744.230754][T17253] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.242879][T17253] usb 2-1: config 0 descriptor?? [ 744.579634][T22098] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 744.711494][T17253] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 744.734352][T22098] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 744.748889][T22098] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.769013][T22098] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 744.785342][T22098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.869481][ T9] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 744.875633][ T9] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 744.890617][ T9] usb 5-1: USB disconnect, device number 62 [ 744.992662][ T5953] usb 2-1: USB disconnect, device number 68 [ 745.004765][T22098] usb 4-1: GET_CAPABILITIES returned 0 [ 745.015461][T22098] usbtmc 4-1:16.0: can't read capabilities [ 745.214517][ T5953] usb 4-1: USB disconnect, device number 63 [ 745.562758][T22098] IPVS: starting estimator thread 0... [ 745.660059][T25090] IPVS: using max 26 ests per chain, 62400 per kthread [ 745.667301][ T5953] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 745.855660][ T5953] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 745.879834][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.925665][ T5953] usb 5-1: config 0 descriptor?? [ 745.955920][ T5953] gspca_main: spca508-2.14.0 probing 8086:0110 [ 746.178499][ T5953] gspca_spca508: reg_read err -32 [ 746.195013][ T5953] gspca_spca508: reg_read err -32 [ 746.208123][ T5953] gspca_spca508: reg_read err -32 [ 746.424358][ T5953] gspca_spca508: reg_read err -71 [ 746.446545][ T5953] gspca_spca508: reg write: error -71 [ 746.462883][ T5953] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 746.498240][ T5953] usb 5-1: USB disconnect, device number 63 [ 746.686928][T25119] netlink: 'syz.3.8149': attribute type 11 has an invalid length. [ 746.705867][T22102] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 746.901333][T22102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.938123][T22102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.957262][T22102] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 746.977494][T22102] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 747.010547][T22102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.038477][T22102] usb 2-1: config 0 descriptor?? [ 747.493803][T22102] acrux 0003:1A34:0802.0038: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 747.515166][T22102] acrux 0003:1A34:0802.0038: no inputs found [ 747.536655][T22102] acrux 0003:1A34:0802.0038: Failed to enable force feedback support, error: -19 [ 747.694142][ T9] usb 2-1: USB disconnect, device number 69 [ 747.871391][T25151] netlink: 'syz.4.8162': attribute type 1 has an invalid length. [ 747.884570][T25151] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.8162'. [ 748.178986][T25163] syzkaller1: entered promiscuous mode [ 748.184815][T25163] syzkaller1: entered allmulticast mode [ 748.509610][T22098] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 748.702242][T22098] usb 2-1: Using ep0 maxpacket: 32 [ 748.733451][T22098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.765302][T22098] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.794932][T22098] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 748.826175][T22098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.853940][T22098] usb 2-1: config 0 descriptor?? [ 748.942926][ T9] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 748.996210][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 748.996230][ T30] audit: type=1326 audit(1756058698.314:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25185 comm="syz.3.8176" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f93539 code=0x0 [ 749.111037][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 749.119886][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 749.133091][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.136998][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.145474][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.166343][T22102] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 749.174396][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 749.197354][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 749.206419][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 749.224781][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.238089][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.260237][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 749.274007][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 749.282589][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 749.294342][ T9] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 749.306076][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 749.325194][ T9] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 749.340313][T22102] usb 3-1: Using ep0 maxpacket: 16 [ 749.347346][T22098] savu 0003:1E7D:2D5A.0039: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 749.362066][T22102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.376958][T22102] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.400631][ T9] usb 5-1: string descriptor 0 read error: -22 [ 749.407132][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 749.417358][T22102] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 