last executing test programs: 4m17.349035381s ago: executing program 1 (id=161): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1b) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 4m17.299854083s ago: executing program 1 (id=162): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x372, @time={0x2, 0x6}, 0x0, {}, 0x1, 0x1, 0x70}) 4m17.19755726s ago: executing program 1 (id=163): r0 = io_uring_setup(0x75c0, &(0x7f0000000ac0)={0x0, 0x9de6, 0x40, 0x2, 0x4800020}) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/oss_mixer\x00', 0x80401, 0x0) writev(r1, &(0x7f0000004740)=[{&(0x7f0000002740)="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", 0x8aa}], 0x1) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 4m16.993324135s ago: executing program 1 (id=164): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]}) chdir(&(0x7f00000000c0)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) 4m16.77711374s ago: executing program 1 (id=166): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000c33000/0x4000)=nil}) 4m16.433383241s ago: executing program 1 (id=169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x40000) 4m16.15246602s ago: executing program 32 (id=169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x40000) 3m20.577251249s ago: executing program 0 (id=892): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r1, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) io_destroy(r1) 3m20.35973672s ago: executing program 0 (id=894): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0x151, 0x0, 0x86c4, 0x0, 0x4, 0x0, 0x9, 0x0, 0x5}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000500)={0x2020}, 0x2020) 3m20.260845931s ago: executing program 0 (id=896): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 3m20.01322429s ago: executing program 0 (id=900): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 3m19.974141505s ago: executing program 0 (id=903): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3m19.461300419s ago: executing program 0 (id=908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3m19.183230611s ago: executing program 33 (id=908): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x9, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 3m1.981211015s ago: executing program 2 (id=1099): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x6, 0x1, 0xf, 0xafc}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="d2", 0xffc0, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 3m1.839243048s ago: executing program 2 (id=1101): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x3}]}}}]}, 0x50}}, 0x0) 3m1.649205056s ago: executing program 2 (id=1102): syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffd, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0xe0ff, 0x0, 0x0, 0x0) 3m1.545856165s ago: executing program 2 (id=1103): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a95004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 3m1.421567405s ago: executing program 2 (id=1104): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7fffffff, 0x372, 0x0, 0x19, "40b80000000000000000001c00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 2m55.335657139s ago: executing program 2 (id=1173): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb020018"], 0x0, 0x42}, 0x28) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 2m55.114378883s ago: executing program 34 (id=1173): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb020018"], 0x0, 0x42}, 0x28) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) 3.185954868s ago: executing program 6 (id=3238): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b00"], 0x20}], 0x1}, 0x0) close(r0) 2.947965026s ago: executing program 6 (id=3244): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.876670007s ago: executing program 3 (id=3245): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'bridge_slave_0\x00', @broadcast}) 2.52949478s ago: executing program 3 (id=3250): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.525505437s ago: executing program 5 (id=3251): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x202, 0x200000}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x0, 0x51}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r0, 0x0, 0x10000000000000}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2.375334444s ago: executing program 6 (id=3252): unshare(0x6a040000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='ip6erspan0\x00'}) ioctl$sock_SIOCGIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x3, &(0x7f0000000100)='ip6erspan0\x00', 0x2a0ffffffff}) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x1) 2.375058256s ago: executing program 5 (id=3253): syz_io_uring_setup(0x22b, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x0, 0x0, 0xa}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="03c90000cf47d16331aef6ee13ff7f266e13da7be839b35e9ae1a333f2d8fd8e1983903166f4d8f3d5e043b8eb3a4dd0a04b39df97c82009b793cd734558a268aac6cea0ca6aa40899810bc164d8ad6b2ce23bf4b88d9b72991218c6c68e9a992582d217f639c8ad76405b511163edb9ca95e8123830003ab82fc86a517ac2aff77866914ebb9aca4a6e530d80f19ee31eeb1e5b8139b72264f8fceb54ee9980e771c5f11155b69e12e65e6a3699d1b80648dd949081f1a612b7b5950f41554c9b832f7cf9efa4987bd88887917199318d28808204e7638ca5932c066d2a662e600ac0a8f27b86c066f2bceabd1b3af66c12fefa311c5afe0821a14432925187a05476e0a972e85f26a24832c357d70d354ade966e6963234e4956658ac9ece3780485fcb3decb69a029ffbeda1c7b27bb020f4137624286d8a2d22221028b3efd3433e7fd3ba291446947a274a748f45bb347fa49e295cfa305f5dd46b662afde61cfee33ea823d23f46a662146886c6e3c30e660d765f46dcc14914b3e342e44436410fedeb6594f37ac94cd336dea463e0541daadbe70b5b925741db16240afc85f391539569ac14e5dccb9ca5790c33f8a6cdd7abc1cb762972634968ecb9f1dff8b6b6cd6f5f56db31c24ac5b2b1bed2efea1f4e67f686a8abfa41f297a165b9fcb4800230ed07af34727fe6c2cc6daf796cc38e8f03ee4fb786a92fabfbded442086d657dec598edb21ba428d4bb28ac974c38218bcf08ad3b4f6698ae05855769dbe5693eac83a223b76a5f452195795d3d485e5c0a18caf2315c3a21acb4bb661082b1c4fccfff8f0c52c353dedd3b9e575b800cfec557e43527228abf820e16411b45c77e99f308dcc5dcd1c3b8ddb828e6481c1fc6275c3e1ed4a1f0fe6d97db39cb3ad5b08400cc990ed5797e23fcd81ee76eed1caaf2ec709c18b014dfcfac7eb658f1c07a894dca1d8e23ebbc18c7b0acefacd915235a54637d13965681a6a527325d13b4a88a21505860873038bc6ca68e25bed80496e65b53a4817e7dba3cbe31eebb770ab04202486634b7210500238707cd664735c07e539e8ccb09ec82d7fad69c4f31113b4a01089a81d4a1787d69957a2dfcf371f0c357eba5a587f0d09d64588f3fade99726d786085b513e720fd1d889104e1d98bf4fe23d6bd8c408c44fc702880e6c53a733aaafec836a80b9e69d1432225dda63a755bde5103fbba7af46f81b3b0c3457d49e187c7fa53e9410d4ff7dd1c9a954d549b49197f350e8451e850279ba4690a4ff3fa4f91ebfa4dda7d2a60257d70c09ad6520387baf2cd734bf1f993565f7ccf80f29b1414e595de79ec03faf7afbeff3daf0034aeecfe41640366ae3c1d1b9437cb7580b9a94fe71a5ffe7be4f959cc5972e1672c5f5c5d252a63804d1a292aac2582b78ac73ea143095bc1283b210c66ecc5b5b9be4d6649920118d51429328f8a983a89f8f5d6ec383c89f07e91e0726ed40776d72d7499652a84f9d0bb086e9479a6d703907ee17345ed763ae817751515c744d428ac51fb10eba495f9a477809a4c1b447a94a3f6d1a092b109478ca36c3da494552d34f30d74a32958c53ec091e32ca8aaf5c814881d4bb3add2b07f362e9e4ea17b3f8b6e7310fcbea4ea6f2d9f5505b011011b75eb4dbf2455f665027abe2bb73dd37dff9c6aab6e9454bbd7bb887aef12f19f446bcbf257ada0e5144f708ccf350f07b861b813eb4cdab02d74b660d960c737f553f84b2d027da58f02345704583717199f693c913bfc2704cfde1b31270c43f17d51c82b672796fd6e1d09e34659d7e5fd9a1a69dcdde367c074b47beeb88f374740a64d9e9a99f4fabdbfca311174da518f868704e3fe259e6069330b04d2d3804a3428d2e04a483599f5ff47ff8c877601fcae33999575180fb540ff00c55728d0ee8eb6550658c7cbc8be4f87b50a9650a33aa164c6bae4044dfc080cf43a1c80e8a8132f973faefcf2ee23f9c2f3119fa93c0e5875832d4f8b6c2a1c347d480f15ead27ba7fb6e2ba9f2204982023b15b0f9df44ce9bba765c9598810593dd32a520ba72a5bfc375f36f4ea4a55017b1494c392568ef6828c18a1f2cec1442f705687695e42f62734ac2c1b0fed399ccf29b20fccd476afc72217182a73c970029c7679dffaebfc2ab9e8d18f5e757ccde87ac69b2bb0243b2e86d225dd2edad4919977bde1806bd6305eff22f2d63646c3a856a002aaea40d96e4811fe0cf5ad942e087c55551fdccc65835686320aa635ec50872f1c30cd8a732515b4dbfa132f905205f4b2ec64d1b9a9101ee2c3d0a110e40fd40d2c0b19f9a77b43f0b14e283ad1038de31cb21c2857d278933fd4bf106a7a93e16b28d71dfa73fa0695c77c0b1236e4cc7f17837be252d1011edf8ba626315e416b2963e96172b3294ec1f087672b0fc404edb79ca9b8e7a46f69b7a6f8b0488ec6c10f937632cc29bdb6f2c0ca86b978db6ca3cb9aa9b5f253fb5ba52e5b3738468236bd3ed26da1158e14881860f37f586b3b004ff7233a7427ece1c1365bb273aa1ce801c6d61b35a247c38917df23b9f12f7e764dabf9af18885e447a952de7796c3dd27e77325be816eb82ae9026ef5a855ddfb9aaf4a0bfc153f079c95337d2ee3c2ac36e5b4e8c5da765bf5d11edcf01ef11a3748d7ca0b1fd6f8882fbfd3423bd429c8592ec28a98bba845e7fe829ae2b11f5215ce819bf777ab45d73e9afe3cc76840b7d368161ee140efdec81ca1d5716c2ea5b255fabb5a4698864c8d427738837c45f1006cbf1f68bbedbfdf70e5b65b21b1934826c06d4d3da4f08e3ad376cec5aafb2f9eae9a06cab375ef5a44f30a563e5245077d84823b88d71912f458fe17d36e4b2a88260ad121af2e5a43a555ef61ffd242c09d5011b9be422c4c310a834f664c732930c1d329212aa9f063356c85130c965d919180e62afd193224d3792db6a069ff2bc8770bd6294a6884cbfb71301859a26b7572440ee12719e8753831bf73d353a33ea64c57df0bac0cc8938ea28370724439170824d1b55d415eed14f620d3a28bb5009edd12e9322df3573bbd9b0d0ff2cbd2e48c0c297f63c100116097c48c8f4cf0a7c4fb5156723fcb615236b6db175442b2db90c3e426cca9de56f55effdbb981c75c99a8dd084a619882fb216b000cb99eae616f0b5d7a8a2cc675cbd3e0a61b6f602250b040ae57f998471095563334e165f35139ec22aabf8ada15b890e2cf038a4f40d129760e39b166f58cfb4bfee7d4455ce06ad098745e0edac9434e4c61f889cbe6d7cf74da35f1b6d2b4455abf954223d1638ff808508228a3060d390e9ce539d2dcb032ae5d6c5abcd4df4bfb63f9851e45bb961cca2150eb386abd67dab2a12c096aa8df742e41ff7718f9dd77099d9bc87a2a46d8d6ffb903b23b429747c9acb21c0e88067eb6c7fa2507ef0673e6b65a15767cfa4ef9b52adbce41ea3461f77b0e705a2d5cbcf3841bd22414f3ef2402a915705a18113d370d35619fdbbfb4fe6e1581a8520525e863d931aaaed58d06d093905b0d83dd1345f4b8213954102abf8048be627d437f267d4a0a6e6f181891562b61be55f1e646120cfe17d8d2961ad86d1575856fff39791b90ccc6895495cc0f3a1e2604f5b729aec7452b133b9c822bbc74df480670f34cf0335d42b5ad6a7009c49050d97ef8c09eff8716dbb9ce5a5d67ffad2541860017bfe982c0e48390f987f470c7b600fb29be4d3a74251d85ef1cf1fe3b5a146bb9f6fee2369cba1f2be75782b14a422b0820fa00c1250f4d437f24914a94a8564fa079fe803b39c528707dd2906120d53020000b725596b68553f1653aad2fdd23114e4a7ca3402fcdf0b060323a683a03109ffbec9627c803da8a55665e156a335528f113eb730bb28c0480daf8f2b65483d0f3805e1c512b680d8698e63a80b45aa8c7e12ad0f0e072eefc806fde42455bc4d157e402a86218896d5638f8fdadb1fbffaf4fe92f526475612980f0c5a539a9cec3c63e4efa5b893611af45c8003650888dc5b958a18848cffe11e0636f40e3ade10da702b71a69e6941e506ec3f0297349867949246310909ff445005f68910308df1e44f7ef04efbcb6ade53086aeb80b0ca96b94c9e6353c77bc1ce575edd6a1ab76e000d2ca0bc80c09d76d2bf25d90c93d5fcf6c123a9e83a3354b798356aeb2e99721732d52b1ec6c84d79d6f1237186260e7e63f29cfe8050a8fd44d57b52582b45e1fe027792c07ef33a0ac686606dd009ef3839e179190aca20d01db1d2263898a6953feb5d2e8093a4b4a2b18f6cb06a0251d3862672814b5165213c65174fe5dad7673186293e336348fc77a6d545cc07355c07a8b9a98c95d76fa5dc4c19181578a6dc4f2b29b647ab6a09f6756994c8e389c7c165766f154468b380e1e67cb2edbc7f67b6bfad1de690c3f472908b11d1c502ca61b5e869cd2cf8e11e39eceb9d31fca090fd5dd15e1f5a8c4de58531df3fa96d655653a5b99ea449d3865e07401ecb63fb4ac4042c893841c2b70b4a133937ac0dca8d6f442de175f138ab7cf19477c2483caf524fc443b3243d31f15f3f518b2d7964314d7d34754ae417dd9d46a83e443cef18eb673f46f34aeaba592a171bb4710002da17d9d6554208fc384de22bff7e05d2bfb821656e78bfa084be46fe6b0f04a06c6bc80afbd406a918a57d582345b260360cec7168142ef0e0da8ad70ac9703d6206c6da23558374ad8bc1e8fe5cdede25e8ad5d0d0741d85e86566b7b9172f457e36feabb881f14a04d182b6971bb1aa1c37a608ff0eeaba1b6c37c4bdb15696afb0e031ef8b214a7a72892593c910829c820f773135f3441afc90cadeb50f76d4a5bbd713c8b3dc441599dcae659b9ad417affde5d9ee3933f00ea69323fd33e0b9a12b1ee29b2e97c7b1db3fa0a900678c6490a847fdd85fa93bb134e3239638052359774bc22405a0abb698081ce1dce2dfe0c0430b641f00d230013944df65581f6b5f458165b16aad8b92b44bf28b3236cac5239c91fe2351c5f53359d072aa34ffee18ff275afdc0dc7b889da928fdd4e300a52699cb5a4fea8cc42f636b15e449daef52df3586d4b55fd047b04e96734aa2c45bcad8f05dbf3c97daefcd6bad396a6aed71849e484eb0e3526970973db9b268b71e726748aacb5c2203cde2992af74cac612d33cecba7f3e5d66e2a2e449eb00e770af4fe13be6d16877cfa46c108c29d8db1efff5356433fc627741d12605056ec78c02bf143afc9e2161c15ce65a0f8c9f13a6b7a9164f256301ff0ca23dfffb77ec46ddd29b63d7bcfe5ae482f76f1c0e819b"], 0x1004) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.374683051s ago: executing program 3 (id=3255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000cc0)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435ae156e55eb2b2b2e2300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd58c572f714f6852063afc8358fb33ccb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c", 0xdc}, {&(0x7f0000000b00)="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", 0x1a9}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04296e99c0f709fb3990aa5d0e74a125971357630b6f3eb4fb4064c42c2b2519a1c77824df6f0653fb116149fcb5c7e46fce32b1de7f511951d4b1ae47781250afdb11680684c1d2854810a90dbe10016823346663fdf1df6200a0dc3cafe8ec225fda", 0xfe}, {&(0x7f0000000800)="3a0846cacd7448e2015cc9a09c5f5608265e1e", 0x13}], 0x6, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 2.1299431s ago: executing program 3 (id=3258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x3e, 0x14, 0x64, 0x0, 0xb, 0x2, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}}, "3297e3ba0fa8a2e71bd9fe1a399b51"}}, 0x31) 2.060997637s ago: executing program 6 (id=3260): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.989404458s ago: executing program 7 (id=3261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x7, 0x6, 0x8c}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.929559669s ago: executing program 5 (id=3262): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) 1.865935702s ago: executing program 7 (id=3263): syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') capset(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000002c0)="58020094", 0x4}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 1.773506955s ago: executing program 5 (id=3265): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000080)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 1.68423024s ago: executing program 3 (id=3266): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) 1.67224673s ago: executing program 7 (id=3267): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x4}}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000002000ffff"], 0x2c}}, 0x0) 1.598751965s ago: executing program 6 (id=3269): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000030400000000fdffff0000000300", @ANYRES32=r3, @ANYBLOB="000000006f0018000500100002000000080040"], 0x30}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.549527524s ago: executing program 7 (id=3270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.453598248s ago: executing program 7 (id=3272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x3, 0x0, &(0x7f0000000000), 0x0) 1.453224825s ago: executing program 6 (id=3273): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') 1.40945071s ago: executing program 7 (id=3274): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@local, @local=@item_4={0x3, 0x2, 0x0, "61541821"}, @global=@item_012={0x1, 0x1, 0x4, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @local=@item_4={0x3, 0x2, 0x2, "df07bac8"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000040)={0x3, 0x200, 0x401}) 1.307170404s ago: executing program 4 (id=3275): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 1.160699686s ago: executing program 5 (id=3276): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000500)={0x0, 0x1, [{r1, 0x0, 0x0, 0x8000}]}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f0000000040)=']\x00') 1.133239149s ago: executing program 5 (id=3277): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x4018480c, &(0x7f0000000000)={0x2, 0x100, 0x10000}) 753.373158ms ago: executing program 3 (id=3278): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x5, "989eafdf24"}, 0x0}) 422.059029ms ago: executing program 4 (id=3279): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@hopopts={0x70}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 324.422766ms ago: executing program 4 (id=3280): r0 = socket(0x1e, 0x4, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000001480)={0x0, 0x4008d2dc, 0x400, 0xfffffffd, 0xd6, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 240.610554ms ago: executing program 4 (id=3281): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000680)={0x0, r1}) write$eventfd(r1, &(0x7f0000000300)=0x1, 0x8) 65.631165ms ago: executing program 4 (id=3282): socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x4, 0x7, 0x3, 0x38415262, [0x9, 0x7], [0x85, 0x3d36], 0x1}}) 0s ago: executing program 4 (id=3283): ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000200)="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") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x80000) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): idProduct=10b8, bcdDevice=de.8e [ 262.974164][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.982632][ T5966] usb 6-1: Product: syz [ 262.986856][ T5966] usb 6-1: Manufacturer: syz [ 263.011566][T13040] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2273'. [ 263.023115][ T5966] usb 6-1: SerialNumber: syz [ 263.035206][ T5966] usb 6-1: config 0 descriptor?? [ 263.036330][T13040] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2273'. [ 263.059019][ T5928] usb 4-1: USB disconnect, device number 31 [ 263.152452][ T30] audit: type=1400 audit(1755042536.351:606): avc: denied { bind } for pid=13066 comm="syz.7.