last executing test programs: 5.402869938s ago: executing program 1 (id=26819): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) r2 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x9) 5.218080513s ago: executing program 1 (id=26813): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r0, 0x0) 3.66316227s ago: executing program 2 (id=26835): io_setup(0x6, &(0x7f0000001380)) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) 3.384337604s ago: executing program 1 (id=26838): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40814) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.283867636s ago: executing program 2 (id=26839): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') read$FUSE(r0, &(0x7f00000001c0)={0x2020}, 0x2020) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000240)=ANY=[], 0xb8) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r2, r1, 0x0) 3.265844564s ago: executing program 1 (id=26840): r0 = syz_usb_connect$hid(0x2, 0x49, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xf, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffa, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc9}}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, "d0"}, @global=@item_4={0x3, 0x1, 0x3, "4b24e0d4"}]}}, 0x0}, 0x0) 3.116424429s ago: executing program 2 (id=26842): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32=r2], 0x60}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 3.006021737s ago: executing program 2 (id=26844): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) fsopen(0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x4000840) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0xc, 0x80, 0x4, 0x2, "02010200", '\nj#\x00'}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, &(0x7f0000000240)={0x0, 0x23, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0}, &(0x7f00000006c0)={0x2c, &(0x7f0000000400)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0}) 2.789321987s ago: executing program 3 (id=26846): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.61674535s ago: executing program 3 (id=26847): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x921}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) 2.496802859s ago: executing program 3 (id=26849): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) 2.086817133s ago: executing program 3 (id=26850): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f000000b800)={0x2020, 0x0, 0x0}, 0xe80) write$FUSE_INIT(r2, &(0x7f00000002c0)={0x50, 0x0, r3, {0x7, 0x28, 0x1ff, 0x2020202, 0x4, 0x6, 0x422, 0x1e}}, 0x50) 1.824560198s ago: executing program 3 (id=26852): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, 0xee00, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x3}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 1.444498138s ago: executing program 1 (id=26855): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0), 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="b8", 0xfe49}, {&(0x7f0000000080)="61fc4777003a5456300750e99d9d0963"}], 0x1}, 0xa6}], 0x2, 0x4008440) 1.33411865s ago: executing program 3 (id=26857): unshare(0x2a020400) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) poll(&(0x7f0000000140)=[{r1, 0x140}], 0x1, 0x6) 1.319621895s ago: executing program 1 (id=26858): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x57, {0x57, 0x7, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x40, 0xd, 0x10, "f21d64911c4132db21fee26903f96d36"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.215176446s ago: executing program 0 (id=26859): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%\xde({F\xfaA:', 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) 1.163750635s ago: executing program 4 (id=26860): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/71, 0x1f}, {&(0x7f00000004c0)=""/71, 0x47}], 0x2}, 0x40002141) 1.086780118s ago: executing program 2 (id=26861): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) pwrite64(r1, &(0x7f0000000140)='AF', 0x2, 0x8be6) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) 1.006749828s ago: executing program 4 (id=26862): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000000c0)=0x100, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.006025637s ago: executing program 0 (id=26872): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x22ddcaf, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') pread64(r1, &(0x7f0000000600)=""/4099, 0xadb, 0x0) 915.134092ms ago: executing program 0 (id=26863): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x1a) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) truncate(&(0x7f0000000200)='./file2\x00', 0x7) 850.910425ms ago: executing program 4 (id=26864): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x2, {0x10000042, 0x0, 0x4}}, 0x10, 0x0}, 0x0) 624.228426ms ago: executing program 4 (id=26865): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) syz_clone3(&(0x7f00000003c0)={0x101040000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 586.190864ms ago: executing program 0 (id=26866): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c80)=""/157, 0x9d}, {&(0x7f0000000040)=""/82, 0x52}], 0x2}, 0x6}], 0x1, 0x28101, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x12c}, 0x1, 0x0, 0x0, 0x4040}, 0x20008004) 393.269643ms ago: executing program 0 (id=26867): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000380)={{@host}, 0x0, 0x800000000000000, 0x1, 0xfffffffa}) 292.75478ms ago: executing program 4 (id=26868): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, 0xee00, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x3}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 265.021114ms ago: executing program 0 (id=26869): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000380)="2781f1b2d0fc8d64f7", 0x9) pread64(r0, &(0x7f0000000080)=""/110, 0x88, 0x400) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 97.949102ms ago: executing program 2 (id=26870): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 4 (id=26871): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) kernel console output (not intermixed with test programs): has an invalid bInterval 0, changing to 7 [ 1810.540066][T19552] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1810.548435][T19552] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1810.561935][T19552] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1810.573484][T19552] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1810.588515][T19552] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1810.598095][T19552] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1810.613027][T19552] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1810.620825][T19552] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1810.631943][T19552] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1810.643252][T19552] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1810.651176][T19552] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1810.660900][T19552] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1810.676659][T19552] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1810.681712][T10999] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1810.691068][T19552] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1810.700892][T19552] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1810.713029][T19552] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1810.720999][T19552] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1810.738689][T19552] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1810.750558][T19552] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1810.761140][T19552] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1810.777041][T19552] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1810.788474][T19552] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1810.804012][T19552] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1810.816520][T19552] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1810.825605][T19552] usb 3-1: Product: syz [ 1810.829824][T19552] usb 3-1: Manufacturer: syz [ 1810.841147][T19552] usb 3-1: SerialNumber: syz [ 1810.855540][T10999] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1810.864491][T19552] usb 3-1: config 0 descriptor?? [ 1810.881644][T10999] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1810.887828][T19552] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1810.911701][T10999] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1810.933370][T10999] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1810.959877][T10999] usb 4-1: Manufacturer: syz [ 1810.983863][T10999] usb 4-1: config 0 descriptor?? [ 1811.191943][T10999] rc_core: IR keymap rc-hauppauge not found [ 1811.198030][T10999] Registered IR keymap rc-empty [ 1811.220127][T10999] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1811.271811][T10999] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input202 [ 1811.299668][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1811.324933][T10999] usb 4-1: USB disconnect, device number 100 [ 1811.759430][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 1811.771472][ T5887] usb 3-1: USB disconnect, device number 87 [ 1811.795563][ T5887] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1812.068431][T29762] netlink: 116 bytes leftover after parsing attributes in process `syz.1.25542'. [ 1812.567999][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1812.568019][ T30] audit: type=1326 audit(1751533116.404:14211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29772 comm="syz.2.25547" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x0 [ 1814.051464][T10999] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1814.296728][T10999] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1814.310782][T10999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1814.323243][T10999] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1814.333994][T10999] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1814.371600][T10999] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1814.390468][T10999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.446201][T10999] usb 2-1: config 0 descriptor?? [ 1814.892602][T10999] plantronics 0003:047F:FFFF.00F1: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1815.265852][T29828] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1815.954610][T29840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25575'. [ 1816.371452][ T5887] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1816.537593][ T5887] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1816.548103][ T5887] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1816.560056][ T5887] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1816.572329][ T5887] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1816.583966][ T5887] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1816.598870][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1816.609904][ T5887] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1816.619693][ T5887] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1816.628504][ T5887] usb 3-1: Product: syz [ 1816.633515][ T5887] usb 3-1: Manufacturer: syz [ 1816.642795][ T5887] usb 3-1: SerialNumber: syz [ 1816.668419][ T5887] usb 3-1: config 0 descriptor?? [ 1816.680477][T29842] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1816.695453][ T5887] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1816.720677][ T5887] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 1816.903509][ T8288] usb 2-1: USB disconnect, device number 94 [ 1816.976028][T23865] usb 3-1: USB disconnect, device number 88 [ 1817.014182][T23865] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 1817.818678][T29757] Set syz1 is full, maxelem 65536 reached [ 1819.218465][T29898] netlink: 'syz.2.25601': attribute type 10 has an invalid length. [ 1819.237971][T29898] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1820.063932][T29913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25602'. [ 1821.101784][T23865] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1821.276376][T23865] usb 4-1: Using ep0 maxpacket: 32 [ 1821.284772][T23865] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1821.300760][T23865] usb 4-1: config 0 has no interface number 0 [ 1821.309077][T23865] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1821.327061][T23865] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1821.338772][T23865] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1821.348621][T23865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.357215][T23865] usb 4-1: Product: syz [ 1821.362784][T23865] usb 4-1: Manufacturer: syz [ 1821.367428][T23865] usb 4-1: SerialNumber: syz [ 1821.381717][ T8288] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 1821.382241][T23865] usb 4-1: config 0 descriptor?? [ 1821.549550][ T8288] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1821.558577][ T8288] usb 2-1: config 179 has no interface number 0 [ 1821.571854][ T8288] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1821.587699][ T8288] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1821.601039][ T8288] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1821.617895][ T8288] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 1821.629241][ T8288] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1821.643498][ T8288] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1821.653784][ T8288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.666030][T29943] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1821.681761][T29943] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1821.930509][T10999] usb 2-1: USB disconnect, device number 95 [ 1821.930611][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1821.945909][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 1822.027933][T23865] appletouch 4-1:0.85: Geyser mode initialized. [ 1822.036863][T23865] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input205 [ 1822.253895][ T8288] usb 4-1: USB disconnect, device number 101 [ 1822.298669][ T8288] appletouch 4-1:0.85: input: appletouch disconnected [ 1823.669504][T29987] ALSA: mixer_oss: invalid OSS volume '' [ 1823.811893][T10999] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1823.997009][T10999] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 1824.019064][T10999] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1824.024532][T29996] netlink: 'syz.0.25644': attribute type 11 has an invalid length. [ 1824.060273][T10999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1824.078172][T10999] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1824.089515][T10999] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1824.109645][T10999] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1824.129608][T10999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.153812][T10999] usb 3-1: config 0 descriptor?? [ 1824.162833][T29985] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1824.405905][T30007] netlink: 64 bytes leftover after parsing attributes in process `syz.3.25649'. [ 1824.615013][T10999] plantronics 0003:047F:FFFF.00F2: reserved main item tag 0xd [ 1824.648553][T10999] plantronics 0003:047F:FFFF.00F2: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1824.913857][T10999] usb 3-1: USB disconnect, device number 89 [ 1825.017222][T30021] netlink: 71 bytes leftover after parsing attributes in process `syz.1.25655'. [ 1825.900281][T30046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25665'. [ 1825.931549][T30046] netlink: 'syz.2.25665': attribute type 20 has an invalid length. [ 1825.939528][T30046] netlink: 'syz.2.25665': attribute type 21 has an invalid length. [ 1826.036758][T30051] netlink: 96 bytes leftover after parsing attributes in process `syz.1.25666'. [ 1826.477339][T30061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25670'. [ 1826.610361][T30064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25672'. [ 1827.492882][T23865] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1827.580336][T30098] input: syz0 as /devices/virtual/input/input207 [ 1827.674372][T23865] usb 3-1: Using ep0 maxpacket: 32 [ 1827.684516][T23865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1827.697225][T23865] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1827.718015][T23865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.736548][T23865] usb 3-1: Product: syz [ 1827.740796][T23865] usb 3-1: Manufacturer: syz [ 1827.760600][T23865] usb 3-1: SerialNumber: syz [ 1827.782421][T23865] usb 3-1: config 0 descriptor?? [ 1828.214302][T23865] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1828.630351][T23865] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 1828.711966][ T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1828.720605][T23865] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22 [ 1828.868951][T23865] usb 3-1: USB disconnect, device number 90 [ 1828.884743][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1828.904482][ T9] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1828.914014][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.932005][ T9] usb 4-1: Product: syz [ 1828.936246][ T9] usb 4-1: Manufacturer: syz [ 1828.955761][ T9] usb 4-1: SerialNumber: syz [ 1828.983235][ T9] usb 4-1: config 0 descriptor?? [ 1829.002291][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 1829.715307][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1829.726526][ T9] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input208 [ 1829.741538][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1829.769641][ T9] usb 4-1: USB disconnect, device number 102 [ 1829.780915][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1829.806880][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1829.833920][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1829.876079][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1829.896551][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1829.924716][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1829.981483][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1830.020632][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1830.035831][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1830.058756][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1830.092768][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1830.100233][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1830.134481][T10999] hid-generic 00A0:0008:0003.00F3: unknown main item tag 0x0 [ 1830.154916][T10999] hid-generic 00A0:0008:0003.00F3: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1831.490173][T30169] sctp: [Deprecated]: syz.2.25715 (pid 30169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1831.490173][T30169] Use struct sctp_sack_info instead [ 1832.032416][T30180] syzkaller1: entered promiscuous mode [ 1832.037973][T30180] syzkaller1: entered allmulticast mode [ 1832.331261][ T30] audit: type=1326 audit(1751533136.164:14212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30186 comm="syz.1.25726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1832.412251][ T30] audit: type=1326 audit(1751533136.204:14213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30186 comm="syz.1.25726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1832.514694][ T30] audit: type=1326 audit(1751533136.204:14214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30186 comm="syz.1.25726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1832.657291][ T30] audit: type=1326 audit(1751533136.204:14215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30186 comm="syz.1.25726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1832.715035][T30195] lo: entered allmulticast mode [ 1832.755700][T30194] lo: left allmulticast mode [ 1832.783741][ T30] audit: type=1326 audit(1751533136.204:14216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30186 comm="syz.1.25726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1832.864428][ T30] audit: type=1326 audit(1751533136.204:14217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30186 comm="syz.1.25726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1832.937559][ T30] audit: type=1326 audit(1751533136.204:14218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30186 comm="syz.1.25726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1833.031580][ T30] audit: type=1326 audit(1751533136.204:14219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30186 comm="syz.1.25726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1833.162422][ T30] audit: type=1326 audit(1751533136.204:14220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30186 comm="syz.1.25726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f76539 code=0x7ffc0000 [ 1833.287117][ T30] audit: type=1326 audit(1751533136.204:14221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30186 comm="syz.1.25726" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f76558 code=0x7ffc0000 [ 1833.309409][ C0] vkms_vblank_simulate: vblank timer overrun [ 1834.533058][T30231] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1834.568415][T10999] IPVS: starting estimator thread 0... [ 1834.811464][T30234] IPVS: using max 27 ests per chain, 64800 per kthread [ 1836.154700][T30119] Set syz1 is full, maxelem 65536 reached [ 1836.486613][T30291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25763'. [ 1838.510407][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1838.701558][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1838.717384][ T9] usb 4-1: config 0 has an invalid interface number: 199 but max is 0 [ 1838.741987][ T9] usb 4-1: config 0 has no interface number 0 [ 1838.755883][ T9] usb 4-1: config 0 interface 199 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1838.768523][ T9] usb 4-1: config 0 interface 199 has no altsetting 0 [ 1838.781656][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=fc.71 [ 1838.791100][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.840692][ T9] usb 4-1: config 0 descriptor?? [ 1838.873192][ T9] port100 4-1:0.199: NFC: Could not find bulk-in or bulk-out endpoint [ 1839.095144][ T9] usb 4-1: USB disconnect, device number 103 [ 1839.392101][T19552] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1839.542097][T19552] usb 3-1: Using ep0 maxpacket: 32 [ 1839.549148][T19552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1839.562901][ T8288] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1839.572208][T19552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1839.582918][T19552] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1839.592474][T19552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.604178][T19552] usb 3-1: config 0 descriptor?? [ 1839.721633][ T8288] usb 2-1: Using ep0 maxpacket: 8 [ 1839.731988][ T8288] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1839.741264][ T8288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.749887][ T8288] usb 2-1: Product: syz [ 1839.754412][ T8288] usb 2-1: Manufacturer: syz [ 1839.759073][ T8288] usb 2-1: SerialNumber: syz [ 1839.768079][ T8288] usb 2-1: config 0 descriptor?? [ 1839.778612][ T8288] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1840.063715][T19552] savu 0003:1E7D:2D5A.00F4: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1840.321472][ T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1840.340289][T23865] usb 3-1: USB disconnect, device number 91 [ 1840.483638][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1840.494951][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1840.505525][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1840.514906][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.526941][ T9] usb 4-1: config 0 descriptor?? [ 1840.723529][T30386] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1840.801601][ T8288] gspca_sonixj: reg_w1 err -71 [ 1840.897995][ T8288] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1840.921935][ T8288] usb 2-1: USB disconnect, device number 96 [ 1840.977653][ T9] cp2112 0003:10C4:EA90.00F5: unknown main item tag 0x0 [ 1841.026141][ T9] cp2112 0003:10C4:EA90.00F5: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 1841.184836][ T9] cp2112 0003:10C4:EA90.00F5: Part Number: 0x82 Device Version: 0xFE [ 1841.211174][ T30] kauditd_printk_skb: 355 callbacks suppressed [ 1841.211194][ T30] audit: type=1326 audit(1751533145.044:14577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30393 comm="syz.2.25801" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x0 [ 1841.587256][ T9] cp2112 0003:10C4:EA90.00F5: error setting SMBus config [ 1841.599609][ T9] cp2112 0003:10C4:EA90.00F5: probe with driver cp2112 failed with error -71 [ 1841.618806][ T9] usb 4-1: USB disconnect, device number 104 [ 1842.331504][ T8288] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1842.461571][ T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1842.483573][ T8288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.501589][ T8288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.522274][ T8288] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1842.538442][ T8288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.553626][ T8288] usb 3-1: config 0 descriptor?? [ 1842.611646][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1842.622475][T30424] netlink: 348 bytes leftover after parsing attributes in process `syz.1.25815'. [ 1842.641178][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1842.658363][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.676157][ T9] usb 4-1: config 0 descriptor?? [ 1842.916441][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1842.973030][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1843.013536][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1843.020980][ T9] usb 4-1: media controller created [ 1843.083055][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1843.390614][ T8288] hid-led 0003:27B8:01ED.00F6: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 1843.430366][ T8288] hid-led 0003:27B8:01ED.00F6: ThingM blink(1) initialized [ 1843.544742][ T9] az6027: usb out operation failed. (-71) [ 1843.561869][ T9] stb0899_attach: Driver disabled by Kconfig [ 1843.567937][ T9] az6027: no front-end attached [ 1843.567937][ T9] [ 1843.581740][ T9] az6027: usb out operation failed. (-71) [ 1843.593510][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1843.645734][ T8288] usb 3-1: USB disconnect, device number 92 [ 1843.650537][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input209 [ 1843.719871][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 1843.768417][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1843.838941][ T9] usb 4-1: USB disconnect, device number 105 [ 