749.431691][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.443632][T22102] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 749.472313][T22102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.481329][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 749.506975][T22102] usb 3-1: config 0 descriptor?? [ 749.632052][T22098] usb 2-1: USB disconnect, device number 70 [ 749.709306][ T5953] usb 5-1: USB disconnect, device number 64 [ 749.927284][T22102] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 749.935054][T22102] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 749.943741][T22102] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 749.951248][T22102] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 749.958680][T22102] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 749.966314][T22102] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 749.974559][T22102] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 749.982117][T22102] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 749.989690][T22102] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 749.996972][T22102] microsoft 0003:045E:07DA.003A: unknown main item tag 0x0 [ 750.006359][T22102] HID 045e:07da: Invalid code 65791 type 1 [ 750.019754][T22102] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.003A/input/input88 [ 750.097874][T22102] microsoft 0003:045E:07DA.003A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 750.135931][T22102] usb 3-1: USB disconnect, device number 63 [ 750.150013][T22098] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 750.230277][T25194] fido_id[25194]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 750.332003][T22098] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 750.354962][T22098] usb 4-1: config 0 has no interface number 0 [ 750.366325][T22098] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 750.382480][T22098] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 750.414124][T22098] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 750.428952][T22098] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 750.446562][T22098] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 750.465112][T22098] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 750.486300][T22098] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 750.501675][T22098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.521414][T25200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8182'. [ 750.536427][T22098] usb 4-1: config 0 descriptor?? [ 750.549068][T25200] netlink: 'syz.1.8182': attribute type 18 has an invalid length. [ 750.558720][T25200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8182'. [ 750.561920][T25193] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 750.596733][T25193] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 750.629939][T22098] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 750.856493][ T5953] usb 4-1: USB disconnect, device number 64 [ 750.862572][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 750.876356][ T5953] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 750.992884][ T30] audit: type=1326 audit(1756058700.314:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25203 comm="syz.4.8183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 751.017529][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 751.030199][ T30] audit: type=1326 audit(1756058700.314:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25203 comm="syz.4.8183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 751.068200][ T30] audit: type=1326 audit(1756058700.314:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25203 comm="syz.4.8183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 751.100872][T22098] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 751.105438][ T30] audit: type=1326 audit(1756058700.334:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25203 comm="syz.4.8183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 751.132047][ T30] audit: type=1326 audit(1756058700.334:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25203 comm="syz.4.8183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 751.154986][ T30] audit: type=1326 audit(1756058700.334:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25203 comm="syz.4.8183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 751.179235][ T30] audit: type=1326 audit(1756058700.334:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25203 comm="syz.4.8183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 751.210367][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 751.220176][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.231276][ T9] usb 2-1: config 0 descriptor?? [ 751.239760][ T30] audit: type=1326 audit(1756058700.334:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25203 comm="syz.4.8183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 751.264025][ T9] cp210x 2-1:0.0: cp210x converter detected [ 751.271284][T22098] usb 3-1: Using ep0 maxpacket: 8 [ 751.280779][ T30] audit: type=1326 audit(1756058700.334:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25203 comm="syz.4.8183" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf706e558 code=0x7ffc0000 [ 751.281583][T22098] usb 3-1: unable to get BOS descriptor or descriptor too short [ 751.351307][T22098] usb 3-1: config 4 interface 0 has no altsetting 0 [ 751.362449][T22098] usb 3-1: string descriptor 0 read error: -22 [ 