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 263.300801][ T44] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 263.335152][ T5844] nintendo 0003:057E:2019.0029: Failed to get joycon info; ret=-71 [ 263.346266][ T5844] nintendo 0003:057E:2019.0029: Failed to retrieve controller info; ret=-71 [ 263.362007][ T5844] nintendo 0003:057E:2019.0029: Failed to initialize controller; ret=-71 [ 263.379480][ T5844] nintendo 0003:057E:2019.0029: probe - fail = -71 [ 263.396609][ T5844] nintendo 0003:057E:2019.0029: probe with driver nintendo failed with error -71 [ 263.412693][ T5844] usb 5-1: USB disconnect, device number 39 [ 263.458217][ T5966] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 263.470540][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 263.477327][ T44] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.487618][ T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.497900][ T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.508501][ T44] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.522419][ T44] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 263.531580][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.756487][ T44] usb 7-1: GET_CAPABILITIES returned 0 [ 263.764391][ T44] usbtmc 7-1:16.0: can't read capabilities [ 263.782992][T13091] netlink: 'syz.3.2294': attribute type 7 has an invalid length. [ 263.790948][T13091] netlink: 'syz.3.2294': attribute type 3 has an invalid length. [ 263.798720][T13091] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2294'. [ 263.819818][ T5928] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 263.964727][ T5966] usb 7-1: USB disconnect, device number 20 [ 264.004134][ T5928] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 264.027972][ T5928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.056410][ T5928] usb 8-1: Product: syz [ 264.066563][ T5928] usb 8-1: Manufacturer: syz [ 264.096918][ T5928] usb 8-1: SerialNumber: syz [ 264.107516][ T5844] usb 6-1: USB disconnect, device number 27 [ 264.111677][ T5928] usb 8-1: config 0 descriptor?? [ 264.137141][ T5928] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 264.333621][ T44] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 264.334168][ T5928] gspca_sunplus: reg_r err -71 [ 264.350815][ T5928] sunplus 8-1:0.0: probe with driver sunplus failed with error -71 [ 264.367940][ T5928] usb 8-1: USB disconnect, device number 14 [ 264.489789][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 264.510821][ T44] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.526991][ T44] usb 4-1: config 0 has no interface number 0 [ 264.545644][ T44] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 264.563151][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.580115][ T44] usb 4-1: Product: syz [ 264.586575][ T44] usb 4-1: Manufacturer: syz [ 264.594210][ T44] usb 4-1: SerialNumber: syz [ 264.603065][ T44] usb 4-1: config 0 descriptor?? [ 264.619191][ T44] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 264.849680][T13139] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2305'. [ 265.182202][ T30] audit: type=1326 audit(1755042538.371:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13160 comm="syz.7.2313" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcaee78ebe9 code=0x0 [ 265.626677][ T44] gspca_spca1528: reg_w err -71 [ 265.631793][ T44] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 265.653733][ T44] usb 4-1: USB disconnect, device number 32 [ 265.667208][T13189] syzkaller1: entered promiscuous mode [ 265.676925][T13189] syzkaller1: entered allmulticast mode [ 265.747461][ T30] audit: type=1400 audit(1755042538.941:608): avc: denied { getopt } for pid=13190 comm="syz.6.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 266.012597][T13200] pim6reg1: entered promiscuous mode [ 266.017921][T13200] pim6reg1: entered allmulticast mode [ 266.242469][ T30] audit: type=1326 audit(1755042539.441:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.6.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 266.314622][ T30] audit: type=1326 audit(1755042539.471:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.6.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 266.359894][ T30] audit: type=1326 audit(1755042539.471:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.6.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 266.394196][ T30] audit: type=1326 audit(1755042539.471:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.6.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 266.447972][ T30] audit: type=1326 audit(1755042539.471:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.6.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 266.476470][ T30] audit: type=1326 audit(1755042539.471:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.6.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 266.500500][ T30] audit: type=1326 audit(1755042539.471:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.6.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 266.580068][ T5928] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 266.599833][ T5987] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 266.759800][ T5987] usb 8-1: Using ep0 maxpacket: 32 [ 266.768479][ T5987] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 266.779274][ T5928] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 266.788848][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.807414][ T5987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.833410][ T5928] usb 4-1: config 0 descriptor?? [ 266.839311][ T5987] usb 8-1: config 0 descriptor?? [ 266.860798][ T5928] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 266.874555][ T5987] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 267.066095][ T5928] gp8psk: usb in 128 operation failed. [ 267.288306][ T5928] gp8psk: usb in 146 operation failed. [ 267.289131][T13268] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 267.296730][ T5928] gp8psk: failed to get FW version [ 267.315539][ T5928] gp8psk: FPGA Version = 51 [ 267.346221][ T44] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 267.459850][ T5844] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 267.502935][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.515006][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.521033][ T5928] gp8psk: usb in 138 operation failed. [ 267.524209][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.532965][ T5928] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 267.542029][ T44] usb 5-1: Product: syz [ 267.552453][ T44] usb 5-1: Manufacturer: syz [ 267.552467][ T5928] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 267.557070][ T44] usb 5-1: SerialNumber: syz [ 267.582684][ T5928] usb 4-1: USB disconnect, device number 33 [ 267.622945][ T5844] usb 6-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 267.632182][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.643696][ T5844] usb 6-1: config 0 descriptor?? [ 267.890532][ T5987] gspca_nw80x: reg_w err -71 [ 267.895208][ T5987] nw80x 8-1:0.0: probe with driver nw80x failed with error -71 [ 267.904869][ T5987] usb 8-1: USB disconnect, device number 15 [ 268.058948][ T5844] aquacomputer_d5next 0003:0C70:F010.002A: item fetching failed at offset 1/5 [ 268.068609][ T5844] aquacomputer_d5next 0003:0C70:F010.002A: probe with driver aquacomputer_d5next failed with error -22 [ 268.299034][ T5844] usb 6-1: USB disconnect, device number 28 [ 268.557209][ T5844] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 268.581951][ T44] cdc_ncm 5-1:1.0: bind() failure [ 268.598760][ T5844] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.632781][ T44] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 268.651911][ T44] cdc_ncm 5-1:1.1: bind() failure [ 268.682685][T13287] random: crng reseeded on system resumption [ 268.690502][ T44] usb 5-1: USB disconnect, device number 40 [ 268.780058][T13289] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 269.115519][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2369'. [ 269.319640][T13312] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2374'. [ 269.329029][T13312] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2374'. [ 269.520055][ T5987] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 269.692955][ T5987] usb 4-1: Using ep0 maxpacket: 32 [ 269.700423][ T5987] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 269.709121][ T5987] usb 4-1: config 0 has no interface number 0 [ 269.727646][ T5987] usb 4-1: config 0 interface 184 has no altsetting 0 [ 269.746956][ T5987] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 269.765306][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.792035][ T5987] usb 4-1: Product: syz [ 269.796780][ T5987] usb 4-1: Manufacturer: syz [ 269.802272][ T5987] usb 4-1: SerialNumber: syz [ 269.809064][ T5987] usb 4-1: config 0 descriptor?? [ 269.819197][ T5987] smsc75xx v1.0.0 [ 269.825170][ T5987] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 269.842227][ T5987] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 269.883823][T13343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.020029][ T5844] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 270.180190][ T5987] kernel read not supported for file /dsp1 (pid: 5987 comm: kworker/0:9) [ 270.181281][ T5844] usb 6-1: Using ep0 maxpacket: 16 [ 270.190710][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2405'. [ 270.198631][ T5844] usb 6-1: New USB device found, idVendor=2717, idProduct=4106, bcdDevice=28.92 [ 270.229882][ T5844] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.247919][ T5844] usb 6-1: Product: syz [ 270.252334][ T5844] usb 6-1: Manufacturer: syz [ 270.258184][T13310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.267824][ T5844] usb 6-1: SerialNumber: syz [ 270.273292][T13310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.287135][ T5852] usb 4-1: USB disconnect, device number 34 [ 270.316704][ T5844] usb 6-1: config 0 descriptor?? [ 270.318897][T13358] input: syz1 as /devices/virtual/input/input40 [ 270.342772][T13358] input: failed to attach handler leds to device input40, error: -6 [ 270.444548][T13356] team0 (unregistering): Port device team_slave_0 removed [ 270.452530][T13362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.465913][T13356] team0 (unregistering): Port device team_slave_1 removed [ 270.553596][ T5987] usb 6-1: USB disconnect, device number 29 [ 270.959205][T13381] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 270.970744][T13381] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.025451][T13381] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 271.035620][T13381] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.084795][T13381] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 271.094973][T13381] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.125484][T13381] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 271.135504][T13381] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.210439][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 271.219650][ T13] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 271.255233][ T3002] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 271.268283][ T3002] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 271.283555][ T3002] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 271.291963][ T3002] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 271.312723][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 271.321087][ T13] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 271.668664][T13399] dummy0: entered promiscuous mode [ 271.686609][T13399] bond0: entered promiscuous mode [ 271.701251][T13399] bond_slave_0: entered promiscuous mode [ 271.707917][T13399] bond_slave_1: entered promiscuous mode [ 271.717766][T13399] bridge_slave_1: entered promiscuous mode [ 271.724614][T13399] debugfs: 'hsr1' already exists in 'hsr' [ 271.730550][T13399] Cannot create hsr debugfs directory [ 271.736085][T13399] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 271.746622][T13399] hsr1: entered allmulticast mode [ 271.900115][ T5987] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 272.061332][ T5987] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 272.076911][ T5987] usb 8-1: config 0 has no interface number 0 [ 272.091918][ T5987] usb 8-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 272.132567][ T5987] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.269876][ T5987] usb 8-1: Product: syz [ 272.274138][ T5987] usb 8-1: Manufacturer: syz [ 272.278734][ T5987] usb 8-1: SerialNumber: syz [ 272.313844][ T5987] usb 8-1: config 0 descriptor?? [ 272.559133][ T5987] usb 8-1: Found UVC 0.08 device syz (046d:0823) [ 272.583026][ T5987] usb 8-1: No valid video chain found. [ 272.592795][ T5987] usb 8-1: USB disconnect, device number 16 [ 272.637300][T13428] geneve2: entered promiscuous mode [ 272.671159][T13428] geneve2: entered allmulticast mode [ 272.689837][ T1794] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 272.705240][ T1794] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 272.759365][T13428] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.798299][ T1794] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 272.799870][ T5852] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 272.961414][ T5852] usb 4-1: Using ep0 maxpacket: 32 [ 272.972647][ T5852] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 272.984456][ T5852] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 272.999803][ T5852] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 273.019180][ T5852] usb 4-1: config 1 has no interface number 0 [ 273.031425][ T5852] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.059612][ T5852] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 273.097512][ T5852] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 273.120175][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.167132][ T5852] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 273.388979][ T5852] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 273.460715][ T5987] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 273.629826][ T5987] usb 8-1: Using ep0 maxpacket: 32 [ 273.636635][ T5987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.666370][ T5987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.687054][ T5987] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 273.699879][ T5987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.718626][ T5987] usb 8-1: config 0 descriptor?? [ 273.756309][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2448'. [ 273.804032][T13477] netlink: 'syz.4.2450': attribute type 1 has an invalid length. [ 273.827162][T13477] bond1: entered promiscuous mode [ 273.833428][T13477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.840670][ T5928] usb 4-1: USB disconnect, device number 35 [ 273.841805][ T5928] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 273.889572][T13477] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.899330][T13477] bond1: (slave bond2): making interface the new active one [ 273.907042][T13477] bond2: entered promiscuous mode [ 273.913380][T13477] bond1: (slave bond2): Enslaving as an active interface with an up link [ 273.991621][ T5966] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 274.138834][ T5987] ft260 0003:0403:6030.002C: unknown main item tag 0x7 [ 274.159821][ T5966] usb 6-1: Using ep0 maxpacket: 32 [ 274.166607][ T5966] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 274.174920][ T5966] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 274.186015][ T5966] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 274.197353][ T5966] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 274.210709][ T5966] usb 6-1: config 0 interface 0 has no altsetting 0 [ 274.219569][ T5966] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 274.233167][ T5966] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 274.241717][ T5966] usb 6-1: Product: syz [ 274.246039][ T5966] usb 6-1: Manufacturer: syz [ 274.251807][ T5966] usb 6-1: SerialNumber: syz [ 274.268700][ T5966] usb 6-1: config 0 descriptor?? [ 274.276628][ T5966] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 274.290571][ T5966] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 274.292564][T13428] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.327103][T13428] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 274.341550][ T5987] ft260 0003:0403:6030.002C: chip code: 6424 8183 [ 