1843.977800][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1844.141686][T23865] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1844.312246][T23865] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1844.325815][T23865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1844.345820][T23865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1844.371444][T23865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1844.383129][T23865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1844.398776][T23865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1844.416417][T23865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1844.425069][T23865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1844.437165][T23865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1844.461428][T23865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1844.471264][T23865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1844.480807][T23865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1844.511650][T23865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1844.523983][T23865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1844.542092][T23865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1844.570481][T23865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1844.578661][T23865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1844.588021][T23865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1844.604483][T23865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1844.614451][T23865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1844.626742][T23865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1844.639425][T23865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1844.647555][T23865] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1844.656954][T23865] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1844.668046][T23865] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1844.677147][T23865] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1844.681732][ T8288] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1844.686573][T23865] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1844.702583][T23865] usb 2-1: Product: syz [ 1844.706776][T23865] usb 2-1: Manufacturer: syz [ 1844.713589][T23865] usb 2-1: SerialNumber: syz [ 1844.721232][T23865] usb 2-1: config 0 descriptor?? [ 1844.731052][T23865] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1844.861496][ T9] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1844.861687][ T8288] usb 4-1: Using ep0 maxpacket: 32 [ 1844.877690][ T8288] usb 4-1: config 4 has an invalid interface number: 128 but max is 0 [ 1844.887009][ T8288] usb 4-1: config 4 has no interface number 0 [ 1844.893584][ T8288] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1844.905203][ T8288] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1844.921667][ T8288] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1844.942034][ T8288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.974123][ T8288] hub 4-1:4.128: USB hub found [ 1845.051675][ T9] usb 3-1: config 0 has an invalid interface number: 229 but max is 0 [ 1845.059960][ T9] usb 3-1: config 0 has no interface number 0 [ 1845.076733][ T9] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 1845.102109][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.116336][ T9] usb 3-1: config 0 descriptor?? [ 1845.154067][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 1845.186352][ T8288] hub 4-1:4.128: 2 ports detected [ 1845.207402][ T8288] hub 4-1:4.128: Using single TT (err -22) [ 1845.395560][ T8288] hub 4-1:4.128: hub_hub_status failed (err = -71) [ 1845.414965][ T5887] usb 3-1: USB disconnect, device number 93 [ 1845.429940][ T8288] hub 4-1:4.128: config failed, can't get hub status (err -71) [ 1845.493926][ T8288] usb 4-1: USB disconnect, device number 106 [ 1845.623133][T19552] usb 2-1: USB disconnect, device number 97 [ 1845.650714][T19552] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1846.006636][ T30] audit: type=1326 audit(1751533149.844:14578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30486 comm="syz.1.25844" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76539 code=0x7fc00000 [ 1846.731600][ T30] audit: type=1326 audit(1751533150.554:14579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30486 comm="syz.1.25844" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f76539 code=0x7fc00000 [ 1846.918510][ T30] audit: type=1326 audit(1751533150.754:14580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.25851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1847.001420][ T30] audit: type=1326 audit(1751533150.754:14581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.25851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1847.067986][ T30] audit: type=1326 audit(1751533150.754:14582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.25851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 1847.103672][T19552] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1847.111640][ T30] audit: type=1326 audit(1751533150.754:14583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.25851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1847.144311][ T30] audit: type=1326 audit(1751533150.754:14584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.25851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 1847.174713][ T30] audit: type=1326 audit(1751533150.754:14585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.25851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1847.206459][ T30] audit: type=1326 audit(1751533150.754:14586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.25851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 1847.240135][ T30] audit: type=1326 audit(1751533150.754:14587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.25851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x7ffc0000 [ 1847.269857][ T30] audit: type=1326 audit(1751533150.754:14588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30505 comm="syz.4.25851" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fe558 code=0x7ffc0000 [ 1847.324168][T19552] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1847.339655][T19552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.371872][T19552] usb 2-1: config 0 descriptor?? [ 1847.815073][T19552] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1847.830342][T19552] [drm:udl_init] *ERROR* Selecting channel failed [ 1847.863890][T19552] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1847.891252][T19552] [drm] Initialized udl on minor 2 [ 1847.901671][T19552] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1847.929741][T19552] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1847.950435][ T8288] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1847.974871][T19552] usb 2-1: USB disconnect, device number 98 [ 1847.987853][ T8288] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1849.826099][T30576] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.25881'. [ 1849.882013][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1850.041697][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1850.053983][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1850.077924][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1850.096456][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1850.138745][ T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1850.196714][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.243073][ T9] usb 2-1: config 0 descriptor?? [ 1850.709224][T30604] fuse: Bad value for 'fd' [ 1851.018345][ T9] usb 2-1: USB disconnect, device number 99 [ 1851.036010][T30609] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.25896'. [ 1851.360385][T30621] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.25900'. [ 1851.373281][T30618] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.25900'. [ 1851.837652][T30635] netlink: 44 bytes leftover after parsing attributes in process `syz.2.25908'. [ 1852.717147][T30672] syzkaller1: entered promiscuous mode [ 1852.725538][T30672] syzkaller1: entered allmulticast mode [ 1852.870208][ T30] kauditd_printk_skb: 546 callbacks suppressed [ 1852.870234][ T30] audit: type=1326 audit(1751533156.704:15135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30643 comm="syz.2.25912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7fc00000 [ 1853.244317][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.251272][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.252007][T23865] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1853.448291][T23865] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1853.474708][T23865] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1853.512510][T23865] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1853.513313][T30686] tunl0: left promiscuous mode [ 1853.533546][T23865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1853.546067][T23865] usb 3-1: SerialNumber: syz [ 1853.546639][T30686] gre0: left promiscuous mode [ 1853.570308][T30686] ip_vti0: left promiscuous mode [ 1853.578049][T30686] syz_tun: left promiscuous mode [ 1853.583917][T30686] : left promiscuous mode [ 1853.595165][T30686] : left allmulticast mode [ 1853.611676][T30686] team0: left promiscuous mode [ 1853.629361][T30686] wg0: left promiscuous mode [ 1853.644690][T30686] wg2: left promiscuous mode [ 1853.670530][T30686] veth0_to_team: left promiscuous mode [ 1853.690208][T30686] veth0_to_team: left allmulticast mode [ 1853.715510][T30686] vlan0: left promiscuous mode [ 1853.733288][T30686] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1853.754154][T30686] gtp0: left promiscuous mode [ 1853.759062][T30686] gtp0: left allmulticast mode [ 1853.765174][T30686] geneve2: left promiscuous mode [ 1853.772645][T30686] geneve2: left allmulticast mode [ 1853.780459][T30686] geneve4: left promiscuous mode [ 1853.788207][T23865] usb 3-1: 0:2 : does not exist [ 1853.809214][T30686] macsec1: left promiscuous mode [ 1853.834627][T23865] usb 3-1: USB disconnect, device number 94 [ 1853.842298][T30686] macsec1: left allmulticast mode [ 1853.847924][T30686] gretap2: left promiscuous mode [ 1853.899205][T30686] gretap2: left allmulticast mode [ 1853.923352][T18158] udevd[18158]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1853.947499][T30686] vlan2: left promiscuous mode [ 1853.964571][T30686] vlan4: left allmulticast mode [ 1853.970044][T30686] bridge_slave_0: left allmulticast mode [ 1854.010555][T30686] macvlan3: left promiscuous mode [ 1854.030515][T30686] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1854.040918][T30686] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1854.050413][T30686] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1854.059456][T30686] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1854.108107][T30686] bridge0: left promiscuous mode [ 1854.115216][T30686] macvlan5: left promiscuous mode [ 1854.131123][T30686] bond0: left promiscuous mode [ 1854.136794][T30686] macvlan7: left promiscuous mode [ 1854.149170][T30686] gretap0: left allmulticast mode [ 1854.161856][T30686] macsec3: left promiscuous mode [ 1854.169204][T30686] macsec3: left allmulticast mode [ 1854.184137][T30686] ipvlan2: left promiscuous mode [ 1854.387742][T30705] vcan0: entered allmulticast mode [ 1854.403831][T30705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25938'. [ 1854.544912][T30705] vcan0 (unregistering): left allmulticast mode [ 1855.051510][T23865] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1855.207782][T23865] usb 3-1: Using ep0 maxpacket: 32 [ 1855.249879][T23865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.281573][T23865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1855.311422][T23865] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1855.320544][T23865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.346131][T23865] usb 3-1: config 0 descriptor?? [ 1855.803138][T23865] savu 0003:1E7D:2D5A.00F8: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1856.034265][T23865] usb 3-1: USB disconnect, device number 95 [ 1858.063018][T30790] netlink: 'syz.1.25974': attribute type 11 has an invalid length. [ 1858.285047][T30797] bond_slave_0: entered promiscuous mode [ 1858.291979][T30797] bond_slave_1: entered promiscuous mode [ 1858.297737][T30797] bridge_slave_1: entered promiscuous mode [ 1858.351746][T30797] macsec1: entered allmulticast mode [ 1858.357133][T30797] bond0: entered allmulticast mode [ 1858.362577][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1858.389849][T30797] bond_slave_0: entered allmulticast mode [ 1858.402627][T30797] bond_slave_1: entered allmulticast mode [ 1858.411798][T30797] bridge_slave_1: entered allmulticast mode [ 1858.452365][T30797] bond0: left allmulticast mode [ 1858.467967][T30797] bond_slave_0: left allmulticast mode [ 1858.495554][T30797] bond_slave_1: left allmulticast mode [ 1858.505716][T30797] bridge_slave_1: left allmulticast mode [ 1858.516184][T30797] bond_slave_0: left promiscuous mode [ 1858.521744][T30797] bond_slave_1: left promiscuous mode [ 1858.527267][T30797] bridge_slave_1: left promiscuous mode [ 1858.906710][ T30] audit: type=1800 audit(1751533162.744:15136): pid=30816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.25984" name="nullb0" dev="devtmpfs" ino=5152 res=0 errno=0 [ 1861.169955][T30806] tipc: Resetting bearer [ 