751.371168][T22098] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 751.380460][T22098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.416532][T22098] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 751.451161][T22098] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 751.473306][T22098] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 751.484630][T22098] usb 3-1: media controller created [ 751.512917][T22098] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 751.615610][T25215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8188'. [ 751.648060][ T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 751.859742][ T9] cp210x 2-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 751.896695][ T9] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 751.985917][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 752.011934][ T9] usb 2-1: USB disconnect, device number 71 [ 752.027544][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 752.052377][ T9] cp210x 2-1:0.0: device disconnected [ 752.508279][T25237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8197'. [ 752.615437][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.622277][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.729750][T22102] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 752.793816][T22098] usb 3-1: USB disconnect, device number 64 [ 752.885369][T22102] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.901445][T22102] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 752.916920][T22102] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 752.927152][T22102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.935929][T22102] usb 4-1: Product: syz [ 752.940584][T22102] usb 4-1: Manufacturer: syz [ 752.945220][T22102] usb 4-1: SerialNumber: syz [ 753.168071][T25238] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 753.653738][T25265] netlink: 428 bytes leftover after parsing attributes in process `syz.0.8209'. [ 753.769444][T22102] cdc_ncm 4-1:1.0: bind() failure [ 753.777564][T25265] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8209'. [ 753.793031][T22102] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 753.802834][T22102] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 753.831585][T22102] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 753.862187][T22102] usb 4-1: USB disconnect, device number 65 [ 753.981973][T25273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8211'. [ 755.350158][T22098] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 755.439584][T22092] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 755.522083][T22098] usb 3-1: unable to get BOS descriptor or descriptor too short [ 755.540178][T22098] usb 3-1: not running at top speed; connect to a high speed hub [ 755.550958][T22098] usb 3-1: config 12 interface 0 altsetting 4 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 755.579085][T22098] usb 3-1: config 12 interface 0 has no altsetting 0 [ 755.592310][T22092] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 755.607291][T22092] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 755.619992][T22098] usb 3-1: New USB device found, idVendor=eb1a, idProduct=5051, bcdDevice=d0.01 [ 755.629096][T22098] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.639319][T22092] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 755.648654][T22092] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 755.659951][T22098] usb 3-1: Product: syz [ 755.669682][T22098] usb 3-1: Manufacturer: syz [ 755.675063][T22098] usb 3-1: SerialNumber: syz [ 755.679935][T22092] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 755.722555][T22092] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 755.742404][T22092] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 755.753968][T22092] usb 5-1: Product: syz [ 755.758259][T22092] usb 5-1: Manufacturer: syz [ 755.799740][T22092] cdc_wdm 5-1:1.0: skipping garbage [ 755.809559][T22092] cdc_wdm 5-1:1.0: skipping garbage [ 755.823826][T22092] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 755.842398][T22092] cdc_wdm 5-1:1.0: Unknown control protocol [ 755.963258][T22098] usb 3-1: USB disconnect, device number 65 [ 756.035316][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 756.042041][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 756.048410][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 756.055051][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 756.063002][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 756.069738][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 756.077916][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 756.084560][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 756.091114][T22092] usb 5-1: USB disconnect, device number 65 [ 756.098035][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 756.104688][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 756.110893][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 756.119698][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.705888][T25334] geneve0: entered promiscuous mode [ 756.820158][ T122] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 756.991486][ T122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.039568][ T122] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 757.060362][ T122] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 757.097975][ T122] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 757.150120][ T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.168229][ T122] usb 4-1: config 0 descriptor?? [ 757.275614][T25367] sctp: [Deprecated]: syz.4.8246 (pid 25367) Use of int in max_burst socket option deprecated. [ 757.275614][T25367] Use struct sctp_assoc_value instead [ 757.309860][T22092] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 757.469836][T22092] usb 2-1: Using ep0 maxpacket: 8 [ 757.480041][T22092] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 757.490376][T22092] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 757.501233][T22092] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 757.529587][T22092] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 757.548614][T22092] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 757.559119][T22092] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.605125][ T122] acrux 0003:1A34:0802.003B: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.3-1/input0 [ 757.619729][T22102] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 757.637904][ T122] acrux 0003:1A34:0802.003B: no inputs found [ 757.646743][ T122] acrux 0003:1A34:0802.003B: Failed to enable force feedback support, error: -19 [ 757.791391][T22102] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 757.796875][T22092] usb 2-1: GET_CAPABILITIES returned 0 [ 757.831941][T22092] usbtmc 2-1:16.0: can't read capabilities [ 757.841122][T22102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 757.858488][T22102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 757.890933][T22102] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 757.923643][T22092] usb 4-1: USB disconnect, device number 66 [ 757.944197][T22102] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 757.976483][T22102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.021327][T22102] usb 5-1: config 0 descriptor?? [ 758.087574][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.097347][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.106486][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.119649][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.131121][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.140299][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.149415][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.163132][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.172277][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.181376][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.195482][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.205661][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.214884][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.224161][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.237433][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.246592][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 758.297046][T17253] usb 2-1: USB disconnect, device number 72 [ 758.408961][T25384] all (unregistering): Released all slaves [ 758.527983][T22102] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 758.625594][T25395] [ 758.627994][T25395] ===================================================== [ 758.634951][T25395] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 758.642453][T25395] syzkaller #0 Not tainted [ 758.646924][T25395] ----------------------------------------------------- [ 758.653892][T25395] syz.0.8258/25395 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 758.661654][T25395] ffff8880579079f0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 758.670423][T25395] [ 758.670423][T25395] and this task is already holding: [ 758.677819][T25395] ffff888029735230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 758.687535][T25395] which would create a new lock dependency: [ 758.693432][T25395] (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 758.701385][T25395] [ 758.701385][T25395] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 758.710852][T25395] (&dev->event_lock#2){..-.}-{3:3} [ 758.710886][T25395] [ 758.710886][T25395] ... which became SOFTIRQ-irq-safe at: [ 758.723797][T25395] lock_acquire+0x120/0x360 [ 758.728412][T25395] _raw_spin_lock_irqsave+0xa7/0xf0 [ 758.733707][T25395] input_inject_event+0xa5/0x340 [ 758.738755][T25395] led_trigger_event+0x138/0x210 [ 758.743789][T25395] kbd_bh+0x1c6/0x2e0 [ 758.747869][T25395] tasklet_action_common+0x369/0x580 [ 758.753288][T25395] handle_softirqs+0x283/0x870 [ 758.758148][T25395] run_ksoftirqd+0x9b/0x100 [ 758.762767][T25395] smpboot_thread_fn+0x53f/0xa60 [ 758.767910][T25395] kthread+0x70e/0x8a0 [ 758.772093][T25395] ret_from_fork+0x3f9/0x770 [ 758.776778][T25395] ret_from_fork_asm+0x1a/0x30 [ 758.781638][T25395] [ 758.781638][T25395] to a SOFTIRQ-irq-unsafe lock: [ 758.788663][T25395] (tasklist_lock){.+.