274.389213][T13428] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.405174][T13428] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 274.477273][T13428] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.495706][T13428] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 274.542482][ T5987] ft260 0003:0403:6030.002C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 274.611578][ T70] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 274.620558][ T70] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 274.638672][ T13] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 274.647223][ T13] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 274.666076][ T13] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 274.675295][ T13] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 274.695198][ T3002] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 274.704761][ T3002] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 274.719889][ T5852] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 274.749969][ T5987] ft260 0003:0403:6030.002C: failed to retrieve status: -71, no wakeup [ 274.764982][ T5987] ft260 0003:0403:6030.002C: failed to retrieve status: -71 [ 274.774012][ T5987] ft260 0003:0403:6030.002C: failed to reset I2C controller: -71 [ 274.797673][ T5987] usb 8-1: USB disconnect, device number 17 [ 274.883559][ T5852] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 274.893626][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.902025][ T5852] usb 4-1: Product: syz [ 274.906253][ T5852] usb 4-1: Manufacturer: syz [ 274.910950][ T5852] usb 4-1: SerialNumber: syz [ 274.917535][ T5852] usb 4-1: config 0 descriptor?? [ 274.969816][ T5928] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 275.060387][ T5987] usb 6-1: USB disconnect, device number 30 [ 275.074451][ T5987] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 275.122181][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 275.133689][ T5928] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 275.142764][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.153376][ T5928] usb 5-1: config 0 descriptor?? [ 275.159226][T13502] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 275.315013][T13510] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2474'. [ 275.593485][ T5928] elan 0003:04F3:0755.002D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 275.710814][ T30] audit: type=1326 audit(1755042548.901:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaee78ebe9 code=0x7ffc0000 [ 275.729065][T13528] loop2: detected capacity change from 0 to 7 [ 275.753772][ T30] audit: type=1326 audit(1755042548.901:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcaee78ebe9 code=0x7ffc0000 [ 275.759997][ T6211] Dev loop2: unable to read RDB block 7 [ 275.787423][ T6211] loop2: AHDI p2 [ 275.797221][ T6211] loop2: partition table partially beyond EOD, truncated [ 275.803627][ T30] audit: type=1326 audit(1755042548.901:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaee78ebe9 code=0x7ffc0000 [ 275.830912][T13528] Dev loop2: unable to read RDB block 7 [ 275.836762][T13528] loop2: AHDI p2 [ 275.843038][ T5844] usb 5-1: USB disconnect, device number 41 [ 275.843367][T13528] loop2: partition table partially beyond EOD, truncated [ 275.858652][ T30] audit: type=1326 audit(1755042548.901:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaee78ebe9 code=0x7ffc0000 [ 275.884149][ T30] audit: type=1326 audit(1755042548.901:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcaee78ebe9 code=0x7ffc0000 [ 275.918211][ T30] audit: type=1326 audit(1755042548.901:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaee78ebe9 code=0x7ffc0000 [ 275.945958][ T30] audit: type=1326 audit(1755042548.901:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaee78ebe9 code=0x7ffc0000 [ 275.948277][ T5852] usb 4-1: f81604_read: reg: 100f failed: -EPROTO [ 275.972219][ T30] audit: type=1326 audit(1755042548.901:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fcaee78ebe9 code=0x7ffc0000 [ 276.062310][ T5852] usb 4-1: f81604_read: reg: 200f failed: -EPROTO [ 276.096387][ T5852] usb 4-1: USB disconnect, device number 36 [ 276.096810][T13536] netlink: 566 bytes leftover after parsing attributes in process `syz.7.2486'. [ 276.116677][ T30] audit: type=1326 audit(1755042548.901:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaee78ebe9 code=0x7ffc0000 [ 276.150401][ T30] audit: type=1326 audit(1755042548.901:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13529 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaee78ebe9 code=0x7ffc0000 [ 276.166199][ T5852] usb 4-1: f81604_read: reg: 100f failed: -ENODEV [ 276.293039][ T5852] usb 4-1: f81604_read: reg: 200f failed: -ENODEV [ 276.443502][ T3002] Bluetooth: hci5: Frame reassembly failed (-84) [ 276.469698][T13552] Bluetooth: hci5: Frame reassembly failed (-84) [ 276.509794][ T5844] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 276.659794][ T5844] usb 6-1: Using ep0 maxpacket: 32 [ 276.671689][ T5844] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 276.709833][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.730625][ T5844] usb 6-1: config 0 descriptor?? [ 276.890490][T13579] loop5: detected capacity change from 0 to 9263 [ 276.907840][T13579] loop5: detected capacity change from 9263 to 10415 [ 276.924702][ T6506] Buffer I/O error on dev loop5, logical block 1301, async page read [ 276.948080][ T5844] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 276.975990][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 276.976936][ T6506] Buffer I/O error on dev loop5, logical block 1301, async page read [ 277.007920][ T5844] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 277.037843][ T5844] usb 6-1: media controller created [ 277.081745][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 277.157492][ T5844] az6027: usb out operation failed. (-71) [ 277.164821][ T5844] az6027: usb out operation failed. (-71) [ 277.171611][ T5844] stb0899_attach: Driver disabled by Kconfig [ 277.177660][ T5844] az6027: no front-end attached [ 277.177660][ T5844] [ 277.185069][ T5844] az6027: usb out operation failed. (-71) [ 277.202930][ T5844] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 277.217001][ T5844] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input41 [ 277.273645][ T5844] dvb-usb: schedule remote query interval to 400 msecs. [ 277.289950][ T5844] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 277.322838][ T5844] usb 6-1: USB disconnect, device number 31 [ 277.343183][ T6506] Buffer I/O error on dev loop5, logical block 1301, async page read [ 277.505843][ T5844] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 277.712515][T13604] loop8: detected capacity change from 0 to 7 [ 277.719432][T13604] Dev loop8: unable to read RDB block 7 [ 277.725511][T13604] loop8: unable to read partition table [ 277.731243][T13604] loop8: partition table beyond EOD, truncated [ 277.740339][T13604] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 277.852422][ T5852] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 278.009828][ T5852] usb 8-1: Using ep0 maxpacket: 32 [ 278.016499][ T5852] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 278.026446][ T5852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.036679][ T5852] usb 8-1: config 0 descriptor?? [ 278.044912][ T5852] gspca_main: sq930x-2.14.0 probing 041e:403c [ 278.099887][ T5844] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 278.247005][ T5852] gspca_sq930x: reg_r 001f failed -71 [ 278.254288][ T5852] sq930x 8-1:0.0: probe with driver sq930x failed with error -71 [ 278.263304][ T5844] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 278.276054][ T5852] usb 8-1: USB disconnect, device number 18 [ 278.283994][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 278.296161][ T5844] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 278.306008][ T5844] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.318968][ T5844] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.328350][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.338339][ T5844] usb 6-1: config 0 descriptor?? [ 278.470016][ T5850] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 278.470279][ T5860] Bluetooth: hci5: command 0xfc11 tx timeout [ 278.952341][ T5844] usbhid 6-1:0.0: can't add hid device: -71 [ 278.958378][ T5844] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 278.968756][ T5844] usb 6-1: USB disconnect, device number 32 [ 279.061102][ T5852] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 279.211219][ T5852] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 279.221707][ T5852] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 279.233331][ T5852] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 279.242481][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.250509][ T5852] usb 8-1: Product: syz [ 279.254752][ T5852] usb 8-1: Manufacturer: syz [ 279.259337][ T5852] usb 8-1: SerialNumber: syz [ 279.266171][ T5852] usb 8-1: config 0 descriptor?? [ 279.271848][T13624] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 279.279048][T13624] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 279.498081][T13624] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 279.521698][T13624] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 279.522757][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2518'. [ 279.539003][T13627] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2518'. [ 279.646537][T13632] mkiss: ax0: crc mode is auto. [ 279.750304][ T5850] Bluetooth: hci6: command 0x1003 tx timeout [ 279.758220][ T5857] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 279.870024][ T3749] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 280.043319][ T3749] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 280.054821][ T3749] usb 6-1: config 0 has no interface number 0 [ 280.068776][ T3749] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.094053][ T3749] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.107151][ T3749] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 280.116518][ T3749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.132525][ T3749] usb 6-1: config 0 descriptor?? [ 280.144269][T13647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13647 comm=syz.6.2528 [ 280.348856][ T5852] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 280.386882][ T5852] usb 8-1: USB disconnect, device number 19 [ 280.590439][ T3749] uclogic 0003:256C:006D.002E: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input1 [ 280.728182][T13680] netlink: 'syz.6.2543': attribute type 10 has an invalid length. [ 280.749917][T13680] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.762282][T13680] bridge_slave_1: left allmulticast mode [ 280.768050][T13680] bridge_slave_1: left promiscuous mode [ 280.777679][T13680] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.800055][T13680] bridge_slave_1: entered promiscuous mode [ 280.816326][T13680] bridge_slave_1: entered allmulticast mode [ 280.827052][T13680] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 280.836650][ T5966] usb 6-1: USB disconnect, device number 33 [ 281.063462][T13692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.475962][T13706] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2552'. [ 281.604498][T13714] input input42: cannot allocate more than FF_MAX_EFFECTS effects [ 281.754004][T13721] ptrace attach of "./syz-executor exec"[9992] was attempted by ""[13721] [ 281.915475][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 281.915492][ T30] audit: type=1326 audit(1755042555.101:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 281.995755][ T30] audit: type=1326 audit(1755042555.111:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 282.020365][ T30] audit: type=1326 audit(1755042555.151:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 282.043974][ T30] audit: type=1326 audit(1755042555.151:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 282.106539][ T30] audit: type=1326 audit(1755042555.151:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 282.134542][ T30] audit: type=1326 audit(1755042555.151:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 282.214149][ T30] audit: type=1326 audit(1755042555.151:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 282.264992][ T30] audit: type=1326 audit(1755042555.151:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 282.295452][ T30] audit: type=1326 audit(1755042555.151:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 282.388849][ T30] audit: type=1326 audit(1755042555.151:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13733 comm="syz.6.2564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 282.432678][T13756] dvmrp0: entered allmulticast mode [ 282.472830][T13757] 9pnet: p9_errstr2errno: server reported unknown error @íÿ0x0000000000000004 [ 282.474532][T13756] syz_tun: entered allmulticast mode [ 282.502557][T13756] dvmrp0: left allmulticast mode [ 282.508174][T13756] syz_tun: left allmulticast mode [ 282.661806][ T5928] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 282.703604][T13761] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 282.722499][T13769] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 282.830464][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.871497][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.886607][ T5928] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.904685][ T5928] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.913879][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.928239][ T5928] usb 7-1: config 0 descriptor?? [ 283.259893][ T5966] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 283.378821][T13783] team0 (unregistering): Port device team_slave_0 removed [ 283.395086][ T5928] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 283.413393][T13783] team0 (unregistering): Port device team_slave_1 removed [ 283.440494][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 283.450003][ T5966] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 283.480040][ T5966] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.500287][ T5966] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.522535][ T5966] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.539765][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.549897][ T5966] usb 5-1: Product: syz [ 283.554079][ T5966] usb 5-1: Manufacturer: syz [ 283.566901][ T5966] usb 5-1: SerialNumber: syz [ 283.686113][ T5928] usb 7-1: USB disconnect, device number 21 [ 283.700233][ T3749] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 283.860027][ T3749] usb 8-1: Using ep0 maxpacket: 32 [ 283.870833][ T3749] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 283.881034][ T3749] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.891275][ T3749] usb 8-1: config 0 descriptor?? [ 284.008145][ T5966] usb 5-1: 0:2 : does not exist [ 284.102218][ T3749] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 284.110851][ T3749] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.121620][ T3749] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 284.129011][ T3749] usb 8-1: media controller created [ 284.144931][ T3749] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.307123][ T3749] az6027: usb out operation failed. (-71) [ 284.329816][ T3749] az6027: usb out operation failed. (-71) [ 284.338474][ T3749] stb0899_attach: Driver disabled by Kconfig [ 284.354853][ T3749] az6027: no front-end attached [ 284.354853][ T3749] [ 284.375939][ T3749] az6027: usb out operation failed. (-71) [ 284.381840][ T3749] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 284.391037][ T3749] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input43 [ 284.409656][ T3749] dvb-usb: schedule remote query interval to 400 msecs. [ 284.418105][ T3749] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 284.434796][ T3749] usb 8-1: USB disconnect, device number 20 [ 284.533226][ T3749] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 284.658129][ T5966] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 284.747659][ T5966] usb 5-1: USB disconnect, device number 42 [ 284.810069][ T6506] udevd[6506]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.359833][ T3749] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 285.400396][ T5966] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 285.519806][ T3749] usb 6-1: Using ep0 maxpacket: 32 [ 285.526465][ T3749] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 285.535128][ T3749] usb 6-1: config 0 has no interface number 0 [ 285.543678][ T3749] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 285.552983][ T3749] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.561080][ T3749] usb 6-1: Product: syz [ 285.565650][ T3749] usb 6-1: Manufacturer: syz [ 285.569846][ T5966] usb 4-1: Using ep0 maxpacket: 8 [ 285.570873][ T3749] usb 6-1: SerialNumber: syz [ 285.587554][ T5966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 285.588788][ T3749] usb 6-1: config 0 descriptor?? [ 285.608938][ T5966] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 285.609334][ T3749] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 285.629927][ T5966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.641574][ T5966] usb 4-1: config 0 descriptor?? [ 285.709922][ T5852] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 285.818242][ T3749] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 285.831960][ T3749] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 285.862856][ T5966] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 285.869848][ T5852] usb 5-1: Using ep0 maxpacket: 16 [ 285.890674][ T5852] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.911105][ T5852] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.927678][ T5852] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 285.947365][ T5852] usb 5-1: config 0 interface 0 has no altsetting 0 [ 285.969197][ T5852] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 285.978998][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.001168][ T5852] usb 5-1: config 0 descriptor?? [ 286.138497][T13873] netlink: 'syz.7.2625': attribute type 5 has an invalid length. [ 286.149680][T13873] netlink: 130080 bytes leftover after parsing attributes in process `syz.7.2625'. [ 286.272756][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 286.281050][ T3749] usb 6-1: USB disconnect, device number 34 [ 286.281554][ T5966] usb 4-1: USB disconnect, device number 37 [ 286.290003][ T3749] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 286.333364][ T3749] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 286.372554][ T3749] quatech2 6-1:0.51: device disconnected [ 286.418770][ T5852] hid (null): invalid report_size 1936287343 [ 286.617970][ T5966] usb 5-1: USB disconnect, device number 43 [ 286.627028][ T5905] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 286.813712][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.833785][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.844567][ T5905] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 286.853800][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.880313][ T5905] usb 8-1: config 0 descriptor?? [ 287.342293][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 287.342307][ T30] audit: type=1400 audit(1755042560.541:648): avc: denied { create } for pid=13931 comm="syz.3.