1861.277975][T30806] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.311452][T30806] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.361381][T30806] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.370320][T30806] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.574069][T30806] macsec0: left promiscuous mode [ 1862.386002][T30889] input: syz1 as /devices/virtual/input/input210 [ 1862.802010][T30906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.26019'. [ 1862.811765][T30906] netlink: 'syz.3.26019': attribute type 7 has an invalid length. [ 1862.819770][T30906] netlink: 'syz.3.26019': attribute type 8 has an invalid length. [ 1862.828783][T30906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26019'. [ 1863.027441][T30908] openvswitch: netlink: IPv4 tun info is not correct [ 1863.531428][ T5916] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 1863.641681][T29829] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1863.683691][ T5916] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1863.697840][ T5916] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1863.713418][ T5916] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1863.723231][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.791761][T29829] usb 2-1: Using ep0 maxpacket: 32 [ 1863.800617][T29829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.811959][T29829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.822181][T29829] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1863.831579][T29829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.842469][T29829] usb 2-1: config 0 descriptor?? [ 1863.853179][T29829] hub 2-1:0.0: USB hub found [ 1863.944829][ T5916] usb 4-1: usb_control_msg returned -32 [ 1863.950808][ T5916] usbtmc 4-1:16.0: can't read capabilities [ 1864.051066][T29829] hub 2-1:0.0: 2 ports detected [ 1864.527884][T30932] syzkaller1: entered promiscuous mode [ 1864.533673][T30932] syzkaller1: entered allmulticast mode [ 1865.087570][T29829] hub 2-1:0.0: hub_hub_status failed (err = -32) [ 1865.097186][T29829] hub 2-1:0.0: config failed, can't get hub status (err -32) [ 1865.114901][T29829] usbhid 2-1:0.0: can't add hid device: -32 [ 1865.121803][T29829] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1865.512003][T19552] usb 2-1: USB disconnect, device number 100 [ 1866.026888][T30950] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1866.102019][T30953] sctp: [Deprecated]: syz.2.26039 (pid 30953) Use of int in max_burst socket option deprecated. [ 1866.102019][T30953] Use struct sctp_assoc_value instead [ 1866.319737][T19552] usb 4-1: USB disconnect, device number 107 [ 1866.335840][ T30] audit: type=1326 audit(1751533170.174:15137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.2.26043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1866.411482][ T30] audit: type=1326 audit(1751533170.214:15138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.2.26043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1866.481504][ T30] audit: type=1326 audit(1751533170.214:15139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.2.26043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1866.550122][ T30] audit: type=1326 audit(1751533170.214:15140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.2.26043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1866.637478][ T30] audit: type=1326 audit(1751533170.214:15141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.2.26043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1866.690759][ T30] audit: type=1326 audit(1751533170.214:15142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.2.26043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=40 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1866.761979][ T30] audit: type=1326 audit(1751533170.214:15143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.2.26043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1866.801424][ T30] audit: type=1326 audit(1751533170.214:15144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30960 comm="syz.2.26043" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1866.994456][T30986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26054'. [ 1867.047973][T30986] ipvlan2: entered promiscuous mode [ 1867.421919][T10999] usb 4-1: new low-speed USB device number 108 using dummy_hcd [ 1867.476682][T31009] binder: 31008:31009 ioctl 4018620d 0 returned -22 [ 1867.573626][T10999] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1867.607940][T10999] usb 4-1: config 0 has no interface number 0 [ 1867.616154][T10999] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1867.640683][T10999] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1867.661768][T10999] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1867.691431][T10999] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1867.713936][T10999] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1867.727538][T31014] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 1867.734710][T10999] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1867.791501][T10999] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1867.800656][T10999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.827689][T10999] usb 4-1: config 0 descriptor?? [ 1867.842339][T30996] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1867.851782][T30996] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1867.873713][T10999] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1868.146415][T19552] usb 4-1: USB disconnect, device number 108 [ 1868.168757][T19552] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1868.237573][T31029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26073'. [ 1868.270864][T31029] ipvlan3: entered promiscuous mode [ 1868.407768][ T30] audit: type=1326 audit(1751533172.244:15145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31033 comm="syz.4.26075" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70fe539 code=0x0 [ 1868.957154][T29829] hid-generic 0000:0000:0000.00F9: unknown main item tag 0x7 [ 1868.982270][T29829] hid-generic 0000:0000:0000.00F9: ignoring exceeding usage max [ 1869.012047][T29829] hid-generic 0000:0000:0000.00F9: unknown main item tag 0x0 [ 1869.019649][T29829] hid-generic 0000:0000:0000.00F9: unknown main item tag 0x6 [ 1869.047633][T29829] hid-generic 0000:0000:0000.00F9: reserved main item tag 0xd [ 1869.071059][T29829] hid-generic 0000:0000:0000.00F9: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1869.286536][T31053] fido_id[31053]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1869.440626][T31062] input: syz0 as /devices/virtual/input/input211 [ 1870.272429][T31095] lo: left promiscuous mode [ 1871.336599][T31112] netlink: 'syz.3.26103': attribute type 5 has an invalid length. [ 1871.802140][ T8288] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1871.847038][T31095] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.871350][T31095] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.880275][T31095] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.894167][T31095] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1871.980841][T31095] hsr1: left promiscuous mode [ 1871.990490][ T8288] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1872.001550][T31095] vlan2: left allmulticast mode [ 1872.006468][T31095] veth1: left allmulticast mode [ 1872.014844][ T8288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.029541][ T8288] usb 4-1: Product: syz [ 1872.035888][ T8288] usb 4-1: Manufacturer: syz [ 1872.040538][ T8288] usb 4-1: SerialNumber: syz [ 1872.049573][ T8288] usb 4-1: config 0 descriptor?? [ 1872.275242][ T8288] hso 4-1:0.0: Failed to find BULK IN ep [ 1872.295446][ T8288] usb-storage 4-1:0.0: USB Mass Storage device detected [ 1872.515294][T23865] usb 4-1: USB disconnect, device number 109 [ 1873.573869][T31157] sctp: [Deprecated]: syz.2.26119 (pid 31157) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1873.573869][T31157] Use struct sctp_sack_info instead [ 1874.768760][T31190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1874.806657][T31190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1875.124532][T31190] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.144636][T31190] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.185643][T31190] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.215486][T31190] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1875.317763][T31190] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1875.327127][T31190] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1875.337177][T31190] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1875.346806][T31190] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1875.691600][T31107] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1875.824052][T31230] netlink: 14528 bytes leftover after parsing attributes in process `syz.1.26151'. [ 1875.866245][T31107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.887672][T31107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.918672][T31107] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1875.948636][T31107] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1875.981689][T31107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1876.008168][T31107] usb 3-1: config 0 descriptor?? [ 1876.438050][T31107] plantronics 0003:047F:FFFF.00FA: reserved main item tag 0xd [ 1876.457187][T31107] plantronics 0003:047F:FFFF.00FA: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1876.735461][T23865] usb 3-1: USB disconnect, device number 96 [ 1877.081922][T31107] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1877.252300][T31107] usb 2-1: Using ep0 maxpacket: 32 [ 1877.266013][T31107] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1877.284501][T31107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1877.312236][T31107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1877.331466][T31107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1877.351967][T31107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1877.382485][T31107] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1877.397017][T31107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1877.411770][T31107] usb 2-1: Product: syz [ 1877.416019][T31107] usb 2-1: Manufacturer: syz [ 1877.420652][T31107] usb 2-1: SerialNumber: syz [ 1877.444730][T31107] usb 2-1: config 0 descriptor?? [ 1877.777312][T31266] netlink: 104 bytes leftover after parsing attributes in process `syz.2.26166'. [ 1877.862650][T31107] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1877.868788][T31107] input input213: Device does not respond to id packet M [ 1877.883789][T31107] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 1877.890398][T31107] input input213: Device does not respond to id packet P [ 1878.107425][T31107] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1878.123953][T31107] input input213: Device does not respond to id packet N [ 1878.136618][T31107] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1878.145442][T31107] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1878.155723][T31107] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1878.165058][T31107] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 1878.173359][T31107] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input213 [ 1878.204200][T31107] usb 2-1: USB disconnect, device number 101 [ 1878.808624][T31284] binder: 31283:31284 ioctl c0306201 80000540 returned -22 [ 1879.680507][T31318] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1879.741752][T23865] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1879.903602][T23865] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1879.920224][T23865] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1879.927791][T23865] usb 3-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 1879.941407][T23865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.973209][T23865] usb 3-1: config 0 descriptor?? [ 1880.302064][ T30] audit: type=1326 audit(1751533184.144:15146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31339 comm="syz.4.26199" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70fe539 code=0x0 [ 1880.461762][ T8288] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 1880.622175][ T8288] usb 4-1: Using ep0 maxpacket: 32 [ 1880.629991][ T8288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1880.630867][T23865] usb 3-1: USB disconnect, device number 97 [ 1880.641610][ T8288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1880.657574][ T8288] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1880.666827][ T8288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.687277][ T8288] usb 4-1: config 0 descriptor?? [ 1880.704182][ T8288] hub 4-1:0.0: USB hub found [ 1880.901401][ T8288] hub 4-1:0.0: 2 ports detected [ 1881.370725][T31354] syzkaller1: entered promiscuous mode [ 1881.377088][T31354] syzkaller1: entered allmulticast mode [ 1881.677816][ T44] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1881.842239][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 1881.859084][ T44] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1881.870377][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1881.883018][ T44] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1881.893960][ T44] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1881.908498][ T44] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1881.918535][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.978045][ T8288] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 1881.984723][ T8288] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 1881.998587][ T8288] usbhid 4-1:0.0: can't add hid device: -32 [ 1882.005405][ T8288] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1882.143694][ T44] usb 2-1: GET_CAPABILITIES returned 0 [ 1882.163648][ T44] usbtmc 2-1:16.0: can't read capabilities [ 1882.349720][ T5916] usb 2-1: USB disconnect, device number 102 [ 1882.362487][ T44] usb 4-1: USB disconnect, device number 110 [ 1882.611439][T23865] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1882.771695][T23865] usb 3-1: Using ep0 maxpacket: 32 [ 1882.792155][T23865] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1882.814764][T23865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.828428][T23865] usb 3-1: Product: syz [ 1882.833364][T23865] usb 3-1: Manufacturer: syz [ 1882.838021][T23865] usb 3-1: SerialNumber: syz [ 1882.859389][T23865] usb 3-1: config 0 descriptor?? [ 1882.893772][T23865] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1883.173653][T31391] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26220'. [ 1883.501811][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1883.661753][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1883.670432][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1883.691197][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1883.719326][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1883.729431][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1883.753205][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1883.779292][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1883.791689][ T9] usb 4-1: SerialNumber: syz [ 1883.813688][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 1883.819709][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 1883.839416][ T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1883.903541][T23865] gspca_stk1135: reg_w 0x7 err -71 [ 1883.909761][T23865] gspca_stk1135: serial bus timeout: status=0x00 [ 1883.926053][T23865] gspca_stk1135: Sensor write failed [ 1883.934169][T23865] gspca_stk1135: serial bus timeout: status=0x00 [ 1883.940559][T23865] gspca_stk1135: Sensor write failed [ 1883.950982][T23865] gspca_stk1135: serial bus timeout: status=0x00 [ 1883.959789][T23865] gspca_stk1135: Sensor read failed [ 1883.965933][T23865] gspca_stk1135: serial bus timeout: status=0x00 [ 1883.972867][T23865] gspca_stk1135: Sensor read failed [ 1883.978121][T23865] gspca_stk1135: Detected sensor type unknown (0x0) [ 1883.985463][T23865] gspca_stk1135: serial bus timeout: status=0x00 [ 1883.992620][T23865] gspca_stk1135: Sensor read failed [ 1883.997892][T23865] gspca_stk1135: serial bus timeout: status=0x00 [ 1884.005398][T23865] gspca_stk1135: Sensor read failed [ 1884.010664][T23865] gspca_stk1135: serial bus timeout: status=0x00 [ 1884.017541][T23865] gspca_stk1135: Sensor write failed [ 1884.031442][T23865] gspca_stk1135: serial bus timeout: status=0x00 [ 1884.041524][T23865] gspca_stk1135: Sensor write failed [ 1884.046984][T23865] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 1884.068636][T23865] usb 3-1: USB disconnect, device number 98 [ 1884.101644][ T44] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1884.269324][T31386] raw-gadget.1 gadget.3: fail, usb_ep_set_wedge returned -11 [ 1884.291235][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1884.305711][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1884.316275][ T44] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1884.329600][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.350230][ T44] usb 2-1: config 0 descriptor?? [ 1884.392941][ T8288] usb 4-1: USB disconnect, device number 111 [ 1884.740431][T31423] netlink: 44 bytes leftover after parsing attributes in process `syz.2.26234'. [ 1884.749885][T31423] netlink: 43 bytes leftover after parsing attributes in process `syz.2.26234'. [ 1884.763534][T31423] netlink: 'syz.2.26234': attribute type 6 has an invalid length. [ 1884.772601][T31423] netlink: 'syz.2.26234': attribute type 5 has an invalid length. [ 1884.783420][T31423] netlink: 43 bytes leftover after parsing attributes in process `syz.2.26234'. [ 1884.800803][ T44] savu 0003:1E7D:2D5A.00FC: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1885.063684][T23865] usb 2-1: USB disconnect, device number 103 [ 1885.281454][ T44] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1885.436422][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.457326][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1885.469469][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1885.490223][ T44] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1885.501435][T23865] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1885.517232][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.530096][ T44] usb 4-1: config 0 descriptor?? [ 1885.665076][T23865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.687309][T23865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1885.711874][T23865] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1885.721001][T23865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.730120][T31438] geneve0: entered promiscuous mode [ 1885.752233][T23865] usb 3-1: config 0 descriptor?? [ 1885.911890][ T8288] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1886.012432][ T44] plantronics 0003:047F:FFFF.00FD: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1886.078348][ T8288] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1886.108003][ T8288] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1886.159476][ T8288] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1886.179810][ T8288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.189747][ T8288] usb 2-1: Product: syz [ 1886.196977][T23865] hid-led 0003:0FC5:B080.00FE: unknown main item tag 0x0 [ 1886.217034][ T8288] usb 2-1: Manufacturer: syz [ 1886.234020][ T8288] usb 2-1: SerialNumber: syz [ 1886.250871][ T8288] usb 2-1: config 0 descriptor?? [ 1886.259738][T31442] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1886.267941][T31442] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1886.504193][T31442] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1886.520914][T31442] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1886.581992][T23865] hid-led 0003:0FC5:B080.00FE: hidraw1: USB HID v0.00 Device [HID 0fc5:b080] on usb-dummy_hcd.2-1/input0 [ 1886.613831][T23865] hid-led 0003:0FC5:B080.00FE: Delcom Visual Signal Indicator G2 initialized [ 1886.843727][ T44] usb 3-1: USB disconnect, device number 99 [ 1887.372488][ T8288] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 1887.406722][ T8288] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 1887.430002][ T8288] usb 2-1: USB disconnect, device number 104 [ 1887.442915][ T8288] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 1887.978338][ T44] usb 4-1: USB disconnect, device number 112 [ 1890.171696][ T44] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1890.344961][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1890.365077][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1890.398280][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1890.429334][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1890.455193][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.479286][ T44] usb 2-1: config 0 descriptor?? [ 1890.940128][ T44] plantronics 0003:047F:FFFF.00FF: reserved main item tag 0xe [ 1890.966356][ T44] plantronics 0003:047F:FFFF.00FF: unknown main item tag 0x0 [ 1890.998644][ T44] plantronics 0003:047F:FFFF.00FF: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1891.258519][ T44] usb 2-1: USB disconnect, device number 105 [ 1892.452487][T31572] geneve0: entered promiscuous mode [ 1893.181966][ T44] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1893.343321][ T44] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1893.397011][ T44] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1893.431326][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1893.459795][ T44] usb 2-1: SerialNumber: syz [ 1893.991629][T23865] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1894.132682][ T44] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1894.155009][T23865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1894.178070][T23865] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1894.201204][T23865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.248693][T23865] usb 4-1: config 0 descriptor?? [ 1894.259014][T23865] pwc: Askey VC010 type 2 USB webcam detected. [ 1894.533903][ T5916] usb 2-1: USB disconnect, device number 106 [ 1894.572665][ T5916] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 1894.676276][T23865] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1894.700279][T23865] pwc: recv_control_msg error -32 req 02 val 2700 [ 1894.728647][T23865] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1894.809273][T31640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26321'. [ 1894.951590][T23865] pwc: recv_control_msg error -71 req 04 val 1300 [ 1894.978672][T23865] pwc: recv_control_msg error -71 req 04 val 1400 [ 1894.998700][T23865] pwc: recv_control_msg error -71 req 02 val 2000 [ 1895.022092][T23865] pwc: recv_control_msg error -71 req 02 val 2100 [ 1895.038903][T23865] pwc: recv_control_msg error -71 req 04 val 1500 [ 1895.061893][T23865] pwc: recv_control_msg error -71 req 02 val 2500 [ 1895.076790][T23865] pwc: recv_control_msg error -71 req 02 val 2400 [ 1895.104692][T23865] pwc: recv_control_msg error -71 req 02 val 2600 [ 1895.124621][T23865] pwc: recv_control_msg error -71 req 02 val 2900 [ 1895.140781][T23865] pwc: recv_control_msg error -71 req 02 val 2800 [ 1895.162963][T23865] pwc: recv_control_msg error -71 req 04 val 1100 [ 1895.176545][T23865] pwc: recv_control_msg error -71 req 04 val 1200 [ 1895.196538][T23865] pwc: Registered as video103. [ 1895.232925][T23865] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input214 [ 1895.292497][T23865] usb 4-1: USB disconnect, device number 113 [ 1895.794388][T31672] netlink: 'syz.0.26331': attribute type 11 has an invalid length. [ 1896.690349][T31704] netlink: 'syz.1.26342': attribute type 16 has an invalid length. [ 1896.711535][T31704] netlink: 'syz.1.26342': attribute type 3 has an invalid length. [ 1896.732800][T31704] netlink: 'syz.1.26342': attribute type 4 has an invalid length. [ 1896.740688][T31704] netlink: 64026 bytes leftover after parsing attributes in process `syz.1.26342'. [ 1897.131789][ T44] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1897.280342][ T30] audit: type=1326 audit(1751533201.114:15147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31726 comm="syz.3.26351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 1897.302656][ C1] vkms_vblank_simulate: vblank timer overrun [ 1897.321661][ T30] audit: type=1326 audit(1751533201.154:15148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31726 comm="syz.3.26351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 1897.345985][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 1897.380581][ T44] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1897.391990][ T44] usb 2-1: config 0 has no interface number 0 [ 1897.399815][ T30] audit: type=1326 audit(1751533201.154:15149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31726 comm="syz.3.26351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1897.422146][ C1] vkms_vblank_simulate: vblank timer overrun [ 1897.430906][ T44] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1897.440435][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.460035][ T44] usb 2-1: Product: syz [ 1897.474669][ T30] audit: type=1326 audit(1751533201.154:15150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31726 comm="syz.3.26351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 1897.508175][ T44] usb 2-1: Manufacturer: syz [ 1897.517267][ T44] usb 2-1: SerialNumber: syz [ 1897.543921][ T44] usb 2-1: config 0 descriptor?? [ 1897.569893][ T44] smsc95xx v2.0.0 [ 1897.581909][ T30] audit: type=1326 audit(1751533201.154:15151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31726 comm="syz.3.26351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1897.604411][ C1] vkms_vblank_simulate: vblank timer overrun [ 1897.618500][ T30] audit: type=1326 audit(1751533201.154:15152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31726 comm="syz.3.26351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1897.651500][ T30] audit: type=1326 audit(1751533201.154:15153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31726 comm="syz.3.26351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1897.720374][T31736] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1897.824429][ T30] audit: type=1326 audit(1751533201.154:15154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31726 comm="syz.3.26351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 1897.888168][T31734] syz.2.26353 (31734): drop_caches: 2 [ 1897.932014][ T30] audit: type=1326 audit(1751533201.154:15155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31726 comm="syz.3.26351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000 [ 1897.954311][ C1] vkms_vblank_simulate: vblank timer overrun [ 1898.013036][ T44] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1898.024560][ T30] audit: type=1326 