+}-{3:3} [ 758.788691][T25395] [ 758.788691][T25395] ... which became SOFTIRQ-irq-unsafe at: [ 758.801420][T25395] ... [ 758.801429][T25395] lock_acquire+0x120/0x360 [ 758.808626][T25395] _raw_read_lock+0x36/0x50 [ 758.813230][T25395] __do_wait+0xde/0x740 [ 758.817484][T25395] do_wait+0x1f8/0x520 [ 758.821667][T25395] kernel_wait+0xab/0x170 [ 758.826120][T25395] call_usermodehelper_exec_work+0xbe/0x230 [ 758.832115][T25395] process_scheduled_works+0xae1/0x17b0 [ 758.837754][T25395] worker_thread+0x8a0/0xda0 [ 758.842445][T25395] kthread+0x70e/0x8a0 [ 758.846632][T25395] ret_from_fork+0x3f9/0x770 [ 758.851406][T25395] ret_from_fork_asm+0x1a/0x30 [ 758.856376][T25395] [ 758.856376][T25395] other info that might help us debug this: [ 758.856376][T25395] [ 758.866628][T25395] Chain exists of: [ 758.866628][T25395] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 758.866628][T25395] [ 758.879664][T25395] Possible interrupt unsafe locking scenario: [ 758.879664][T25395] [ 758.888000][T25395] CPU0 CPU1 [ 758.893377][T25395] ---- ---- [ 758.898758][T25395] lock(tasklist_lock); [ 758.903021][T25395] local_irq_disable(); [ 758.909782][T25395] lock(&dev->event_lock#2); [ 758.917017][T25395] lock(&new->fa_lock); [ 758.923794][T25395] [ 758.927257][T25395] lock(&dev->event_lock#2); [ 758.932121][T25395] [ 758.932121][T25395] *** DEADLOCK *** [ 758.932121][T25395] [ 758.940309][T25395] 6 locks held by syz.0.8258/25395: [ 758.945536][T25395] #0: ffff888029737118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 758.954725][T25395] #1: ffff888029735230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 758.964863][T25395] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 758.974550][T25395] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 758.984155][T25395] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00 [ 758.994366][T25395] #5: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 759.003448][T25395] [ 759.003448][T25395] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 759.013865][T25395] -> (&dev->event_lock#2){..-.}-{3:3} { [ 759.019466][T25395] IN-SOFTIRQ-W at: [ 759.023472][T25395] lock_acquire+0x120/0x360 [ 759.029673][T25395] _raw_spin_lock_irqsave+0xa7/0xf0 [ 759.036715][T25395] input_inject_event+0xa5/0x340 [ 759.043313][T25395] led_trigger_event+0x138/0x210 [ 759.049911][T25395] kbd_bh+0x1c6/0x2e0 [ 759.055561][T25395] tasklet_action_common+0x369/0x580 [ 759.062525][T25395] handle_softirqs+0x283/0x870 [ 759.075435][T25395] run_ksoftirqd+0x9b/0x100 [ 759.081647][T25395] smpboot_thread_fn+0x53f/0xa60 [ 759.088264][T25395] kthread+0x70e/0x8a0 [ 759.094011][T25395] ret_from_fork+0x3f9/0x770 [ 759.100364][T25395] ret_from_fork_asm+0x1a/0x30 [ 759.106984][T25395] INITIAL USE at: [ 759.110998][T25395] lock_acquire+0x120/0x360 [ 759.117134][T25395] _raw_spin_lock_irqsave+0xa7/0xf0 [ 759.124205][T25395] input_inject_event+0xa5/0x340 [ 759.130770][T25395] kbd_led_trigger_activate+0xbc/0x100 [ 759.137846][T25395] led_trigger_set+0x52a/0x950 [ 759.144211][T25395] led_trigger_set_default+0x260/0x2a0 [ 759.151282][T25395] led_classdev_register_ext+0x73d/0x930 [ 759.158521][T25395] input_leds_connect+0x517/0x790 [ 759.165327][T25395] input_register_device+0xd00/0x1140 [ 759.172296][T25395] atkbd_connect+0x72e/0xa00 [ 759.178461][T25395] serio_driver_probe+0x7f/0xd0 [ 759.184896][T25395] really_probe+0x26d/0x9e0 [ 759.190987][T25395] __driver_probe_device+0x18c/0x2f0 [ 759.197851][T25395] driver_probe_device+0x4f/0x430 [ 759.204503][T25395] __driver_attach+0x452/0x700 [ 759.210847][T25395] bus_for_each_dev+0x233/0x2b0 [ 759.217300][T25395] serio_handle_event+0x1f9/0x8d0 [ 759.223913][T25395] process_scheduled_works+0xae1/0x17b0 [ 759.231031][T25395] worker_thread+0x8a0/0xda0 [ 759.237197][T25395] kthread+0x70e/0x8a0 [ 759.242846][T25395] ret_from_fork+0x3f9/0x770 [ 759.249017][T25395] ret_from_fork_asm+0x1a/0x30 [ 759.255373][T25395] } [ 759.258047][T25395] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 759.267174][T25395] [ 759.267174][T25395] the dependencies between the lock to be acquired [ 759.267187][T25395] and SOFTIRQ-irq-unsafe lock: [ 759.280724][T25395] -> (tasklist_lock){.+.+}-{3:3} { [ 759.286047][T25395] HARDIRQ-ON-R at: [ 759.290211][T25395] lock_acquire+0x120/0x360 [ 759.296733][T25395] _raw_read_lock+0x36/0x50 [ 759.303255][T25395] __do_wait+0xde/0x740 [ 759.309444][T25395] do_wait+0x1f8/0x520 [ 759.315535][T25395] kernel_wait+0xab/0x170 [ 759.321881][T25395] call_usermodehelper_exec_work+0xbe/0x230 [ 759.329969][T25395] process_scheduled_works+0xae1/0x17b0 [ 759.337650][T25395] worker_thread+0x8a0/0xda0 [ 759.344270][T25395] kthread+0x70e/0x8a0 [ 759.350354][T25395] ret_from_fork+0x3f9/0x770 [ 759.357844][T25395] ret_from_fork_asm+0x1a/0x30 [ 759.364744][T25395] SOFTIRQ-ON-R at: [ 759.368961][T25395] lock_acquire+0x120/0x360 [ 759.375500][T25395] _raw_read_lock+0x36/0x50 [ 759.382021][T25395] __do_wait+0xde/0x740 [ 759.388206][T25395] do_wait+0x1f8/0x520 [ 759.394306][T25395] kernel_wait+0xab/0x170 [ 759.400667][T25395] call_usermodehelper_exec_work+0xbe/0x230 [ 759.408602][T25395] process_scheduled_works+0xae1/0x17b0 [ 759.416170][T25395] worker_thread+0x8a0/0xda0 [ 759.422773][T25395] kthread+0x70e/0x8a0 [ 759.428857][T25395] ret_from_fork+0x3f9/0x770 [ 759.435452][T25395] ret_from_fork_asm+0x1a/0x30 [ 759.442318][T25395] INITIAL USE at: [ 759.446393][T25395] lock_acquire+0x120/0x360 [ 759.452825][T25395] _raw_write_lock_irq+0xa2/0xf0 [ 759.459684][T25395] copy_process+0x224f/0x3c00 [ 759.466364][T25395] kernel_clone+0x21e/0x840 [ 759.472788][T25395] user_mode_thread+0xdd/0x140 [ 759.479518][T25395] rest_init+0x23/0x300 [ 759.485625][T25395] start_kernel+0x3a9/0x410 [ 759.492051][T25395] x86_64_start_reservations+0x24/0x30 [ 759.499479][T25395] x86_64_start_kernel+0x143/0x1c0 [ 759.506525][T25395] common_startup_64+0x13e/0x147 [ 759.513411][T25395] INITIAL READ USE at: [ 759.517922][T25395] lock_acquire+0x120/0x360 [ 759.524786][T25395] _raw_read_lock+0x36/0x50 [ 759.531658][T25395] __do_wait+0xde/0x740 [ 759.538182][T25395] do_wait+0x1f8/0x520 [ 759.544608][T25395] kernel_wait+0xab/0x170 [ 