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 287.429419][ T30] audit: type=1400 audit(1755042560.571:649): avc: denied { write } for pid=13931 comm="syz.3.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 287.476871][T13938] binder: 13937:13938 ioctl c0306201 200000000080 returned -14 [ 287.498639][ T5905] usb 8-1: string descriptor 0 read error: -22 [ 287.654386][T13948] binder: 13947:13948 ioctl c0306201 2000000003c0 returned -22 [ 287.705193][ T5905] input: HID 256c:006d as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0031/input/input45 [ 287.811883][ T5905] input: HID 256c:006d as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0031/input/input46 [ 287.885699][T13958] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 287.894964][ T5905] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0031/input/input47 [ 287.976088][ T5905] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:256C:006D.0031/input/input48 [ 287.994942][T13960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2664'. [ 288.124696][ T5905] uclogic 0003:256C:006D.0031: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.7-1/input0 [ 288.188804][ T5905] usb 8-1: USB disconnect, device number 21 [ 288.327850][T13978] fido_id[13978]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/8-1/report_descriptor': No such file or directory [ 288.420549][ T3749] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 288.582763][ T3749] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 288.614970][ T3749] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 288.639027][ T3749] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 288.680069][ T3749] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.703130][ T3749] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.743634][ T3749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.803547][ T3749] usb 6-1: config 0 descriptor?? [ 289.224879][ T3749] plantronics 0003:047F:FFFF.0032: ignoring exceeding usage max [ 289.234999][T14006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2681'. [ 289.315321][T14006] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2681'. [ 289.336534][ T3749] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 289.350134][T14006] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2681'. [ 289.390579][T14008] all (unregistering): Released all slaves [ 289.703678][T14023] netlink: 212924 bytes leftover after parsing attributes in process `syz.7.2687'. [ 289.869572][T14029] syzkaller1: entered promiscuous mode [ 289.880347][T14029] syzkaller1: entered allmulticast mode [ 290.465292][ T30] audit: type=1400 audit(1755042563.661:650): avc: denied { execute } for pid=14071 comm="syz.4.2712" path="/dev/dsp" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 290.623939][ T3749] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 290.790093][ T3749] usb 7-1: Using ep0 maxpacket: 8 [ 290.796751][ T3749] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 290.804400][ T3749] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 290.815780][ T3749] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 290.827360][ T3749] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.837343][ T5905] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 290.839631][ T3749] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.862209][ T3749] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.875669][ T3749] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 290.891676][ T3749] usb 7-1: config 168 interface 0 has no altsetting 0 [ 290.900655][ T3749] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 290.908840][ T3749] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 290.920222][ T3749] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 290.932185][ T3749] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.944514][ T3749] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.956007][ T3749] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.968358][ T3749] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 290.982447][ T3749] usb 7-1: config 168 interface 0 has no altsetting 0 [ 290.992594][ T3749] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 291.000042][ T3749] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 291.013071][ T3749] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 291.024539][ T3749] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 291.036567][ T3749] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 291.040585][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 291.048143][ T3749] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 291.064550][ T3749] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 291.078112][ T3749] usb 7-1: config 168 interface 0 has no altsetting 0 [ 291.080210][ T5905] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 291.087228][ T3749] usb 7-1: string descriptor 0 read error: -22 [ 291.102653][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 291.106491][ T3749] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 291.117025][ T5905] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 291.136436][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.137780][ T3749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.158766][ T3749] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 291.160719][ T5905] usb 4-1: config 0 descriptor?? [ 291.190682][ T5987] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 291.319870][ T5844] usb 6-1: USB disconnect, device number 35 [ 291.359881][ T5987] usb 8-1: Using ep0 maxpacket: 8 [ 291.372826][ T3749] usb 7-1: USB disconnect, device number 22 [ 291.373524][ T5987] usb 8-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 291.391620][ T5987] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.406176][ T5987] usb 8-1: Product: syz [ 291.410648][ T5987] usb 8-1: Manufacturer: syz [ 291.415428][ T5987] usb 8-1: SerialNumber: syz [ 291.422398][ T5987] usb 8-1: config 0 descriptor?? [ 291.429029][ T5987] usb 8-1: bad CDC descriptors [ 291.436186][ T5987] usb 8-1: unsupported MDLM descriptors [ 291.634534][ T3749] usb 8-1: USB disconnect, device number 22 [ 291.965401][ T5905] corsair-cpro 0003:1B1C:0C10.0033: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 292.165087][ T5905] corsair-cpro 0003:1B1C:0C10.0033: probe with driver corsair-cpro failed with error -5 [ 292.380333][ T3749] usb 4-1: USB disconnect, device number 38 [ 292.977293][T14142] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 292.993156][T14142] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 293.048179][T14144] all (unregistering): Released all slaves [ 293.169913][ T5905] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 293.199875][ T3749] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 293.339923][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 293.348511][ T5905] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 293.357730][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.365978][ T5905] usb 6-1: Product: syz [ 293.370259][ T5905] usb 6-1: Manufacturer: syz [ 293.374854][ T5905] usb 6-1: SerialNumber: syz [ 293.379603][ T3749] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.391059][ T5905] usb 6-1: config 0 descriptor?? [ 293.393540][ T3749] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.405833][ T3749] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 293.415019][ T3749] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.425020][ T3749] usb 8-1: config 0 descriptor?? [ 293.804946][ T5905] airspy 6-1:0.0: Board ID: 00 [ 293.811496][ T5905] airspy 6-1:0.0: Firmware version: [ 293.837697][ T3749] pyra 0003:1E7D:2CF6.0034: unknown main item tag 0x0 [ 293.845327][ T3749] pyra 0003:1E7D:2CF6.0034: unknown main item tag 0x0 [ 293.852328][ T3749] pyra 0003:1E7D:2CF6.0034: unknown main item tag 0x0 [ 293.859425][ T3749] pyra 0003:1E7D:2CF6.0034: unknown main item tag 0x0 [ 293.866340][ T3749] pyra 0003:1E7D:2CF6.0034: unknown main item tag 0x0 [ 293.873263][ T3749] pyra 0003:1E7D:2CF6.0034: unknown main item tag 0x0 [ 293.880118][ T3749] pyra 0003:1E7D:2CF6.0034: unknown main item tag 0x0 [ 293.889137][ T3749] pyra 0003:1E7D:2CF6.0034: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.7-1/input0 [ 294.238038][ T3749] pyra 0003:1E7D:2CF6.0034: couldn't init struct pyra_device [ 294.245610][ T3749] pyra 0003:1E7D:2CF6.0034: couldn't install mouse [ 294.254440][ T3749] pyra 0003:1E7D:2CF6.0034: probe with driver pyra failed with error -71 [ 294.266358][ T3749] usb 8-1: USB disconnect, device number 23 [ 294.407469][ T5905] airspy 6-1:0.0: usb_control_msg() failed -71 request 12 [ 294.416169][ T5905] airspy 6-1:0.0: Registered as swradio24 [ 294.422703][ T5905] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 294.435322][ T5905] usb 6-1: USB disconnect, device number 36 [ 295.099065][T14181] dummy0: entered allmulticast mode [ 295.117365][T14181] dummy0: left allmulticast mode [ 295.429798][ T5987] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 295.601659][ T5987] usb 5-1: unable to get BOS descriptor or descriptor too short [ 295.620704][ T5987] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.659968][ T5987] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.679804][ T5987] usb 5-1: config 1 interface 1 has no altsetting 0 [ 295.702359][ T5987] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.719805][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.736234][ T5987] usb 5-1: Product: syz [ 295.742977][ T5987] usb 5-1: Manufacturer: syz [ 295.779021][ T5987] usb 5-1: SerialNumber: syz [ 296.017232][ T5987] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 296.038396][ T5987] usb 5-1: found format II with max.bitrate = 2418, frame size=7 [ 296.045378][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2784'. [ 296.058617][ T5987] usb 5-1: 2:1: All rates were zero [ 296.159991][ T5987] usb 5-1: USB disconnect, device number 44 [ 296.257381][ T6506] udevd[6506]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.998976][T14254] syzkaller1: entered promiscuous mode [ 297.037865][T14254] syzkaller1: entered allmulticast mode [ 297.600424][ T3749] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 297.675240][ T5987] kernel read not supported for file /dsp (pid: 5987 comm: kworker/0:9) [ 297.730087][ T5905] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 297.769909][ T3749] usb 6-1: Using ep0 maxpacket: 8 [ 297.778879][ T3749] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 297.793328][ T3749] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 297.803055][ T3749] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.819565][ T3749] usb 6-1: config 0 descriptor?? [ 297.917862][ T5905] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.928105][ T5905] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 297.942620][ T5905] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 297.953333][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.961438][ T5905] usb 8-1: Product: syz [ 297.965594][ T5905] usb 8-1: Manufacturer: syz [ 297.970303][ T5905] usb 8-1: SerialNumber: syz [ 297.990314][ T5987] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 298.033779][ T3749] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 298.163235][ T5987] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 298.172466][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.182848][ T5987] usb 4-1: config 0 descriptor?? [ 298.190292][ T5987] cp210x 4-1:0.0: cp210x converter detected [ 298.445710][ T5966] usb 6-1: USB disconnect, device number 37 [ 298.601676][ T5987] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 298.615808][ T5987] usb 4-1: cp210x converter now attached to ttyUSB0 [ 298.635820][ T3749] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 298.791274][ T3749] usb 7-1: config 0 has no interfaces? [ 298.796777][ T3749] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 298.806028][ T3749] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.825632][ T5844] usb 4-1: USB disconnect, device number 39 [ 298.832235][ T3749] usb 7-1: config 0 descriptor?? [ 298.842821][ T5844] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 298.852986][ T5844] cp210x 4-1:0.0: device disconnected [ 298.997541][ T5905] cdc_ncm 8-1:1.0: bind() failure [ 299.021096][ T5905] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 299.037639][ T5905] usb 8-1: USB disconnect, device number 24 [ 299.063245][T14303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.073059][T14303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.087030][T14303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.096806][T14303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.114108][ T5844] usb 7-1: USB disconnect, device number 23 [ 299.138754][T14312] openvswitch: netlink: IPv4 tun info is not correct [ 299.230028][ T44] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 299.383850][ T44] usb 6-1: unable to get BOS descriptor or descriptor too short [ 299.394236][ T44] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.404720][ T44] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 299.418489][ T44] usb 6-1: config 1 interface 1 has no altsetting 0 [ 299.427191][ T44] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.436670][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.445056][ T44] usb 6-1: Product: syz [ 299.449226][ T44] usb 6-1: Manufacturer: syz [ 299.453872][ T44] usb 6-1: SerialNumber: syz [ 299.570340][ T5844] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 299.674556][ T44] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 299.686494][ T44] usb 6-1: found format II with max.bitrate = 2418, frame size=7 [ 299.703410][ T44] usb 6-1: 2:1: All rates were zero [ 299.756596][ T44] usb 6-1: USB disconnect, device number 38 [ 299.762721][ T5844] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.787711][ T5844] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 299.797184][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.806872][ T5844] usb 7-1: Product: syz [ 299.815799][ T5844] usb 7-1: Manufacturer: syz [ 299.822122][ T5844] usb 7-1: SerialNumber: syz [ 299.910557][ T5852] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 300.035711][ T5844] usb 7-1: selecting invalid altsetting 1 [ 300.049771][ T5844] cdc_ncm 7-1:1.0: bind() failure [ 300.057978][ T5844] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 300.068493][ T5852] usb 8-1: config 0 has no interfaces? [ 300.082345][ T5852] usb 8-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 300.094688][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.106852][ T5852] usb 8-1: Product: syz [ 300.113648][ T5852] usb 8-1: Manufacturer: syz [ 300.121517][ T5844] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 300.132824][ T5844] usb 7-1: USB disconnect, device number 24 [ 300.139790][ T5852] usb 8-1: SerialNumber: syz [ 300.154179][ T5852] usb 8-1: config 0 descriptor?? [ 300.167476][ T6506] udevd[6506]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.433474][ T5966] usb 8-1: USB disconnect, device number 25 [ 300.759842][ T5905] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 300.801898][ T30] audit: type=1326 audit(1755042574.001:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14357 comm="syz.5.2818" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f08d8ebe9 code=0x0 [ 300.920006][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 300.936200][ T5905] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 300.946174][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 300.956249][ T5905] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 300.966213][ T5905] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.979228][ T5905] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.988280][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.203741][ T5905] usb 4-1: GET_CAPABILITIES returned 0 [ 301.209298][ T5905] usbtmc 4-1:16.0: can't read capabilities [ 301.417660][ T5852] usb 4-1: USB disconnect, device number 40 [ 301.721911][ T5844] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 301.909892][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 301.918248][ T5844] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 301.929188][ T5844] usb 5-1: config 0 has no interface number 0 [ 301.937521][ T5844] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 301.949945][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.958076][ T5844] usb 5-1: Product: syz [ 301.964505][ T5844] usb 5-1: Manufacturer: syz [ 301.969227][ T5844] usb 5-1: SerialNumber: syz [ 301.983421][ T5844] usb 5-1: config 0 descriptor?? [ 302.042188][ T5844] smsc95xx v2.0.0 [ 302.045845][ T5844] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 302.059424][ T5844] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 302.281716][T14362] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2820'. [ 302.293802][T14362] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2820'. [ 302.305960][ T5905] usb 5-1: USB disconnect, device number 45 [ 302.311399][ T5999] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 302.479799][ T5999] usb 6-1: Using ep0 maxpacket: 16 [ 302.486416][ T5999] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.497635][ T5999] usb 6-1: config 0 has no interface number 0 [ 302.505694][ T5999] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 302.517599][ T5999] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.525800][ T5999] usb 6-1: Product: syz [ 302.537081][ T5999] usb 6-1: Manufacturer: syz [ 302.542621][ T5999] usb 6-1: SerialNumber: syz [ 302.559026][ T5999] usb 6-1: config 0 descriptor?? [ 302.569585][ T5999] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 303.579592][ T5999] gspca_spca1528: reg_w err -71 [ 303.585553][ T5999] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 303.609393][ T5999] usb 6-1: USB disconnect, device number 39 [ 304.303928][ T30] audit: type=1326 audit(1755042577.511:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14400 comm="syz.4.2836" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d6e78ebe9 code=0x0 [ 304.479784][ T5987] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 304.644068][ T5987] usb 6-1: config 0 has no interfaces? [ 304.655429][ T5987] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 304.668316][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.677567][ T5987] usb 6-1: Product: syz [ 304.682045][ T5987] usb 6-1: Manufacturer: syz [ 304.686758][ T5987] usb 6-1: SerialNumber: syz [ 304.697278][ T5987] usb 6-1: config 0 descriptor?? [ 304.956182][ T5987] usb 6-1: USB disconnect, device number 40 [ 305.169338][T14424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 305.602911][ T5987] kernel read not supported for file /dsp (pid: 5987 comm: kworker/0:9) [ 306.409808][ T5928] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 306.559809][ T5928] usb 8-1: Using ep0 maxpacket: 16 [ 306.579093][ T5928] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 306.610753][ T5928] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.655715][ T5928] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.679646][ T5928] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.691994][T14483] mkiss: ax0: crc mode is auto. [ 306.711857][ T5928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.744790][ T5928] usb 8-1: Product: syz [ 306.762867][ T5928] usb 8-1: Manufacturer: syz [ 306.767504][ T5928] usb 8-1: SerialNumber: syz [ 307.204766][ T5928] usb 8-1: 0:2 : does not exist [ 307.376101][T14511] 9pnet: p9_errstr2errno: server reported unknown error @íÿ0x0000000000000004 [ 307.557972][ T5905] kernel read not supported for file /dsp (pid: 5905 comm: kworker/0:3) [ 307.839371][ T5928] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 307.889318][ T5928] usb 8-1: USB disconnect, device number 26 [ 308.143227][T14532] netlink: 'syz.3.2873': attribute type 1 has an invalid length. [ 308.214096][T14532] bond1: entered promiscuous mode [ 308.219460][T14532] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.295896][T14535] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.304990][T14535] bond1: (slave bond2): making interface the new active one [ 308.316444][T14535] bond2: entered promiscuous mode [ 308.322802][T14535] bond1: (slave bond2): Enslaving as an active interface with an up link [ 308.427285][ T5928] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 308.603792][ T5928] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 308.628616][ T5928] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.640145][ T44] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 308.640236][ T5928] usb 7-1: config 0 interface 0 has no altsetting 0 [ 308.667051][ T5928] usb 7-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 308.684695][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.705453][ T5928] usb 7-1: config 0 descriptor?? [ 308.809820][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 308.823677][ T44] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 308.859965][ T44] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 308.892791][ T44] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 308.933657][ T44] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 308.983002][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 308.998700][ T44] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 309.012088][ T44] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 309.031699][ T44] usb 4-1: Product: syz [ 309.042598][ T44] usb 4-1: Manufacturer: syz [ 309.063513][ T44] usb 4-1: SerialNumber: syz [ 309.071675][ T44] usb 4-1: config 0 descriptor?? [ 309.088956][ T44] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 309.111336][ T44] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 309.164222][ T5928] uclogic 0003:5543:0064.0035: item fetching failed at offset 5/7 [ 309.210382][ T5928] uclogic 0003:5543:0064.0035: parse failed [ 309.224491][ T5928] uclogic 0003:5543:0064.0035: probe with driver uclogic failed with error -22 [ 309.397220][ T44] usb 7-1: USB disconnect, device number 25 [ 309.540106][ T5928] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 309.703170][ T5928] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 309.712368][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.720714][ T5928] usb 5-1: Product: syz [ 309.724908][ T5928] usb 5-1: Manufacturer: syz [ 309.729634][ T5928] usb 5-1: SerialNumber: syz [ 309.736112][ T5928] usb 5-1: config 0 descriptor?? [ 309.743755][ T5928] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 309.946659][ T44] usb 4-1: USB disconnect, device number 41 [ 309.953525][ T5928] gspca_sunplus: reg_r err -71 [ 309.958454][ T5928] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 309.959363][ T44] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 309.971128][ T5928] usb 5-1: USB disconnect, device number 46 [ 310.537092][T14582] dummy0: entered promiscuous mode [ 310.548919][T14578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.565859][T14582] bond0: entered promiscuous mode [ 310.582797][T14582] bond_slave_0: entered promiscuous mode [ 310.605204][T14582] bond_slave_1: entered promiscuous mode [ 310.634684][T14582] bridge_slave_1: entered promiscuous mode [ 310.645529][T14582] debugfs: 'hsr1' already exists in 'hsr' [ 310.665753][T14582] Cannot create hsr debugfs directory [ 310.681820][T14582] hsr1: entered allmulticast mode [ 310.691740][T14582] dummy0: entered allmulticast mode [ 310.708431][T14582] bond0: entered allmulticast mode [ 310.727445][T14582] bond_slave_0: entered allmulticast mode [ 310.734661][T14582] bond_slave_1: entered allmulticast mode [ 310.741097][T14590] loop5: detected capacity change from 0 to 2935 [ 310.747486][T14582] bridge_slave_1: entered allmulticast mode [ 310.775264][ T6506] Buffer I/O error on dev loop5, logical block 366, async page read [ 310.806917][T14590] loop5: detected capacity change from 2935 to 6439 [ 310.831603][ T6506] Buffer I/O error on dev loop5, logical block 804, async page read [ 311.063952][ T6506] Buffer I/O error on dev loop5, logical block 804, async page read [ 311.408392][T14604] random: crng reseeded on system resumption [ 311.898601][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2902'. [ 312.389869][ T44] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 312.555069][ T44] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 312.555102][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 312.555130][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 312.555153][ T44] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 312.555193][ T44] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 312.555218][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.557192][ T44] usb 7-1: config 0 descriptor?? [ 313.154604][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2923'. [ 313.295946][ T44] usbhid 7-1:0.0: can't add hid device: -71 [ 313.303770][ T44] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 313.327302][ T44] usb 7-1: USB disconnect, device number 26 [ 313.980022][ T44] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 314.005121][T14682] IPv6: sit1: Disabled Multicast RS [ 314.021020][T14682] sit1: entered allmulticast mode [ 314.159568][ T44] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 314.199841][ T44] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.232771][T14698] loop8: detected capacity change from 0 to 8 [ 314.239255][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 314.258746][ T6506] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 314.258807][ T44] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 314.264239][ T6506] loop8: partition table partially beyond EOD, truncated [ 314.282983][ T6506] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 314.290472][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.292423][ T44] usb 5-1: config 0 descriptor?? [ 314.310502][T14702] openvswitch: netlink: Missing key (keys=40, expected=80) [ 314.338583][T14698] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 314.372123][T14698] loop8: partition table partially beyond EOD, truncated [ 314.400125][T14698] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 314.469922][ T5928] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 314.493270][ T6506] udevd[6506]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 314.564373][T14713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 314.566248][ T6506] udevd[6506]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 314.650344][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 314.672799][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 314.694172][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 314.713717][ T5928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.746314][ T30] audit: type=1326 audit(1755042587.921:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 314.768032][ T44] uclogic 0003:5543:0064.0036: item fetching failed at offset 5/7 [ 314.770137][ T5928] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.790870][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.801984][ T5928] usb 4-1: config 0 descriptor?? [ 314.808117][T14701] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 314.825032][ T44] uclogic 0003:5543:0064.0036: parse failed [ 314.842227][ T30] audit: type=1326 audit(1755042587.921:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 314.880434][ T44] uclogic 0003:5543:0064.0036: probe with driver uclogic failed with error -22 [ 314.937071][ T30] audit: type=1326 audit(1755042587.921:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 314.964754][ T30] audit: type=1326 audit(1755042587.931:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 314.965725][T14710] netlink: 'syz.7.2939': attribute type 13 has an invalid length. [ 314.998583][T14710] netlink: 'syz.7.2939': attribute type 17 has an invalid length. [ 315.001193][ T30] audit: type=1326 audit(1755042587.931:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 315.037283][ T30] audit: type=1326 audit(1755042587.931:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 315.065423][ T44] usb 5-1: USB disconnect, device number 47 [ 315.069324][ T30] audit: type=1326 audit(1755042587.931:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 315.102221][ T30] audit: type=1326 audit(1755042587.931:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14714 comm="syz.6.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 315.159932][ T5844] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 315.228529][ T5928] plantronics 0003:047F:FFFF.0037: reserved main item tag 0xd [ 315.237949][T14710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 315.258778][ T5928] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 315.310000][ T5844] usb 7-1: Using ep0 maxpacket: 16 [ 315.317096][ T5844] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.329827][ T5844] usb 7-1: config 0 has no interface number 0 [ 315.345242][ T5844] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 315.359819][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.388593][ T5844] usb 7-1: Product: syz [ 315.399064][ T5844] usb 7-1: Manufacturer: syz [ 315.408895][ T5844] usb 7-1: SerialNumber: syz [ 315.443178][ T5844] usb 7-1: config 0 descriptor?? [ 315.467598][ T5844] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 315.511557][ T5928] usb 4-1: USB disconnect, device number 42 [ 315.829938][ T44] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 315.852834][ T5844] gspca_spca1528: reg_w err -71 [ 315.869947][ T5844] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 315.880791][ T5844] usb 7-1: USB disconnect, device number 27 [ 315.899840][ T5852] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 315.981467][ T44] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 315.993233][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.004163][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 316.014076][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.027029][ T44] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.037018][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.049337][ T44] usb 6-1: config 0 descriptor?? [ 316.060322][ T5852] usb 8-1: Using ep0 maxpacket: 16 [ 316.071876][ T5852] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 316.103127][ T5852] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 316.110818][T14740] pim6reg1: entered promiscuous mode [ 316.117604][T14740] pim6reg1: entered allmulticast mode [ 316.121984][ T5852] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.133048][ T5852] usb 8-1: Product: syz [ 316.137304][ T5852] usb 8-1: Manufacturer: syz [ 316.142047][ T5852] usb 8-1: SerialNumber: syz [ 316.157425][ T5852] usb 8-1: config 0 descriptor?? [ 316.169530][ T5852] hub 8-1:0.0: bad descriptor, ignoring hub [ 316.175613][ T5852] hub 8-1:0.0: probe with driver hub failed with error -5 [ 316.185551][ T5852] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.490288][ T44] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 316.731626][ T5928] usb 6-1: USB disconnect, device number 41 [ 316.799916][ T5905] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 316.959921][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 316.970357][ T5905] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 316.979043][ T5905] usb 5-1: config 0 has no interface number 0 [ 316.988275][ T5905] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 316.998184][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.006664][ T5905] usb 5-1: Product: syz [ 317.011176][ T5905] usb 5-1: Manufacturer: syz [ 317.015934][ T5905] usb 5-1: SerialNumber: syz [ 317.023760][ T5905] usb 5-1: config 0 descriptor?? [ 317.032731][ T5905] smsc95xx v2.0.0 [ 317.045039][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.051738][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.711784][T14793] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 317.852213][ T5905] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 317.939902][ T5928] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 318.056252][ T5905] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 318.067310][ T5905] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 318.081349][ T5905] usb 5-1: USB disconnect, device number 48 [ 318.111307][ T5928] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 318.119455][ T5928] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.132387][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.143310][ T5928] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 318.154798][ T5928] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 318.167764][ T5928] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 318.177117][ T5928] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.188447][ T5928] usb 7-1: config 0 descriptor?? [ 318.194203][T14791] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 318.616082][ T5928] plantronics 0003:047F:FFFF.0039: reserved main item tag 0xd [ 318.657052][ T5928] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 318.693412][ T44] usb 8-1: USB disconnect, device number 27 [ 318.944138][ T5999] usb 7-1: USB disconnect, device number 28 [ 318.951259][ T5852] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 319.137149][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 319.142678][ T44] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 319.182622][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.202371][ T5852] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 319.222976][ T5852] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 319.234879][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.254457][ T5852] usb 4-1: config 0 descriptor?? [ 319.331144][ T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.368283][ T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.378310][ T44] usb 8-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 319.389100][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.403435][ T44] usb 8-1: config 0 descriptor?? [ 319.596056][T14842] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 319.729413][ T5852] nintendo 0003:057E:2019.003A: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 319.826733][ T44] hid-led 0003:1D34:0004.003B: unknown main item tag 0x0 [ 319.926380][ T30] audit: type=1400 audit(1755042593.121:661): avc: denied { append } for pid=14852 comm="syz.6.2990" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 320.030218][ T44] hid-led 0003:1D34:0004.003B: hidraw1: USB HID v0.00 Device [HID 1d34:0004] on usb-dummy_hcd.7-1/input0 [ 320.054875][ T44] hid-led 0003:1D34:0004.003B: Dream Cheeky Webmail Notifier initialized [ 320.109893][ T5852] nintendo 0003:057E:2019.003A: Failed to get joycon info; ret=-71 [ 320.128099][ T5852] nintendo 0003:057E:2019.003A: Failed to retrieve controller info; ret=-71 [ 320.139436][ T5852] nintendo 0003:057E:2019.003A: Failed to initialize controller; ret=-71 [ 320.155728][ T5852] nintendo 0003:057E:2019.003A: probe - fail = -71 [ 320.168264][ T5852] nintendo 0003:057E:2019.003A: probe with driver nintendo failed with error -71 [ 320.207644][ T5852] usb 4-1: USB disconnect, device number 43 [ 320.269245][ T44] usb 8-1: USB disconnect, device number 28 [ 320.333885][ T30] audit: type=1400 audit(1755042593.531:662): avc: denied { read } for pid=14868 comm="syz.6.2997" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 320.369110][ T30] audit: type=1400 audit(1755042593.531:663): avc: denied { open } for pid=14868 comm="syz.6.2997" path="/409/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 320.393999][ T30] audit: type=1400 audit(1755042593.541:664): avc: denied { unmount } for pid=9082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 320.489820][ T5905] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 320.609858][ T5928] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 320.644090][ T5905] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 320.654935][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.671192][ T5905] usb 5-1: config 0 descriptor?? [ 320.766688][ T5928] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 320.785434][ T5928] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.804995][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.831348][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 320.840043][ T5928] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.860366][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.873786][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 320.881544][ T5928] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.893811][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.904926][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 320.913760][ T5928] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.918911][T14885] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3004'. [ 320.922939][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 320.955936][ T5905] kaweth 5-1:0.0: Firmware present in device. [ 320.965547][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 320.973720][ T5928] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.983595][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.009793][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 321.024775][ T5928] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.034184][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.058829][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 321.076943][ T5928] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.089804][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.124280][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 321.142034][ T5928] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 321.151163][ T5905] kaweth 5-1:0.0: Statistics collection: 0 [ 321.156997][ T5905] kaweth 5-1:0.0: Multicast filter limit: 0 [ 321.168713][ T5928] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 321.182578][ T5905] kaweth 5-1:0.0: MTU: 0 [ 321.186834][ T5905] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 321.202795][ T5928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 321.218273][ T5928] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 321.227910][ T5928] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 321.244018][ T5928] usb 6-1: Product: syz [ 321.257089][ T5928] usb 6-1: Manufacturer: syz [ 321.267269][ T5928] usb 6-1: SerialNumber: syz [ 321.281836][T14899] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.288221][T14901] syzkaller1: entered promiscuous mode [ 321.297424][T14901] syzkaller1: entered allmulticast mode [ 321.304474][ T5928] usb 6-1: config 0 descriptor?? [ 321.322936][ T5928] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 321.481274][T14907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3014'. [ 321.619740][ T30] audit: type=1400 audit(1755042594.811:665): avc: denied { compute_member } for pid=14908 comm="syz.6.3015" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 321.642254][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 321.650097][ T5852] usb 6-1: USB disconnect, device number 42 [ 321.661420][ T5852] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 321.666378][T14913] netlink: 'syz.3.3016': attribute type 9 has an invalid length. [ 321.689500][T14913] netlink: 'syz.3.3016': attribute type 7 has an invalid length. [ 321.698190][T14913] netlink: 'syz.3.3016': attribute type 8 has an invalid length. [ 321.716913][ T30] audit: type=1400 audit(1755042594.911:666): avc: denied { connect } for pid=14917 comm="syz.6.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 321.754729][ T5905] kaweth 5-1:0.0: Error setting receive filter [ 321.771404][ T5905] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 321.804584][ T5905] usb 5-1: USB disconnect, device number 49 [ 322.233076][T14938] trusted_key: syz.3.3025 sent an empty control message without MSG_MORE. [ 322.590784][ T30] audit: type=1400 audit(1755042595.791:667): avc: denied { getopt } for pid=14949 comm="syz.4.3032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 322.680191][ T5905] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 322.765660][ T5928] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 322.859835][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 322.881010][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.893128][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.905654][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 322.918723][ T5905] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 322.928441][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.941560][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 322.947590][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 322.956793][ T5905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 322.965260][ T5905] usb 6-1: Manufacturer: syz [ 322.971786][ T5928] usb 4-1: config 0 has an invalid interface number: 227 but max is 0 [ 322.980833][ T5905] usb 6-1: config 0 descriptor?? [ 322.986854][ T5928] usb 4-1: config 0 has no interface number 0 [ 322.996310][ T5928] usb 4-1: New USB device found, idVendor=05d8, idProduct=810b, bcdDevice=c3.83 [ 323.005415][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.013457][ T5928] usb 4-1: Product: syz [ 323.017625][ T5928] usb 4-1: Manufacturer: syz [ 323.022327][ T5928] usb 4-1: SerialNumber: syz [ 323.029073][ T5928] usb 4-1: config 0 descriptor?? [ 323.036371][ T5928] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in cold state, will try to load a firmware [ 323.048120][ T5928] usb 4-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 323.059196][ T30] audit: type=1400 audit(1755042596.251:668): avc: denied { firmware_load } for pid=5928 comm="kworker/0:5" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 323.059218][ T5928] usb 4-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 323.139846][ T5852] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 323.241880][ T5905] rc_core: IR keymap rc-hauppauge not found [ 323.250603][ T5905] Registered IR keymap rc-empty [ 323.255545][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.280050][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.289826][ T5852] usb 8-1: Using ep0 maxpacket: 32 [ 323.296295][ T5852] usb 8-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 323.307579][ T5852] usb 8-1: config 0 interface 0 has no altsetting 0 [ 323.311254][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 323.314555][ T5852] usb 8-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 323.335033][ T5852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.342509][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input53 [ 323.364840][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.370429][ T5852] usb 8-1: config 0 descriptor?? [ 323.401144][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.420206][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.451744][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.473436][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.510021][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.560161][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.579874][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.599845][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.619914][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 323.651469][ T5905] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 323.670256][ T5905] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 323.694288][ T5905] usb 6-1: USB disconnect, device number 43 [ 323.789398][ T30] audit: type=1400 audit(1755042596.981:669): avc: denied { append } for pid=14976 comm="syz.6.3041" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 323.790538][T14977] loop6: detected capacity change from 0 to 63 [ 323.822920][T14977] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.832652][T14977] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.853580][T14977] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.864541][T14977] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.882829][T14977] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.893453][T14977] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.901891][T14977] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.910987][T14977] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.918905][T14977] ldm_validate_partition_table(): Disk read failed. [ 323.926645][T14980] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 323.935302][T14977] loop6: unable to read partition table [ 323.941572][T14977] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 323.950953][T14980] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 324.109030][T14986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.164494][ T30] audit: type=1400 audit(1755042597.361:670): avc: denied { watch } for pid=14987 comm="syz.6.3046" path="/429/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 324.224191][T14990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.263400][ T5852] corsair-cpro 0003:1B1C:0C10.003C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.7-1/input0 [ 324.417837][ T5852] corsair-cpro 0003:1B1C:0C10.003C: probe with driver corsair-cpro failed with error -5 [ 324.612073][ T5844] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 324.661383][ T5852] usb 8-1: USB disconnect, device number 29 [ 324.783850][ T5844] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 324.793429][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.803795][ T5844] usb 6-1: config 0 descriptor?? [ 324.811312][ T5844] cp210x 6-1:0.0: cp210x converter detected [ 325.220709][ T5844] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 325.446573][ T5844] usb 6-1: cp210x converter now attached to ttyUSB0 [ 325.636732][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3060'. [ 325.656451][ T5844] usb 6-1: USB disconnect, device number 44 [ 325.678513][ T5844] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 325.698066][ T5844] cp210x 6-1:0.0: device disconnected [ 326.439339][T15067] input: syz0 as /devices/virtual/input/input55 [ 326.649070][T15077] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 326.665500][T15078] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3082'. [ 326.678823][T15077] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 326.701606][T15078] IPVS: Error connecting to the multicast addr [ 326.721244][T15077] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 326.755426][T15077] overlayfs: conflicting lowerdir path [ 326.903421][T15094] vxcan1: tx drop: invalid da for name 0xfffffffffffffffd [ 327.186037][T15113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=15113 comm=syz.5.3090 [ 327.204109][T15113] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3090'. [ 327.639962][ T5852] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 327.790377][ T5852] usb 7-1: Using ep0 maxpacket: 32 [ 327.800815][ T5852] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 327.809209][ T5852] usb 7-1: config 0 has no interface number 0 [ 327.819295][ T5852] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.383471][ T5852] usb 7-1: config 0 interface 85 has no altsetting 0 [ 328.444221][ T5852] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 328.473497][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.499764][ T5852] usb 7-1: Product: syz [ 328.504338][ T5852] usb 7-1: Manufacturer: syz [ 328.508941][ T5852] usb 7-1: SerialNumber: syz [ 328.545852][ T5852] usb 7-1: config 0 descriptor?? [ 328.659856][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 328.659878][ T30] audit: type=1326 audit(1755042601.841:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15178 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6e78ebe9 code=0x7ffc0000 [ 328.694216][ T5987] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 328.709436][ T30] audit: type=1326 audit(1755042601.841:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15178 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6e78ebe9 code=0x7ffc0000 [ 328.762661][ T30] audit: type=1326 audit(1755042601.851:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15178 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f7d6e78ebe9 code=0x7ffc0000 [ 328.809003][ T30] audit: type=1326 audit(1755042601.851:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15178 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6e78ebe9 code=0x7ffc0000 [ 328.876666][ T5987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.889811][ T30] audit: type=1326 audit(1755042601.851:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15178 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6e78ebe9 code=0x7ffc0000 [ 328.915821][ T5987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.941743][ T5987] usb 8-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 328.979889][ T5987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.999789][ T30] audit: type=1326 audit(1755042601.851:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15178 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7d6e78ebe9 