audit(1751533201.154:15156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31726 comm="syz.3.26351" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70be558 code=0x7ffc0000 [ 1898.061462][ T44] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1898.532409][ T8288] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1898.701931][ T8288] usb 3-1: Using ep0 maxpacket: 16 [ 1898.713881][ T8288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1898.730841][ T44] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1898.760941][ T44] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1898.770097][ T8288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1898.783479][ T8288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1898.798593][ T44] usb 2-1: USB disconnect, device number 107 [ 1898.826912][ T8288] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1898.843939][ T8288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.894974][ T8288] usb 3-1: config 0 descriptor?? [ 1899.084338][T31772] syz.0.26370 (31772): drop_caches: 2 [ 1899.281612][ T5916] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1899.337538][ T8288] HID 045e:07da: Invalid code 65791 type 1 [ 1899.360103][ T8288] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0100/input/input215 [ 1899.424556][ T8288] microsoft 0003:045E:07DA.0100: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1899.443730][ T5916] usb 4-1: Using ep0 maxpacket: 8 [ 1899.491456][ T5916] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1899.510305][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.538981][ T5916] usb 4-1: Product: syz [ 1899.548897][ T5916] usb 4-1: Manufacturer: syz [ 1899.560841][ T5916] usb 4-1: SerialNumber: syz [ 1899.579376][ T44] usb 3-1: USB disconnect, device number 100 [ 1899.586873][ T5916] usb 4-1: config 0 descriptor?? [ 1899.628280][ T5916] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1899.735481][ T8288] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1899.746233][T31783] fido_id[31783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1899.904042][ T8288] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1899.915759][ T8288] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1899.926238][ T8288] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1899.943643][ T8288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.956491][T31782] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1899.980525][ T8288] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1900.222735][ T8288] usb 2-1: USB disconnect, device number 108 [ 1900.853299][ T5916] gspca_sonixj: reg_w1 err -71 [ 1900.858218][ T5916] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1900.900412][ T5916] usb 4-1: USB disconnect, device number 114 [ 1901.346278][T31825] pim6reg1: entered promiscuous mode [ 1901.367116][T31825] pim6reg1: entered allmulticast mode [ 1902.003566][ T8288] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1902.175042][ T8288] usb 4-1: Using ep0 maxpacket: 32 [ 1902.196893][ T8288] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1902.217245][ T8288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1902.250311][ T8288] usb 4-1: Product: syz [ 1902.260449][ T8288] usb 4-1: Manufacturer: syz [ 1902.278241][ T8288] usb 4-1: SerialNumber: syz [ 1902.292797][ T8288] usb 4-1: config 0 descriptor?? [ 1902.312752][ T8288] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1902.665577][T31864] loop6: detected capacity change from 0 to 7 [ 1902.674493][T31864] Dev loop6: unable to read RDB block 7 [ 1902.680150][T31864] loop6: AHDI p1 p2 [ 1902.685497][T31864] loop6: partition table partially beyond EOD, truncated [ 1902.694439][T31864] loop6: p1 start 926365495 is beyond EOD, truncated [ 1902.808925][T31869] netlink: 'syz.4.26410': attribute type 6 has an invalid length. [ 1902.818089][T23865] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1902.971533][T23865] usb 3-1: Using ep0 maxpacket: 8 [ 1902.978561][T23865] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1902.992684][T23865] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1903.009352][T23865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1903.019527][T23865] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1903.029927][T23865] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1903.043250][T23865] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1903.052978][T23865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.281400][T23865] usb 3-1: GET_CAPABILITIES returned 0 [ 1903.287098][T23865] usbtmc 3-1:16.0: can't read capabilities [ 1903.524649][ T8288] gspca_topro: reg_w err -71 [ 1903.551513][ T8288] gspca_topro: Sensor soi763a [ 1903.580290][ T8288] usb 4-1: USB disconnect, device number 115 [ 1903.604637][T23865] usb 3-1: USB disconnect, device number 101 [ 1903.613275][T31861] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 1903.700078][T31880] syzkaller1: entered promiscuous mode [ 1903.710353][T31880] syzkaller1: entered allmulticast mode [ 1903.957619][T31888] kvm: kvm [31886]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1020000000800 [ 1905.895993][T31948] input: syz0 as /devices/virtual/input/input216 [ 1906.463930][T31961] macvtap0: entered allmulticast mode [ 1906.469373][T31961] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 1906.512249][T31961] batman_adv: batadv0: Adding interface: macvtap0 [ 1906.518921][T31961] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1906.612572][T31961] batman_adv: batadv0: Interface activated: macvtap0 [ 1906.682356][ T5917] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1906.843916][ T5917] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1906.871206][ T5917] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1906.905285][ T5917] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1906.928896][ T30] kauditd_printk_skb: 83 callbacks suppressed [ 1906.928915][ T30] audit: type=1800 audit(1751533210.764:15240): pid=31970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.26450" name="nullb0" dev="devtmpfs" ino=5152 res=0 errno=0 [ 1906.967825][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1906.986755][T31960] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1907.026373][ T5917] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1907.272581][T23865] usb 4-1: USB disconnect, device number 116 [ 1909.591687][ T5917] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1909.751557][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 1909.762786][ T5917] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1909.783725][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.804759][ T5917] usb 3-1: config 0 descriptor?? [ 1909.829064][ T5917] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1910.331916][ T30] audit: type=1326 audit(1751533214.174:15241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.3.26468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7fc00000 [ 1910.372195][ T30] audit: type=1326 audit(1751533214.174:15242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.3.26468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be539 code=0x7fc00000 [ 1910.402329][ T30] audit: type=1326 audit(1751533214.174:15243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.3.26468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7fc00000 [ 1910.445790][ T30] audit: type=1326 audit(1751533214.174:15244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.3.26468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7fc00000 [ 1910.472602][ T30] audit: type=1326 audit(1751533214.174:15245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.3.26468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7fc00000 [ 1910.533544][ T30] audit: type=1326 audit(1751533214.174:15246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.3.26468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7fc00000 [ 1910.605271][ T30] audit: type=1326 audit(1751533214.174:15247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.3.26468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7fc00000 [ 1910.671821][ T30] audit: type=1326 audit(1751533214.174:15248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.3.26468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7fc00000 [ 1910.719494][ T30] audit: type=1326 audit(1751533214.174:15249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32012 comm="syz.3.26468" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7fc00000 [ 1910.848488][T32025] usb usb8: usbfs: process 32025 (syz.4.26472) did not claim interface 0 before use [ 1911.050320][ T5917] gspca_vc032x: reg_w err -71 [ 1911.061348][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.067174][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.096258][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.117530][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.123455][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.128788][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.144195][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.157878][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.171374][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.176727][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.352586][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.358045][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.502191][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.513604][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.518961][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.587420][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.595232][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.630484][ T5917] gspca_vc032x: I2c Bus Busy Wait 00 [ 1911.655533][ T5917] gspca_vc032x: Unknown sensor... [ 1911.660725][ T5917] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1911.708237][ T5917] usb 3-1: USB disconnect, device number 102 [ 1911.851448][ T8288] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1912.011416][ T8288] usb 4-1: Using ep0 maxpacket: 32 [ 1912.025914][ T8288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.095516][ T8288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1912.112062][ T8288] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1912.121651][ T8288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.152589][ T8288] usb 4-1: config 0 descriptor?? [ 1912.191715][ T5917] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1912.379783][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 1912.389201][ T5917] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1912.410783][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.436209][ T5917] usb 3-1: config 0 descriptor?? [ 1912.585551][ T8288] waterforce 0003:1044:7A4D.0101: unknown main item tag 0x0 [ 1912.606934][ T8288] waterforce 0003:1044:7A4D.0101: unknown main item tag 0x0 [ 1912.624377][ T8288] waterforce 0003:1044:7A4D.0101: unknown main item tag 0x0 [ 1912.647756][ T8288] waterforce 0003:1044:7A4D.0101: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 1912.735812][ T44] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1912.746099][ T8288] waterforce 0003:1044:7A4D.0101: fw version request failed with -38 [ 1912.793254][ T8288] usb 4-1: USB disconnect, device number 117 [ 1912.892617][T32074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26492'. [ 1912.923856][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.946924][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1912.962232][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1912.980577][ T44] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1912.990996][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.003725][ T44] usb 2-1: config 0 descriptor?? [ 1913.080686][T32078] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.26495'. [ 1913.472433][ T44] plantronics 0003:047F:FFFF.0102: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1913.681676][T23865] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1913.718476][ T5917] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1913.729370][ T5917] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1913.740687][ T5917] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1913.757565][ T5917] usb 3-1: USB disconnect, device number 103 [ 1913.843174][T23865] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1913.853818][T23865] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1913.867151][T23865] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1913.876405][T23865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.898822][T23865] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1913.948232][T23865] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1914.103989][ T5917] usb 4-1: USB disconnect, device number 118 [ 1914.259660][ T44] usb 2-1: USB disconnect, device number 109 [ 1914.430026][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1914.430058][ T30] audit: type=1326 audit(1751533218.264:15308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32103 comm="syz.2.26506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1914.460582][ T30] audit: type=1326 audit(1751533218.264:15309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32103 comm="syz.2.26506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1914.510533][ T30] audit: type=1326 audit(1751533218.294:15310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32103 