759.551296][T25395] call_usermodehelper_exec_work+0xbe/0x230 [ 759.559558][T25395] process_scheduled_works+0xae1/0x17b0 [ 759.567472][T25395] worker_thread+0x8a0/0xda0 [ 759.574426][T25395] kthread+0x70e/0x8a0 [ 759.580855][T25395] ret_from_fork+0x3f9/0x770 [ 759.587805][T25395] ret_from_fork_asm+0x1a/0x30 [ 759.594934][T25395] } [ 759.597609][T25395] ... key at: [] tasklist_lock+0x18/0x40 [ 759.605524][T25395] ... acquired at: [ 759.609507][T25395] lock_acquire+0x120/0x360 [ 759.614199][T25395] _raw_read_lock+0x36/0x50 [ 759.618885][T25395] send_sigio+0x101/0x370 [ 759.623428][T25395] dnotify_handle_event+0x169/0x440 [ 759.628818][T25395] fsnotify+0x1814/0x1a80 [ 759.633337][T25395] path_openat+0x171e/0x3830 [ 759.638108][T25395] do_filp_open+0x1fa/0x410 [ 759.642796][T25395] do_sys_openat2+0x121/0x1c0 [ 759.647656][T25395] __ia32_compat_sys_open+0x117/0x140 [ 759.653212][T25395] __do_fast_syscall_32+0xb6/0x2b0 [ 759.658513][T25395] do_fast_syscall_32+0x34/0x80 [ 759.663557][T25395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 759.670069][T25395] [ 759.672397][T25395] -> (&f_owner->lock){....}-{3:3} { [ 759.677711][T25395] INITIAL USE at: [ 759.681701][T25395] lock_acquire+0x120/0x360 [ 759.687972][T25395] _raw_write_lock_irq+0xa2/0xf0 [ 759.694661][T25395] __f_setown+0x67/0x370 [ 759.700661][T25395] fcntl_dirnotify+0x3fa/0x6a0 [ 759.707170][T25395] do_fcntl+0x6d0/0x1910 [ 759.713178][T25395] do_compat_fcntl64+0x477/0x720 [ 759.719973][T25395] __do_fast_syscall_32+0xb6/0x2b0 [ 759.727014][T25395] do_fast_syscall_32+0x34/0x80 [ 759.733619][T25395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 759.741714][T25395] INITIAL READ USE at: [ 759.746140][T25395] lock_acquire+0x120/0x360 [ 759.752830][T25395] _raw_read_lock_irqsave+0xaf/0x100 [ 759.760302][T25395] send_sigio+0x38/0x370 [ 759.766731][T25395] dnotify_handle_event+0x169/0x440 [ 759.774302][T25395] fsnotify+0x1814/0x1a80 [ 759.780925][T25395] path_openat+0x171e/0x3830 [ 759.787716][T25395] do_filp_open+0x1fa/0x410 [ 759.794488][T25395] do_sys_openat2+0x121/0x1c0 [ 759.801350][T25395] __ia32_compat_sys_open+0x117/0x140 [ 759.808909][T25395] __do_fast_syscall_32+0xb6/0x2b0 [ 759.816297][T25395] do_fast_syscall_32+0x34/0x80 [ 759.823337][T25395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 759.831854][T25395] } [ 759.834450][T25395] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 759.843417][T25395] ... acquired at: [ 759.847313][T25395] lock_acquire+0x120/0x360 [ 759.852008][T25395] _raw_read_lock_irqsave+0xaf/0x100 [ 759.857479][T25395] send_sigio+0x38/0x370 [ 759.861912][T25395] kill_fasync+0x24d/0x4d0 [ 759.866517][T25395] sock_wake_async+0x137/0x160 [ 759.871470][T25395] sk_wake_async+0x184/0x280 [ 759.876249][T25395] unix_release_sock+0x768/0xd30 [ 759.881366][T25395] unix_release+0x92/0xd0 [ 759.885886][T25395] sock_close+0xc0/0x240 [ 759.890318][T25395] __fput+0x44c/0xa70 [ 759.894479][T25395] task_work_run+0x1d4/0x260 [ 759.899261][T25395] exit_to_user_mode_loop+0xec/0x110 [ 759.904817][T25395] __do_fast_syscall_32+0x1f4/0x2b0 [ 759.910203][T25395] do_fast_syscall_32+0x34/0x80 [ 759.915332][T25395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 759.921851][T25395] [ 759.924179][T25395] -> (&new->fa_lock){....}-{3:3} { [ 759.929318][T25395] INITIAL USE at: [ 759.933224][T25395] lock_acquire+0x120/0x360 [ 759.939303][T25395] _raw_write_lock_irq+0xa2/0xf0 [ 759.945825][T25395] fasync_remove_entry+0xf1/0x1c0 [ 759.952440][T25395] __fput+0x89f/0xa70 [ 759.957995][T25395] task_work_run+0x1d4/0x260 [ 759.964167][T25395] exit_to_user_mode_loop+0xec/0x110 [ 759.971074][T25395] __do_fast_syscall_32+0x1f4/0x2b0 [ 759.977961][T25395] do_fast_syscall_32+0x34/0x80 [ 759.984418][T25395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 759.992356][T25395] INITIAL READ USE at: [ 759.996745][T25395] lock_acquire+0x120/0x360 [ 760.003287][T25395] _raw_read_lock_irqsave+0xaf/0x100 [ 760.010610][T25395] kill_fasync+0x199/0x4d0 [ 760.017075][T25395] mousedev_write+0x8f9/0x950 [ 760.023811][T25395] vfs_writev+0x4b3/0x960 [ 760.030170][T25395] do_writev+0x14d/0x2d0 [ 760.036430][T25395] __do_fast_syscall_32+0xb6/0x2b0 [ 760.043584][T25395] do_fast_syscall_32+0x34/0x80 [ 760.050481][T25395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 760.058842][T25395] } [ 760.061369][T25395] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 760.070085][T25395] ... acquired at: [ 760.073913][T25395] lock_acquire+0x120/0x360 [ 760.079500][T25395] _raw_read_lock_irqsave+0xaf/0x100 [ 760.085012][T25395] kill_fasync+0x199/0x4d0 [ 760.089723][T25395] mousedev_notify_readers+0x6f1/0xc00 [ 760.095386][T25395] mousedev_event+0x602/0x1320 [ 760.100443][T25395] input_handle_events_default+0xd4/0x1a0 [ 760.106350][T25395] input_pass_values+0x288/0x890 [ 760.111530][T25395] input_event_dispose+0x330/0x6b0 [ 760.116830][T25395] input_inject_event+0x1dd/0x340 [ 760.122042][T25395] evdev_write+0x2fc/0x480 [ 760.126649][T25395] vfs_write+0x27e/0xb30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 760.131155][T25395] ksys_write+0x145/0x250 [ 760.135673][T25395] __do_fast_syscall_32+0xb6/0x2b0 [ 760.140977][T25395] do_fast_syscall_32+0x34/0x80 [ 760.146020][T25395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 760.152536][T25395] [ 760.154867][T25395] [ 760.154867][T25395] stack backtrace: [ 760.160868][T25395] CPU: 1 UID: 0 PID: 25395 Comm: syz.0.8258 Not tainted syzkaller #0 PREEMPT(full) [ 