code=0x7ffc0000 [ 329.043245][ T5987] usb 8-1: config 0 descriptor?? [ 329.059848][ T30] audit: type=1326 audit(1755042601.851:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15178 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6e78ebe9 code=0x7ffc0000 [ 329.112026][T15200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 329.169021][ T5852] appletouch 7-1:0.85: Geyser mode initialized. [ 329.187551][ T5852] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input56 [ 329.192584][ T30] audit: type=1326 audit(1755042601.851:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15178 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6e78ebe9 code=0x7ffc0000 [ 329.316374][ T44] kernel write not supported for file /amidi2 (pid: 44 comm: kworker/1:1) [ 329.331422][ T30] audit: type=1326 audit(1755042601.851:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15178 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7d6e78ebe9 code=0x7ffc0000 [ 329.386066][ T44] usb 7-1: USB disconnect, device number 29 [ 329.445457][ T30] audit: type=1326 audit(1755042601.851:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15178 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d6e78ebe9 code=0x7ffc0000 [ 329.448428][ T44] appletouch 7-1:0.85: input: appletouch disconnected [ 329.497209][ T5987] samsung 0003:0419:0001.003D: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.7-1/input0 [ 329.659994][ T5852] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 329.686731][ T5987] usb 8-1: USB disconnect, device number 30 [ 329.849806][ T5852] usb 6-1: Using ep0 maxpacket: 8 [ 329.866892][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.888268][ T5852] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 329.925596][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.963596][ T5852] usb 6-1: config 0 descriptor?? [ 330.215512][ T5852] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 330.652371][T15276] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3137'. [ 330.669400][ T5905] usb 6-1: USB disconnect, device number 45 [ 330.682153][T15270] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.3137'. [ 331.360352][ T5905] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 331.553125][ T5905] usb 8-1: unable to get BOS descriptor or descriptor too short [ 331.587225][ T5905] usb 8-1: not running at top speed; connect to a high speed hub [ 331.612972][ T5905] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.632849][ T5905] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 331.652459][ T5905] usb 8-1: config 1 has no interface number 1 [ 331.666246][ T5905] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 331.710772][ T5905] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 331.728431][ T5905] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 331.742458][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.752179][ T5905] usb 8-1: Product: syz [ 331.756505][ T5905] usb 8-1: Manufacturer: syz [ 331.761313][ T5905] usb 8-1: SerialNumber: syz [ 331.885961][T15336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.987067][ T5905] hub 8-1:1.0: Invalid hub with more than one config or interface [ 332.005099][ T5905] hub 8-1:1.0: probe with driver hub failed with error -22 [ 332.020649][ T5905] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 332.098283][ T5905] usb 8-1: USB disconnect, device number 31 [ 332.174638][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.503053][T15362] overlayfs: conflicting lowerdir path [ 332.573135][T15367] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 332.895167][ T44] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 332.960105][ T5852] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 333.022155][ T5987] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 333.057984][ T5987] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 333.079785][ T44] usb 8-1: Using ep0 maxpacket: 16 [ 333.113717][ T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.135802][ T5852] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 333.153201][ T44] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 333.170013][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.188431][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.200851][ T5852] usb 5-1: config 0 descriptor?? [ 333.224442][ T44] usb 8-1: config 0 descriptor?? [ 333.371076][ T5987] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 333.413636][ T5852] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 333.539809][ T5987] usb 6-1: Using ep0 maxpacket: 32 [ 333.545914][T15408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.564398][ T5987] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 333.589105][ T5987] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 333.608797][ T5987] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 333.624111][ T5987] usb 6-1: Product: syz [ 333.628490][ T5987] usb 6-1: Manufacturer: syz [ 333.633415][ T5987] usb 6-1: SerialNumber: syz [ 333.648088][ T5987] usb 6-1: config 0 descriptor?? [ 333.651198][ T44] mcp2221 0003:04D8:00DD.003F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 333.656380][T15393] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 333.676624][ T5987] hub 6-1:0.0: bad descriptor, ignoring hub [ 333.683206][ T5987] hub 6-1:0.0: probe with driver hub failed with error -5 [ 333.991965][ T5987] usb 6-1: USB disconnect, device number 46 [ 334.057156][ T44] usb 8-1: USB disconnect, device number 32 [ 334.217969][ T5852] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 334.229131][ T5852] asix 5-1:0.0: probe with driver asix failed with error -71 [ 334.248939][ T5852] usb 5-1: USB disconnect, device number 50 [ 334.470248][ T5857] Bluetooth: hci5: command 0xfc11 tx timeout [ 334.470266][ T5850] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 334.702595][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 334.708776][ T30] audit: type=1326 audit(1755042607.901:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7224b2add9 code=0x7ffc0000 [ 334.757174][ T30] audit: type=1326 audit(1755042607.901:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7224b2add9 code=0x7ffc0000 [ 334.836009][ T30] audit: type=1326 audit(1755042607.901:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 334.887183][T15461] binder: 15459:15461 ioctl c0306201 2000000003c0 returned -22 [ 334.938106][ T30] audit: type=1326 audit(1755042607.901:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7224b2add9 code=0x7ffc0000 [ 334.965466][ T30] audit: type=1326 audit(1755042607.941:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 334.991464][ T30] audit: type=1326 audit(1755042607.941:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 335.041528][ T30] audit: type=1326 audit(1755042607.941:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 335.089365][ T30] audit: type=1326 audit(1755042607.941:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7224b2add9 code=0x7ffc0000 [ 335.174098][ T30] audit: type=1326 audit(1755042607.941:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 335.231319][ T30] audit: type=1326 audit(1755042607.941:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15452 comm="syz.6.3189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7224b8ebe9 code=0x7ffc0000 [ 335.239396][T15465] kvm: apic: phys broadcast and lowest prio [ 335.507956][T15469] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.532382][T15469] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.639156][T15469] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.659295][T15469] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.681661][T15480] netlink: 'syz.7.3192': attribute type 12 has an invalid length. [ 335.756662][T15469] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.768263][ T5905] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 335.776056][T15469] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.841782][T15469] netdevsim netdevsim5  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.851943][T15469] netdevsim netdevsim5  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.913636][ T70] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.922158][ T70] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.937827][ T70] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.939855][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 335.946398][ T70] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.967422][ T70] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.970676][ T5905] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.976021][ T70] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.985754][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.006365][ T70] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.009746][ T5905] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 336.017228][ T70] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.024680][ T5905] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.060609][ T5905] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 336.069676][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.291703][ T5905] usb 5-1: GET_CAPABILITIES returned 0 [ 336.302685][ T5905] usbtmc 5-1:16.0: can't read capabilities [ 336.497349][ T5987] usb 5-1: USB disconnect, device number 51 [ 336.699828][ T5905] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 336.851326][ T5905] usb 8-1: config 0 has no interfaces? [ 336.856895][ T5905] usb 8-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 336.866142][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.877238][ T5905] usb 8-1: config 0 descriptor?? [ 337.087770][ T5905] usb 8-1: USB disconnect, device number 33 [ 337.259921][ T44] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 337.415424][ T44] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 337.427558][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 337.429996][ T5966] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 337.441590][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 337.463246][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 337.477056][ T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.486963][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.500419][ T44] usb 5-1: config 0 descriptor?? [ 337.617405][ T5966] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.641954][ T5966] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.653955][ T5966] usb 6-1: config 0 interface 0 has no altsetting 0 [ 337.666479][ T5966] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 337.686212][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.705786][ T5966] usb 6-1: config 0 descriptor?? [ 337.926930][ T44] plantronics 0003:047F:FFFF.0040: ignoring exceeding usage max [ 337.957753][ T44] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 338.339893][ T5966] usb 6-1: string descriptor 0 read error: -22 [ 338.748036][ T5966] uclogic 0003:256C:006D.0041: failed retrieving string descriptor #100: -71 [ 338.787961][ T5966] uclogic 0003:256C:006D.0041: failed retrieving pen parameters: -71 [ 338.799581][ T5966] uclogic 0003:256C:006D.0041: failed probing pen v1 parameters: -71 [ 338.812862][ T5966] uclogic 0003:256C:006D.0041: failed probing parameters: -71 [ 338.820494][ T5966] uclogic 0003:256C:006D.0041: probe with driver uclogic failed with error -71 [ 338.846638][ T5966] usb 6-1: USB disconnect, device number 47 [ 340.004882][ T5844] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 340.031776][ T44] usb 5-1: USB disconnect, device number 52 [ 340.038176][ T5844] hid-generic 0000:0000:0000.0042: hidraw1: HID v0.00 Device [syz1] on syz0 [ 340.207570][T15615] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.277306][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.284512][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.581757][ T30] kauditd_printk_skb: 78 callbacks suppressed [ 340.581773][ T30] audit: type=1400 audit(1755042613.781:778): avc: denied { create } for pid=15630 comm="syz.7.3254" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 340.605781][T15637] program syz.5.3253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.608507][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.641658][ T30] audit: type=1400 audit(1755042613.831:779): avc: denied { mounton } for pid=15630 comm="syz.7.3254" path="/392/file0" dev="tmpfs" ino=2018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 340.680766][T15631] Invalid source name [ 340.684784][T15631] UBIFS error (pid: 15631): cannot open "./file0", error -22 [ 340.702317][ T30] audit: type=1400 audit(1755042613.881:780): avc: denied { mounton } for pid=15630 comm="syz.7.3254" path="/392/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 340.850010][ C1] sd 0:0:1:0: [sda] tag#7881 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 340.860451][ C1] sd 0:0:1:0: [sda] tag#7881 CDB: Write(6) 0a 00 00 00 00 00 [ 340.967636][T15646] syzkaller1: entered promiscuous mode [ 340.994360][T15646] syzkaller1: entered allmulticast mode [ 341.006077][T15658] netlink: 'syz.6.3260': attribute type 10 has an invalid length. [ 341.121367][T15658] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.138215][T15662] program syz.7.3263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 341.151062][T15658] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.158246][T15658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.168131][T15658] bridge0: entered promiscuous mode [ 341.173613][T15658] bridge0: entered allmulticast mode [ 341.182141][T15658] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 341.292381][T15675] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3267'. [ 341.360272][T15678] netlink: 67 bytes leftover after parsing attributes in process `syz.6.3269'. [ 341.709905][ T5844] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 341.751882][ T5905] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 341.861245][ T5844] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 341.875568][ T5844] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 341.884944][ T5844] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 341.893161][ T5844] usb 7-1: SerialNumber: syz [ 341.924783][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.935930][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.946519][ T5905] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 341.960065][ T5905] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 341.969197][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.980143][ T5905] usb 8-1: config 0 descriptor?? [ 342.029823][ T44] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 342.182495][ T44] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 342.194371][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 342.205717][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 342.217923][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 342.232596][ T44] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 342.241703][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.253411][ T44] usb 6-1: config 0 descriptor?? [ 342.259157][T15700] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 342.403658][ T5905] plantronics 0003:047F:FFFF.0043: ignoring exceeding usage max [ 342.415375][ T5905] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 342.524846][ T5844] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 342.681106][ T44] plantronics 0003:047F:FFFF.0044: reserved main item tag 0xd [ 342.723784][ T5844] usb 8-1: USB disconnect, device number 34 [ 342.750208][ T44] plantronics 0003:047F:FFFF.0044: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 342.884107][ T44] usb 6-1: USB disconnect, device number 48 [ 342.947678][T15722] [ 342.950069][T15722] ===================================================== [ 342.956992][T15722] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 342.964530][T15722] 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 Not tainted [ 342.971638][T15722] ----------------------------------------------------- [ 342.978572][T15722] syz.4.3283/15722 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 342.986294][T15722] ffff888062f4f6a8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x138/0x510 [ 342.995016][T15722] [ 342.995016][T15722] and this task is already holding: [ 343.002380][T15722] ffff88807d29c028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 343.012248][T15722] which would create a new lock dependency: [ 343.018137][T15722] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 343.026260][T15722] [ 343.026260][T15722] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 343.035716][T15722] (&client->buffer_lock){..-.