760.160891][T25395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 760.160906][T25395] Call Trace: [ 760.160916][T25395] [ 760.160925][T25395] dump_stack_lvl+0x189/0x250 [ 760.160951][T25395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 760.160971][T25395] ? __pfx__printk+0x10/0x10 [ 760.160999][T25395] validate_chain+0x1f05/0x2140 [ 760.161027][T25395] __lock_acquire+0xab9/0xd20 [ 760.161054][T25395] ? kill_fasync+0x199/0x4d0 [ 760.161073][T25395] lock_acquire+0x120/0x360 [ 760.161097][T25395] ? kill_fasync+0x199/0x4d0 [ 760.161120][T25395] _raw_read_lock_irqsave+0xaf/0x100 [ 760.161144][T25395] ? kill_fasync+0x199/0x4d0 [ 760.161162][T25395] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 760.161189][T25395] kill_fasync+0x199/0x4d0 [ 760.161208][T25395] ? kill_fasync+0x53/0x4d0 [ 760.161227][T25395] mousedev_notify_readers+0x6f1/0xc00 [ 760.161256][T25395] ? mousedev_notify_readers+0x2c/0xc00 [ 760.161281][T25395] mousedev_event+0x602/0x1320 [ 760.161306][T25395] input_handle_events_default+0xd4/0x1a0 [ 760.161325][T25395] ? input_pass_values+0x8d/0x890 [ 760.161347][T25395] input_pass_values+0x288/0x890 [ 760.161374][T25395] ? input_handle_event+0x70c/0xf30 [ 760.161394][T25395] input_event_dispose+0x330/0x6b0 [ 760.161416][T25395] input_inject_event+0x1dd/0x340 [ 760.161443][T25395] ? input_inject_event+0xb6/0x340 [ 760.161464][T25395] evdev_write+0x2fc/0x480 [ 760.161488][T25395] ? futex_private_hash_put+0x245/0x280 [ 760.161510][T25395] ? __pfx_evdev_write+0x10/0x10 [ 760.161535][T25395] ? bpf_lsm_file_permission+0x9/0x20 [ 760.161556][T25395] ? security_file_permission+0x75/0x290 [ 760.161579][T25395] ? rw_verify_area+0x255/0x4d0 [ 760.161600][T25395] ? __lock_acquire+0xab9/0xd20 [ 760.161624][T25395] ? __pfx_evdev_write+0x10/0x10 [ 760.161649][T25395] vfs_write+0x27e/0xb30 [ 760.161674][T25395] ? __pfx_vfs_write+0x10/0x10 [ 760.161697][T25395] ? __fget_files+0x2a/0x420 [ 760.161724][T25395] ? __fget_files+0x2a/0x420 [ 760.161748][T25395] ? __fget_files+0x3a0/0x420 [ 760.161773][T25395] ? __fget_files+0x2a/0x420 [ 760.161801][T25395] ksys_write+0x145/0x250 [ 760.161824][T25395] ? __pfx_ksys_write+0x10/0x10 [ 760.161848][T25395] ? lockdep_hardirqs_on+0x9c/0x150 [ 760.161873][T25395] __do_fast_syscall_32+0xb6/0x2b0 [ 760.161903][T25395] do_fast_syscall_32+0x34/0x80 [ 760.161929][T25395] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 760.161954][T25395] RIP: 0023:0xf7f76539 [ 760.161971][T25395] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 760.161988][T25395] RSP: 002b:00000000f549655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 760.162006][T25395] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 760.162019][T25395] RDX: 0000000000000918 RSI: 0000000000000000 RDI: 0000000000000000 [ 760.162030][T25395] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 760.162040][T25395] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 760.162050][T25395] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 760.162067][T25395] [ 760.481193][ C1] vkms_vblank_simulate: vblank timer overrun [ 760.531918][T22092] usb 5-1: USB disconnect, device number 66 [ 761.101480][ T8507] bridge0: port 3(syz_tun) entered disabled state [ 761.198316][ T8507] syz_tun (unregistering): left allmulticast mode [ 761.205803][ T8507] syz_tun (unregistering): left promiscuous mode [ 761.229623][ T8507] bridge0: port 3(syz_tun) entered disabled state [ 761.322402][ T7009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.450692][ T7009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.535579][ T7009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.602128][ T7009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 761.704087][ T7009] bridge_slave_1: left allmulticast mode [ 761.714786][ T7009] bridge_slave_1: left promiscuous mode [ 761.730123][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.742453][ T7009] bridge_slave_0: left allmulticast mode [ 761.755121][ T7009] bridge_slave_0: left promiscuous mode [ 761.761630][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.268093][ T7009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.278548][ T7009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.287926][ T7009] bond0 (unregistering): Released all slaves [ 762.536797][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.549697][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.476953][ T7009] IPVS: stop unused estimator thread 0... [ 763.783157][ T7009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.836218][ T7009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.916619][ T7009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.975706][ T7009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.071668][ T7009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.137315][ T7009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.188100][ T7009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.246929][ T7009] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.650446][ T7009] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.698243][ T7009] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.756182][ T7009] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.809344][ T7009] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.896747][ T7009] bond1: left promiscuous mode [ 764.901941][ T7009] bridge0: port 3(bond1) entered disabled state [ 764.914346][ T7009] bridge_slave_1: left allmulticast mode [ 764.922840][ T7009] bridge_slave_1: left promiscuous mode [ 764.928615][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.939922][ T7009] bridge_slave_0: left allmulticast mode [ 764.945623][ T7009] bridge_slave_0: left promiscuous mode [ 764.953429][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.963403][ T7009] bridge_slave_1: left allmulticast mode [ 764.969110][ T7009] bridge_slave_1: left promiscuous mode [ 764.975190][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.984067][ T7009] bridge_slave_0: left allmulticast mode [ 764.993030][ T7009] bridge_slave_0: left promiscuous mode [ 764.998760][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.009527][ T7009] bond1: left promiscuous mode [ 765.014614][ T7009] bridge0: port 3(bond1) entered disabled state [ 765.023373][ T7009] bridge_slave_1: left allmulticast mode [ 765.029057][ T7009] bridge_slave_1: left promiscuous mode [ 765.035115][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.043901][ T7009] bridge_slave_0: left allmulticast mode [ 765.049632][ T7009] bridge_slave_0: left promiscuous mode [ 765.055376][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.066786][ T7009] bridge_slave_1: left allmulticast mode [ 765.074473][ T7009] bridge_slave_1: left promiscuous mode [ 765.080651][ T7009] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.090995][ T7009] bridge_slave_0: left allmulticast mode [ 765.096811][ T7009] bridge_slave_0: left promiscuous mode [ 765.103266][ T7009] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.304869][ T7009] bond0 (unregistering): left promiscuous mode [ 765.312222][ T7009] bond_slave_0: left promiscuous mode [ 765.317779][ T7009] bond_slave_1: left promiscuous mode [ 765.324615][ T7009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.336556][ T7009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.348227][ T7009] bond0 (unregistering): Released all slaves [ 765.487589][ T7009] bond1 (unregistering): Released all slaves [ 765.594707][ T7009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.605451][ T7009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.615966][ T7009] bond0 (unregistering): Released all slaves [ 765.995461][ T7009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.005108][ T7009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.018003][ T7009] bond0 (unregistering): Released all slaves [ 766.132235][ T7009] bond1 (unregistering): Released all slaves [ 766.482818][ T7009]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.493005][ T7009]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.503181][ T7009]  (unregistering): Released all slaves [ 766.514884][ T7009] bond0 (unregistering): Released all slaves [ 766.671287][ T7009] tipc: Disabling bearer [ 766.676814][ T7009] tipc: Left network mode [ 766.712227][ T7009] tipc: Disabling bearer [ 766.717695][ T7009] tipc: Left network mode [ 767.411359][ T7009] batadv0: left promiscuous mode [ 767.424387][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.434721][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.445387][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.454985][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.467562][ T7009] hsr_slave_0: left promiscuous mode [ 767.473721][ T7009] hsr_slave_1: left promiscuous mode [ 767.481825][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.489297][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.502146][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.512322][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.523217][ T7009] batadv_slave_0: left promiscuous mode [ 767.529743][ T7009] batadv_slave_1: left promiscuous mode [ 767.540101][ T7009] hsr_slave_0: left promiscuous mode [ 767.546030][ T7009] hsr_slave_1: left promiscuous mode [ 767.553961][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.564887][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.574914][ T7009] hsr_slave_0: left promiscuous mode [ 767.582939][ T7009] hsr_slave_1: left promiscuous mode [ 767.588805][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.598393][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.608344][ T7009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.617247][ T7009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.627192][ T7009] batman_adv: batadv0: Interface deactivated: macvtap1 [ 767.635401][ T7009] batman_adv: batadv0: Removing interface: macvtap1 [ 767.655276][ T7009] hsr0: left allmulticast mode [ 767.666354][ T7009] veth1_macvtap: left promiscuous mode [ 767.672628][ T7009] veth0_macvtap: left promiscuous mode [ 767.678261][ T7009] veth1_vlan: left promiscuous mode [ 767.685971][ T7009] veth0_vlan: left promiscuous mode [ 767.695989][ T7009] veth1_macvtap: left promiscuous mode [ 767.703994][ T7009] veth0_macvtap: left promiscuous mode [ 767.709731][ T7009] veth1_vlan: left promiscuous mode [ 767.715052][ T7009] veth0_vlan: left promiscuous mode [ 767.724809][ T7009] batadv_slave_1: left promiscuous mode [ 767.730644][ T7009] veth1_macvtap: left promiscuous mode [ 767.736193][ T7009] veth0_macvtap: left promiscuous mode [ 768.023221][ T7009] team0 (unregistering): Port device team_slave_1 removed [ 768.051987][ T7009] team0 (unregistering): Port device team_slave_0 removed [ 768.228734][ T7009] team0 (unregistering): Port device team_slave_1 removed [ 768.244620][ T7009] team0 (unregistering): Port device team_slave_0 removed [ 768.388551][ T7009] team0 (unregistering): Port device batadv1 removed