}-{3:3} [ 343.035757][T15722] [ 343.035757][T15722] ... which became SOFTIRQ-irq-safe at: [ 343.048822][T15722] lock_acquire+0x179/0x350 [ 343.053431][T15722] _raw_spin_lock+0x2e/0x40 [ 343.058036][T15722] evdev_pass_values+0x10e/0x9b0 [ 343.063079][T15722] evdev_events+0x1bb/0x390 [ 343.067686][T15722] input_pass_values+0x74e/0x880 [ 343.072743][T15722] input_handle_event+0xb29/0x14d0 [ 343.077965][T15722] input_event+0x8e/0xd0 [ 343.082314][T15722] hidinput_hid_event+0xa10/0x2420 [ 343.087559][T15722] hid_process_event+0x4b7/0x5e0 [ 343.092608][T15722] hid_report_raw_event+0xa0a/0x1290 [ 343.098005][T15722] __hid_input_report.constprop.0+0x33f/0x450 [ 343.104185][T15722] hid_irq_in+0x35e/0x870 [ 343.108618][T15722] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 343.114120][T15722] usb_hcd_giveback_urb+0x39b/0x450 [ 343.119423][T15722] dummy_timer+0x1814/0x3a30 [ 343.124192][T15722] __hrtimer_run_queues+0x202/0xad0 [ 343.129507][T15722] hrtimer_run_softirq+0x17d/0x350 [ 343.134724][T15722] handle_softirqs+0x216/0x8e0 [ 343.139772][T15722] __irq_exit_rcu+0x109/0x170 [ 343.144552][T15722] irq_exit_rcu+0x9/0x30 [ 343.148898][T15722] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 343.154636][T15722] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.160713][T15722] lock_acquire+0x62/0x350 [ 343.165245][T15722] unwind_next_frame+0xd1/0x20a0 [ 343.170281][T15722] arch_stack_walk+0x94/0x100 [ 343.175053][T15722] stack_trace_save+0x8e/0xc0 [ 343.179823][T15722] kasan_save_stack+0x33/0x60 [ 343.184597][T15722] kasan_save_track+0x14/0x30 [ 343.189362][T15722] kasan_save_free_info+0x3b/0x60 [ 343.194474][T15722] __kasan_slab_free+0x60/0x70 [ 343.199326][T15722] kfree+0x2b4/0x4d0 [ 343.203330][T15722] uevent_show+0x2cf/0x3a0 [ 343.207835][T15722] dev_attr_show+0x56/0xe0 [ 343.212347][T15722] sysfs_kf_seq_show+0x213/0x3e0 [ 343.217383][T15722] seq_read_iter+0x506/0x12c0 [ 343.222151][T15722] kernfs_fop_read_iter+0x40f/0x5a0 [ 343.227535][T15722] vfs_read+0x8bf/0xcf0 [ 343.231784][T15722] ksys_read+0x12a/0x250 [ 343.236127][T15722] do_syscall_64+0xcd/0x4c0 [ 343.240723][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.246717][T15722] [ 343.246717][T15722] to a SOFTIRQ-irq-unsafe lock: [ 343.253744][T15722] (tasklist_lock){.+.+}-{3:3} [ 343.253780][T15722] [ 343.253780][T15722] ... which became SOFTIRQ-irq-unsafe at: [ 343.266397][T15722] ... [ 343.266408][T15722] lock_acquire+0x179/0x350 [ 343.273597][T15722] _raw_read_lock+0x5f/0x70 [ 343.278197][T15722] __do_wait+0x105/0x890 [ 343.282560][T15722] do_wait+0x21e/0x5a0 [ 343.286735][T15722] kernel_wait+0x9f/0x160 [ 343.291155][T15722] call_usermodehelper_exec_work+0xf1/0x170 [ 343.297138][T15722] process_one_work+0x9cc/0x1b70 [ 343.302167][T15722] worker_thread+0x6c8/0xf10 [ 343.306849][T15722] kthread+0x3c5/0x780 [ 343.311005][T15722] ret_from_fork+0x5d7/0x6f0 [ 343.315766][T15722] ret_from_fork_asm+0x1a/0x30 [ 343.320805][T15722] [ 343.320805][T15722] other info that might help us debug this: [ 343.320805][T15722] [ 343.331026][T15722] Chain exists of: [ 343.331026][T15722] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 343.331026][T15722] [ 343.344200][T15722] Possible interrupt unsafe locking scenario: [ 343.344200][T15722] [ 343.352782][T15722] CPU0 CPU1 [ 343.358147][T15722] ---- ---- [ 343.363514][T15722] lock(tasklist_lock); [ 343.367763][T15722] local_irq_disable(); [ 343.374528][T15722] lock(&client->buffer_lock); [ 343.381910][T15722] lock(&new->fa_lock); [ 343.388769][T15722] [ 343.392250][T15722] lock(&client->buffer_lock); [ 343.397713][T15722] [ 343.397713][T15722] *** DEADLOCK *** [ 343.397713][T15722] [ 343.405859][T15722] 7 locks held by syz.4.3283/15722: [ 343.411057][T15722] #0: ffff88802af88118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x206/0x750 [ 343.420212][T15722] #1: ffff8881476af230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0x9f/0x3b0 [ 343.430331][T15722] #2: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbb/0x3b0 [ 343.440024][T15722] #3: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x80/0x880 [ 343.449608][T15722] #4: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x7b/0x390 [ 343.458750][T15722] #5: ffff88807d29c028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0x10e/0x9b0 [ 343.469008][T15722] #6: ffffffff8e5c11e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x62/0x510 [ 343.478039][T15722] [ 343.478039][T15722] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 343.488432][T15722] -> (&client->buffer_lock){..-.}-{3:3} { [ 343.494235][T15722] IN-SOFTIRQ-W at: [ 343.498198][T15722] lock_acquire+0x179/0x350 [ 343.504449][T15722] _raw_spin_lock+0x2e/0x40 [ 343.510610][T15722] evdev_pass_values+0x10e/0x9b0 [ 343.517194][T15722] evdev_events+0x1bb/0x390 [ 343.523337][T15722] input_pass_values+0x74e/0x880 [ 343.530006][T15722] input_handle_event+0xb29/0x14d0 [ 343.536774][T15722] input_event+0x8e/0xd0 [ 343.542651][T15722] hidinput_hid_event+0xa10/0x2420 [ 343.549412][T15722] hid_process_event+0x4b7/0x5e0 [ 343.555992][T15722] hid_report_raw_event+0xa0a/0x1290 [ 343.562942][T15722] __hid_input_report.constprop.0+0x33f/0x450 [ 343.570664][T15722] hid_irq_in+0x35e/0x870 [ 343.576643][T15722] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 343.583667][T15722] usb_hcd_giveback_urb+0x39b/0x450 [ 343.590615][T15722] dummy_timer+0x1814/0x3a30 [ 343.596846][T15722] __hrtimer_run_queues+0x202/0xad0 [ 343.603677][T15722] hrtimer_run_softirq+0x17d/0x350 [ 343.610432][T15722] handle_softirqs+0x216/0x8e0 [ 343.616844][T15722] __irq_exit_rcu+0x109/0x170 [ 343.623164][T15722] irq_exit_rcu+0x9/0x30 [ 343.629059][T15722] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 343.636338][T15722] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.643976][T15722] lock_acquire+0x62/0x350 [ 343.650044][T15722] unwind_next_frame+0xd1/0x20a0 [ 343.656630][T15722] arch_stack_walk+0x94/0x100 [ 343.663055][T15722] stack_trace_save+0x8e/0xc0 [ 343.669377][T15722] kasan_save_stack+0x33/0x60 [ 343.675687][T15722] kasan_save_track+0x14/0x30 [ 343.682120][T15722] kasan_save_free_info+0x3b/0x60 [ 343.688808][T15722] __kasan_slab_free+0x60/0x70 [ 343.695225][T15722] kfree+0x2b4/0x4d0 [ 343.700760][T15722] uevent_show+0x2cf/0x3a0 [ 343.706823][T15722] dev_attr_show+0x56/0xe0 [ 343.712892][T15722] sysfs_kf_seq_show+0x213/0x3e0 [ 343.719467][T15722] seq_read_iter+0x506/0x12c0 [ 343.725772][T15722] kernfs_fop_read_iter+0x40f/0x5a0 [ 343.732615][T15722] vfs_read+0x8bf/0xcf0 [ 343.738399][T15722] ksys_read+0x12a/0x250 [ 343.744280][T15722] do_syscall_64+0xcd/0x4c0 [ 343.750416][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.758129][T15722] INITIAL USE at: [ 343.762028][T15722] lock_acquire+0x179/0x350 [ 343.768106][T15722] _raw_spin_lock+0x2e/0x40 [ 343.774183][T15722] evdev_pass_values+0x10e/0x9b0 [ 343.780678][T15722] evdev_events+0x1bb/0x390 [ 343.786917][T15722] input_pass_values+0x74e/0x880 [ 343.793412][T15722] input_handle_event+0xf00/0x14d0 [ 343.800065][T15722] input_inject_event+0x1e8/0x3b0 [ 343.806661][T15722] evdev_write+0x457/0x750 [ 343.812643][T15722] vfs_write+0x29d/0x11d0 [ 343.818739][T15722] ksys_write+0x1f8/0x250 [ 343.824627][T15722] do_syscall_64+0xcd/0x4c0 [ 343.830692][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.838149][T15722] } [ 343.840729][T15722] ... key at: [] __key.1+0x0/0x40 [ 343.847841][T15722] [ 343.847841][T15722] the dependencies between the lock to be acquired [ 343.847853][T15722] and SOFTIRQ-irq-unsafe lock: [ 343.861348][T15722] -> (tasklist_lock){.+.+}-{3:3} { [ 343.866640][T15722] HARDIRQ-ON-R at: [ 343.870796][T15722] lock_acquire+0x179/0x350 [ 343.877382][T15722] _raw_read_lock+0x5f/0x70 [ 343.883975][T15722] __do_wait+0x105/0x890 [ 343.890231][T15722] do_wait+0x21e/0x5a0 [ 343.896305][T15722] kernel_wait+0x9f/0x160 [ 343.902709][T15722] call_usermodehelper_exec_work+0xf1/0x170 [ 343.910604][T15722] process_one_work+0x9cc/0x1b70 [ 343.917536][T15722] worker_thread+0x6c8/0xf10 [ 343.924196][T15722] kthread+0x3c5/0x780 [ 343.930251][T15722] ret_from_fork+0x5d7/0x6f0 [ 343.937007][T15722] ret_from_fork_asm+0x1a/0x30 [ 343.943789][T15722] SOFTIRQ-ON-R at: [ 343.947929][T15722] lock_acquire+0x179/0x350 [ 343.954425][T15722] _raw_read_lock+0x5f/0x70 [ 343.960932][T15722] __do_wait+0x105/0x890 [ 343.967175][T15722] do_wait+0x21e/0x5a0 [ 343.973240][T15722] kernel_wait+0x9f/0x160 [ 343.979561][T15722] call_usermodehelper_exec_work+0xf1/0x170 [ 343.987441][T15722] process_one_work+0x9cc/0x1b70 [ 343.994377][T15722] worker_thread+0x6c8/0xf10 [ 344.000952][T15722] kthread+0x3c5/0x780 [ 344.007015][T15722] ret_from_fork+0x5d7/0x6f0 [ 344.013581][T15722] ret_from_fork_asm+0x1a/0x30 [ 344.020337][T15722] INITIAL USE at: [ 344.024391][T15722] lock_acquire+0x179/0x350 [ 344.030820][T15722] _raw_write_lock_irq+0x36/0x50 [ 344.037675][T15722] copy_process+0x4caf/0x7690 [ 344.044248][T15722] kernel_clone+0xfc/0x930 [ 344.050587][T15722] user_mode_thread+0xc7/0x110 [ 344.057265][T15722] rest_init+0x23/0x2b0 [ 344.063333][T15722] start_kernel+0x3ee/0x4d0 [ 344.069749][T15722] x86_64_start_reservations+0x18/0x30 [ 344.077122][T15722] x86_64_start_kernel+0x130/0x190 [ 344.084142][T15722] common_startup_64+0x13e/0x148 [ 344.090992][T15722] INITIAL READ USE at: [ 344.095480][T15722] lock_acquire+0x179/0x350 [ 344.102330][T15722] _raw_read_lock+0x5f/0x70 [ 344.109186][T15722] __do_wait+0x105/0x890 [ 344.115766][T15722] do_wait+0x21e/0x5a0 [ 344.122171][T15722] kernel_wait+0x9f/0x160 [ 344.128820][T15722] call_usermodehelper_exec_work+0xf1/0x170 [ 344.137048][T15722] process_one_work+0x9cc/0x1b70 [ 344.144865][T15722] worker_thread+0x6c8/0xf10 [ 344.151783][T15722] kthread+0x3c5/0x780 [ 344.158176][T15722] ret_from_fork+0x5d7/0x6f0 [ 344.165091][T15722] ret_from_fork_asm+0x1a/0x30 [ 344.172186][T15722] } [ 344.174837][T15722] ... key at: [] tasklist_lock+0x18/0x40 [ 344.182708][T15722] ... acquired at: [ 344.186660][T15722] _raw_read_lock+0x5f/0x70 [ 344.191318][T15722] send_sigurg+0xed/0xc80 [ 344.195807][T15722] sk_send_sigurg+0x76/0x360 [ 344.200560][T15722] unix_stream_sendmsg+0xfa5/0x1340 [ 344.205910][T15722] ____sys_sendmsg+0xa98/0xc70 [ 344.211523][T15722] ___sys_sendmsg+0x134/0x1d0 [ 344.216390][T15722] __sys_sendmmsg+0x200/0x420 [ 344.221225][T15722] __x64_sys_sendmmsg+0x9c/0x100 [ 344.226324][T15722] do_syscall_64+0xcd/0x4c0 [ 344.230978][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.237027][T15722] [ 344.239336][T15722] -> (&f_owner->lock){....}-{3:3} { [ 344.244609][T15722] INITIAL USE at: [ 344.248568][T15722] lock_acquire+0x179/0x350 [ 344.254802][T15722] _raw_write_lock_irq+0x36/0x50 [ 344.261480][T15722] __f_setown+0x61/0x3c0 [ 344.267459][T15722] generic_setlease+0xef2/0x1300 [ 344.274128][T15722] kernel_setlease+0x106/0x140 [ 344.280606][T15722] vfs_setlease+0x258/0x2d0 [ 344.286822][T15722] fcntl_setlease+0x3ed/0x5a0 [ 344.293218][T15722] do_fcntl+0x751/0x15a0 [ 344.299262][T15722] __x64_sys_fcntl+0x163/0x200 [ 344.305749][T15722] do_syscall_64+0xcd/0x4c0 [ 344.311968][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.319581][T15722] INITIAL READ USE at: [ 344.323986][T15722] lock_acquire+0x179/0x350 [ 344.330660][T15722] _raw_read_lock_irqsave+0x74/0x90 [ 344.338027][T15722] send_sigio+0x31/0x3e0 [ 344.344424][T15722] kill_fasync+0x214/0x510 [ 344.350995][T15722] lease_break_callback+0x23/0x30 [ 344.358183][T15722] __break_lease+0x674/0x1810 [ 344.365004][T15722] do_dentry_open+0x91f/0x1530 [ 344.372007][T15722] vfs_open+0x82/0x3f0 [ 344.378323][T15722] path_openat+0x1de4/0x2cb0 [ 344.385067][T15722] do_filp_open+0x20b/0x470 [ 344.391733][T15722] do_sys_openat2+0x11b/0x1d0 [ 344.398572][T15722] __x64_sys_open+0x153/0x1e0 [ 344.405402][T15722] do_syscall_64+0xcd/0x4c0 [ 344.412062][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.420104][T15722] } [ 344.422665][T15722] ... key at: [] __key.1+0x0/0x40 [ 344.430373][T15722] ... acquired at: [ 344.434248][T15722] _raw_read_lock_irqsave+0x74/0x90 [ 344.439688][T15722] send_sigio+0x31/0x3e0 [ 344.444088][T15722] kill_fasync+0x214/0x510 [ 344.448666][T15722] lease_break_callback+0x23/0x30 [ 344.453879][T15722] __break_lease+0x674/0x1810 [ 344.458726][T15722] do_dentry_open+0x91f/0x1530 [ 344.463653][T15722] vfs_open+0x82/0x3f0 [ 344.467882][T15722] path_openat+0x1de4/0x2cb0 [ 344.472623][T15722] do_filp_open+0x20b/0x470 [ 344.477283][T15722] do_sys_openat2+0x11b/0x1d0 [ 344.482116][T15722] __x64_sys_open+0x153/0x1e0 [ 344.486950][T15722] do_syscall_64+0xcd/0x4c0 [ 344.491609][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.497705][T15722] [ 344.500014][T15722] -> (&new->fa_lock){....}-{3:3} { [ 344.505118][T15722] INITIAL USE at: [ 344.508993][T15722] lock_acquire+0x179/0x350 [ 344.515067][T15722] _raw_write_lock_irq+0x36/0x50 [ 344.521576][T15722] fasync_remove_entry+0xb2/0x1e0 [ 344.528247][T15722] fasync_helper+0xaf/0xd0 [ 344.534209][T15722] sock_fasync+0x92/0x140 [ 344.541135][T15722] __fput+0x968/0xb70 [ 344.547135][T15722] task_work_run+0x150/0x240 [ 344.553304][T15722] exit_to_user_mode_loop+0xeb/0x110 [ 344.560190][T15722] do_syscall_64+0x3f6/0x4c0 [ 344.566349][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.573801][T15722] INITIAL READ USE at: [ 344.578104][T15722] lock_acquire+0x179/0x350 [ 344.584608][T15722] _raw_read_lock_irqsave+0x74/0x90 [ 344.591795][T15722] kill_fasync+0x138/0x510 [ 344.598195][T15722] sock_wake_async+0x132/0x160 [ 344.604934][T15722] sk_wake_async+0x102/0x2e0 [ 344.611508][T15722] tcp_rcv_state_process+0x3199/0x4ec0 [ 344.618949][T15722] tcp_v4_do_rcv+0x1ad/0xa90 [ 344.625528][T15722] __release_sock+0x31b/0x400 [ 344.632218][T15722] release_sock+0x5a/0x220 [ 344.638703][T15722] __inet_stream_connect+0x65a/0xf60 [ 344.646058][T15722] inet_stream_connect+0x57/0xa0 [ 344.653097][T15722] __sys_connect_file+0x141/0x1a0 [ 344.660127][T15722] __sys_connect+0x13b/0x160 [ 344.666697][T15722] __x64_sys_connect+0x72/0xb0 [ 344.673446][T15722] do_syscall_64+0xcd/0x4c0 [ 344.679927][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.687900][T15722] } [ 344.690390][T15722] ... key at: [] __key.0+0x0/0x40 [ 344.697486][T15722] ... acquired at: [ 344.701267][T15722] lock_acquire+0x179/0x350 [ 344.705957][T15722] _raw_read_lock_irqsave+0x74/0x90 [ 344.711341][T15722] kill_fasync+0x138/0x510 [ 344.715942][T15722] evdev_pass_values+0x619/0x9b0 [ 344.721068][T15722] evdev_events+0x1bb/0x390 [ 344.725732][T15722] input_pass_values+0x74e/0x880 [ 344.731350][T15722] input_handle_event+0xf00/0x14d0 [ 344.736618][T15722] input_inject_event+0x1e8/0x3b0 [ 344.741803][T15722] evdev_write+0x457/0x750 [ 344.746381][T15722] vfs_write+0x29d/0x11d0 [ 344.751124][T15722] ksys_write+0x1f8/0x250 [ 344.755603][T15722] do_syscall_64+0xcd/0x4c0 [ 344.760266][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.766395][T15722] [ 344.768785][T15722] [ 344.768785][T15722] stack backtrace: [ 344.774663][T15722] CPU: 1 UID: 0 PID: 15722 Comm: syz.4.3283 Not tainted 6.17.0-rc1-syzkaller-00016-g8742b2d8935f #0 PREEMPT(full) [ 344.774686][T15722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.774695][T15722] Call Trace: [ 344.774700][T15722] [ 344.774705][T15722] dump_stack_lvl+0x116/0x1f0 [ 344.774721][T15722] check_irq_usage+0x7dc/0x920 [ 344.774747][T15722] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 344.774766][T15722] ? check_path.constprop.0+0x24/0x50 [ 344.774787][T15722] ? __lock_acquire+0x12bc/0x1ce0 [ 344.774806][T15722] __lock_acquire+0x12bc/0x1ce0 [ 344.774835][T15722] lock_acquire+0x179/0x350 [ 344.774854][T15722] ? kill_fasync+0x138/0x510 [ 344.774876][T15722] _raw_read_lock_irqsave+0x74/0x90 [ 344.774898][T15722] ? kill_fasync+0x138/0x510 [ 344.774915][T15722] kill_fasync+0x138/0x510 [ 344.774934][T15722] evdev_pass_values+0x619/0x9b0 [ 344.774954][T15722] evdev_events+0x1bb/0x390 [ 344.774974][T15722] input_pass_values+0x74e/0x880 [ 344.774996][T15722] input_handle_event+0xf00/0x14d0 [ 344.775013][T15722] ? _copy_from_user+0x59/0xd0 [ 344.775034][T15722] input_inject_event+0x1e8/0x3b0 [ 344.775052][T15722] evdev_write+0x457/0x750 [ 344.775071][T15722] ? __pfx_evdev_write+0x10/0x10 [ 344.775089][T15722] ? bpf_lsm_file_permission+0x9/0x10 [ 344.775107][T15722] ? security_file_permission+0x71/0x210 [ 344.775132][T15722] ? rw_verify_area+0xcf/0x6c0 [ 344.775154][T15722] ? __pfx_evdev_write+0x10/0x10 [ 344.775171][T15722] vfs_write+0x29d/0x11d0 [ 344.775185][T15722] ? __pfx_vfs_write+0x10/0x10 [ 344.775197][T15722] ? find_held_lock+0x2b/0x80 [ 344.775213][T15722] ? __fget_files+0x204/0x3c0 [ 344.775228][T15722] ? __fget_files+0x20e/0x3c0 [ 344.775244][T15722] ksys_write+0x1f8/0x250 [ 344.775257][T15722] ? __pfx_ksys_write+0x10/0x10 [ 344.775275][T15722] do_syscall_64+0xcd/0x4c0 [ 344.775293][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.775307][T15722] RIP: 0033:0x7f7d6e78ebe9 [ 344.775319][T15722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.775332][T15722] RSP: 002b:00007f7d6f6cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.775345][T15722] RAX: ffffffffffffffda RBX: 00007f7d6e9b5fa0 RCX: 00007f7d6e78ebe9 [ 344.775354][T15722] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 344.775362][T15722] RBP: 00007f7d6e811e19 R08: 0000000000000000 R09: 0000000000000000 [ 344.775371][T15722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.775378][T15722] R13: 00007f7d6e9b6038 R14: 00007f7d6e9b5fa0 R15: 00007ffe2b43ff68 [ 344.775391][T15722] [ 345.061324][ T5844] usb 7-1: USB disconnect, device number 30 [ 345.067913][ T5844] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device