comm="syz.2.26506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1914.534028][ T30] audit: type=1326 audit(1751533218.294:15311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32103 comm="syz.2.26506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1914.566146][ T30] audit: type=1326 audit(1751533218.294:15312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32103 comm="syz.2.26506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1914.592547][ T30] audit: type=1326 audit(1751533218.294:15313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32103 comm="syz.2.26506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1914.629167][ T30] audit: type=1326 audit(1751533218.294:15314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32103 comm="syz.2.26506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1914.652543][ T30] audit: type=1326 audit(1751533218.294:15315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32103 comm="syz.2.26506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1914.685842][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.692411][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.705624][ T30] audit: type=1326 audit(1751533218.304:15316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32103 comm="syz.2.26506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=369 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1914.738206][ T30] audit: type=1326 audit(1751533218.304:15317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32103 comm="syz.2.26506" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 1915.491642][T23865] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1915.657248][T23865] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1915.675827][T23865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.688888][T23865] usb 2-1: Product: syz [ 1915.695905][T23865] usb 2-1: Manufacturer: syz [ 1915.700735][T23865] usb 2-1: SerialNumber: syz [ 1915.718752][T23865] usb 2-1: config 0 descriptor?? [ 1916.939704][T23865] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1916.967992][T23865] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1916.980463][T23865] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1917.008764][T23865] usb 2-1: USB disconnect, device number 110 [ 1917.331441][ T5916] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1917.481545][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 1917.498327][ T5916] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1917.531334][ T5916] usb 3-1: config 0 has no interface number 0 [ 1917.537511][ T5916] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1917.554219][ T5916] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1917.565376][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.574647][ T5916] usb 3-1: Product: syz [ 1917.580581][ T5916] usb 3-1: Manufacturer: syz [ 1917.585439][ T5916] usb 3-1: SerialNumber: syz [ 1917.596662][ T5916] usb 3-1: config 0 descriptor?? [ 1917.604973][ T5916] smsc75xx v1.0.0 [ 1917.731536][ T44] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1917.881516][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 1917.891014][ T44] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1917.901714][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1917.909771][ T44] usb 4-1: Product: syz [ 1917.922071][ T44] usb 4-1: Manufacturer: syz [ 1917.926733][ T44] usb 4-1: SerialNumber: syz [ 1917.941460][ T44] usb 4-1: config 0 descriptor?? [ 1917.950371][ T44] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1918.041562][ T5917] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1918.191705][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 1918.199667][ T5917] usb 2-1: config 0 has no interfaces? [ 1918.209682][ T5917] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 1918.218571][ T5916] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1918.219531][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.234044][ T5916] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1918.249507][ T5917] usb 2-1: Product: syz [ 1918.253888][ T5917] usb 2-1: Manufacturer: syz [ 1918.258541][ T5917] usb 2-1: SerialNumber: syz [ 1918.272128][ T5917] usb 2-1: config 0 descriptor?? [ 1918.449971][ T5916] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1918.466705][ T5916] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1918.483388][ T5916] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1918.497720][ T5917] usb 2-1: USB disconnect, device number 111 [ 1918.499297][ T5916] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1918.524522][ T5916] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -32 [ 1918.548400][ T5916] usb 3-1: USB disconnect, device number 104 [ 1919.160855][ T44] gspca_stk1135: reg_w 0xd err -71 [ 1919.178356][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 1919.193970][ T44] gspca_stk1135: Sensor write failed [ 1919.209744][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 1919.219900][ T44] gspca_stk1135: Sensor write failed [ 1919.244122][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 1919.260760][ T44] gspca_stk1135: Sensor read failed [ 1919.270172][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 1919.277538][ T44] gspca_stk1135: Sensor read failed [ 1919.283345][ T44] gspca_stk1135: Detected sensor type unknown (0x0) [ 1919.290191][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 1919.319659][ T44] gspca_stk1135: Sensor read failed [ 1919.336141][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 1919.355746][ T44] gspca_stk1135: Sensor read failed [ 1919.372170][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 1919.378578][ T44] gspca_stk1135: Sensor write failed [ 1919.405324][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 1919.425052][ T44] gspca_stk1135: Sensor write failed [ 1919.430474][ T44] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 1919.453816][ T44] usb 4-1: USB disconnect, device number 119 [ 1919.841557][ T8288] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1920.001899][ T8288] usb 3-1: Using ep0 maxpacket: 16 [ 1920.015781][ T8288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1920.051594][ T8288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1920.073270][ T8288] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1920.101807][ T8288] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1920.114952][ T8288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.127062][ T8288] usb 3-1: config 0 descriptor?? [ 1920.563200][ T8288] shield 0003:0955:7214.0103: unknown main item tag 0x0 [ 1920.591584][ T8288] shield 0003:0955:7214.0103: unknown main item tag 0x0 [ 1920.602091][ T8288] shield 0003:0955:7214.0103: unknown main item tag 0x0 [ 1920.621026][ T8288] shield 0003:0955:7214.0103: unknown main item tag 0x0 [ 1920.647614][ T8288] shield 0003:0955:7214.0103: unknown main item tag 0x0 [ 1920.689981][ T8288] input: HID 0955:7214 Haptics as /devices/virtual/input/input217 [ 1920.717801][T32249] netlink: 'syz.4.26566': attribute type 1 has an invalid length. [ 1920.784987][ T8288] shield 0003:0955:7214.0103: Registered Thunderstrike controller [ 1920.796333][ T8288] shield 0003:0955:7214.0103: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1920.809422][T32211] random: crng reseeded on system resumption [ 1920.926545][T32249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1920.962898][ T44] shield 0003:0955:7214.0103: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1920.974910][ T8288] usb 3-1: USB disconnect, device number 105 [ 1920.996189][T32251] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1921.002849][T32257] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.26568'. [ 1921.029855][ T44] shield 0003:0955:7214.0103: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1921.130101][ T44] shield 0003:0955:7214.0103: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1921.150254][ T44] shield 0003:0955:7214.0103: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1921.275542][T32263] vivid-002: disconnect [ 1921.352099][ T5916] vivid-002: reconnect [ 1922.545407][T32304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26587'. [ 1922.741525][ T44] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1922.903787][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 1922.910596][ T44] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1922.932847][ T44] usb 2-1: config 179 has no interface number 0 [ 1922.939196][ T44] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1922.959191][ T44] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1923.009259][ T44] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1923.036823][ T44] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1923.051801][ T5916] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1923.096468][ T44] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1923.141039][ T44] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1923.156800][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.177124][T32301] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1923.222897][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 1923.233251][ T5916] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf [ 1923.255793][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1923.265249][ T5916] usb 3-1: Product: syz [ 1923.272511][ T5916] usb 3-1: Manufacturer: syz [ 1923.281728][ T5916] usb 3-1: SerialNumber: syz [ 1923.308385][ T5916] usb 3-1: config 0 descriptor?? [ 1923.333696][ T5916] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1923.500098][ T44] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input218 [ 1923.536314][ T5916] usb 3-1: USB disconnect, device number 106 [ 1923.705778][T32301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.735208][T32301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1923.996117][ T44] usb 2-1: USB disconnect, device number 112 [ 1924.002349][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1924.002402][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1924.068199][T32338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.26603'. [ 1924.096275][T32338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26603'. [ 1926.301701][ T5916] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1926.473514][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1926.500006][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1926.517956][ T5916] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1926.534528][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1926.548305][ T5916] usb 4-1: config 0 descriptor?? [ 1926.970574][ T5916] keytouch 0003:0926:3333.0104: fixing up Keytouch IEC report descriptor [ 1926.997213][ T5916] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0104/input/input219 [ 1927.127705][ T5916] keytouch 0003:0926:3333.0104: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 1927.151457][T23865] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1927.192855][ T8288] usb 4-1: USB disconnect, device number 120 [ 1927.196688][ T9] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1927.280336][T32444] fido_id[32444]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1927.321415][T23865] usb 3-1: Using ep0 maxpacket: 32 [ 1927.342698][T23865] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1927.373181][T23865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1927.401899][T23865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1927.418259][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1927.441372][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1927.451387][T23865] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1927.460465][T23865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.471828][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1927.480934][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.506520][T23865] usb 3-1: config 0 descriptor?? [ 1927.514114][T32437] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1927.516557][T32439] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1927.524661][T23865] hub 3-1:0.0: USB hub found [ 1927.558113][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1927.735103][T23865] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1927.821439][ T9] usb 2-1: USB disconnect, device number 113 [ 1927.975769][T23865] hid-generic 0003:046D:C314.0105: collection stack underflow [ 1928.001452][T23865] hid-generic 0003:046D:C314.0105: item 0 0 0 12 parsing failed [ 1928.010062][T23865] hid-generic 0003:046D:C314.0105: probe with driver hid-generic failed with error -22 [ 1928.301604][T23865] usb 3-1: USB disconnect, device number 107 [ 1930.121998][T23865] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1930.268213][T32502] loop3: detected capacity change from 0 to 1 [ 1930.285059][T18158] Dev loop3: unable to read RDB block 1 [ 1930.291660][T23865] usb 4-1: Using ep0 maxpacket: 16 [ 1930.303943][T23865] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 1930.314250][T18158] loop3: unable to read partition table [ 1930.326786][T23865] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 1930.336766][T18158] loop3: partition table beyond EOD, truncated [ 1930.354438][T23865] usb 4-1: config 166 has no interface number 0 [ 1930.375101][T23865] usb 4-1: config 166 has no interface number 1 [ 1930.385155][T32502] Dev loop3: unable to read RDB block 1 [ 1930.390790][T32502] loop3: unable to read partition table [ 1930.401385][T23865] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1930.417856][T32502] loop3: partition table beyond EOD, truncated [ 1930.421468][T23865] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1930.441990][T32502] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1930.455708][T23865] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1930.486020][T23865] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1930.548031][T23865] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1930.595650][T23865] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1930.641396][T23865] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1930.664694][T23865] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1930.701328][T23865] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1930.748591][T23865] usb 4-1: config 166 interface 177 has no altsetting 0 [ 1930.778980][T23865] usb 4-1: config 166 interface 34 has no altsetting 0 [ 1930.801648][T23865] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1930.829243][T23865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.839369][T23865] usb 4-1: Product: syz [ 1930.859615][T23865] usb 4-1: Manufacturer: syz [ 1930.872145][T23865] usb 4-1: SerialNumber: syz [ 1931.118100][T23865] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 1931.204551][T23865] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 1931.302235][T23865] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 1931.325342][T23865] usb 4-1: Found UVC 0.00 device syz (0bda:0138) [ 1931.333842][T23865] usb 4-1: No valid video chain found. [ 1931.360100][T23865] usb 4-1: USB disconnect, device number 121 [ 1932.473121][T23865] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1932.644232][T23865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1932.687835][T23865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1932.715051][T23865] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1932.771059][T23865] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1932.805612][T23865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.835494][T23865] usb 3-1: config 0 descriptor?? [ 1932.884848][T32550] netlink: 36 bytes leftover after parsing attributes in process `syz.3.26692'. [ 1933.250793][T32559] netlink: 148 bytes leftover after parsing attributes in process `syz.3.26697'. [ 1933.261150][T32559] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1933.278294][T23865] plantronics 0003:047F:FFFF.0106: unknown main item tag 0x6 [ 1933.309938][T23865] plantronics 0003:047F:FFFF.0106: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1933.565430][ T9] usb 3-1: USB disconnect, device number 108 [ 1933.751678][T23865] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1933.918930][T23865] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1933.940596][T23865] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1933.955718][T23865] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1933.973767][T23865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1934.021846][T32567] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1934.040959][T23865] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1934.290511][T23865] usb 4-1: USB disconnect, device number 122 [ 1934.517818][T32591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26711'. [ 1934.552381][T32591] netlink: 104 bytes leftover after parsing attributes in process `syz.4.26711'. [ 1934.573911][T32591] netlink: 104 bytes leftover after parsing attributes in process `syz.4.26711'. [ 1934.802989][T32600] vivid-002: ================= START STATUS ================= [ 1934.835220][T32600] vivid-002: Radio HW Seek Mode: Bounded [ 1934.860286][T32600] vivid-002: Radio Programmable HW Seek: false [ 1934.902455][T32600] vivid-002: RDS Rx I/O Mode: Block I/O [ 1934.926090][T32600] vivid-002: Generate RBDS Instead of RDS: false [ 1934.961609][T32600] vivid-002: RDS Reception: true [ 1934.966672][T32600] vivid-002: RDS Program Type: 0 inactive [ 1934.981511][T32600] vivid-002: RDS PS Name: inactive [ 1934.989535][T32600] vivid-002: RDS Radio Text: inactive [ 1935.022824][T32600] vivid-002: RDS Traffic Announcement: false inactive [ 1935.050589][T32600] vivid-002: RDS Traffic Program: false inactive [ 1935.073281][T32600] vivid-002: RDS Music: false inactive [ 1935.097195][T32600] vivid-002: ================== END STATUS ================== [ 1935.772020][ T44] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1935.931875][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 1935.945811][ T44] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1935.956317][ T44] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1935.971049][ T44] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1935.984110][ T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1935.994816][ T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1936.015891][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1936.037132][ T44] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1936.047069][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.059587][ T44] usb 4-1: config 0 descriptor?? [ 1936.292056][ T44] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 123 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1936.398492][T32650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26736'. [ 1936.450560][T32650] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1936.460551][T32650] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1936.469639][T32650] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1936.478509][T32650] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1936.498149][T32650] vxlan3: entered promiscuous mode [ 1936.520414][ T44] usb 4-1: USB disconnect, device number 123 [ 1936.549018][ T44] usblp0: removed [ 1937.698606][T32676] netlink: 'syz.3.26749': attribute type 1 has an invalid length. [ 1937.721861][T32676] netlink: 'syz.3.26749': attribute type 3 has an invalid length. [ 1937.761751][T32676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26749'. [ 1938.181801][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1938.386317][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1938.411407][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1938.441424][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1938.472594][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1938.495141][ T9] usb 3-1: config 0 descriptor?? [ 1938.928472][ T9] keytouch 0003:0926:3333.0107: fixing up Keytouch IEC report descriptor [ 1938.973492][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0107/input/input220 [ 1939.054995][T32705] netlink: 'syz.3.26760': attribute type 1 has an invalid length. [ 1939.075804][T32705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.26760'. [ 1939.132353][ T9] keytouch 0003:0926:3333.0107: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 1939.185636][ T9] usb 3-1: USB disconnect, device number 109 [ 1939.280219][T32709] fido_id[32709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1940.388671][T32733] binder: 32732:32733 ioctl c0306201 800001c0 returned -22 [ 1940.941605][ T8288] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1941.006217][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1941.006236][ T30] audit: type=1326 audit(1751533244.844:15340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32746 comm="syz.0.26776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1941.043106][ T30] audit: type=1326 audit(1751533244.844:15341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32746 comm="syz.0.26776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1941.091604][ T30] audit: type=1326 audit(1751533244.914:15342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32746 comm="syz.0.26776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1941.127803][ T30] audit: type=1326 audit(1751533244.914:15343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32746 comm="syz.0.26776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1941.154193][ T8288] usb 4-1: Using ep0 maxpacket: 16 [ 1941.201127][ T8288] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1941.229870][ T8288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1941.250626][ T30] audit: type=1326 audit(1751533244.914:15344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32746 comm="syz.0.26776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1941.302981][ T8288] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1941.309142][T11690] tipc: Subscription rejected, illegal request [ 1941.312342][ T8288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1941.346049][ T30] audit: type=1326 audit(1751533244.914:15345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32746 comm="syz.0.26776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1941.391769][ T8288] usb 4-1: Product: syz [ 1941.396014][ T8288] usb 4-1: Manufacturer: syz [ 1941.400642][ T8288] usb 4-1: SerialNumber: syz [ 1941.418249][ T30] audit: type=1326 audit(1751533244.914:15346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32746 comm="syz.0.26776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1941.434954][ T8288] usb 4-1: config 0 descriptor?? [ 1941.476186][ T8288] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1941.481708][ T30] audit: type=1326 audit(1751533244.914:15347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32746 comm="syz.0.26776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1941.503114][ T8288] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1941.574126][ T30] audit: type=1326 audit(1751533244.914:15348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32746 comm="syz.0.26776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1941.641106][ T30] audit: type=1326 audit(1751533244.914:15349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32746 comm="syz.0.26776" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf7fd1539 code=0x7ffc0000 [ 1942.072432][ T8288] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1942.079383][ T8288] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1942.307094][ T8288] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1942.327310][ T8288] em28xx 4-1:0.0: No AC97 audio processor [ 1942.408202][ T8288] usb 4-1: USB disconnect, device number 124 [ 1942.432577][ T8288] em28xx 4-1:0.0: Disconnecting em28xx [ 1942.458972][ T8288] em28xx 4-1:0.0: Freeing device [ 1943.591755][ T44] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1943.751572][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 1943.763086][ T44] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 1943.771876][ T44] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 1943.780308][ T44] usb 3-1: config 166 has no interface number 0 [ 1943.791095][ T44] usb 3-1: config 166 has no interface number 1 [ 1943.813094][ T44] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1943.831872][ T44] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1943.874919][ T44] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1943.909170][ T44] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1943.922051][ T44] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1943.933888][ T44] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1943.945083][ T44] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1943.957522][ T44] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1943.970845][ T44] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1943.991995][ T44] usb 3-1: config 166 interface 177 has no altsetting 0 [ 1943.999254][ T44] usb 3-1: config 166 interface 34 has no altsetting 0 [ 1944.009435][ T44] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1944.019556][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.028035][ T44] usb 3-1: Product: syz [ 1944.032889][ T44] usb 3-1: Manufacturer: syz [ 1944.037626][ T44] usb 3-1: SerialNumber: syz [ 1944.159416][ T349] ALSA: mixer_oss: invalid OSS volume '' [ 1944.280112][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1944.289274][ T44] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 1944.429644][ T44] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 1944.514352][ T44] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 1944.544231][ T44] usb 3-1: Found UVC 0.00 device syz (0bda:0138) [ 1944.550742][ T44] usb 3-1: No valid video chain found. [ 1944.577032][ T44] usb 3-1: USB disconnect, device number 110 [ 1945.406026][ T9] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1945.434397][T23865] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1945.592032][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1945.603599][T23865] usb 4-1: Using ep0 maxpacket: 16 [ 1945.631206][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1945.650074][T23865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1945.671869][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1945.680980][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1945.691323][T23865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1945.709872][T23865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1945.728379][T23865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1945.731824][ T378] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1945.747331][T23865] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1945.785948][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1945.794876][T23865] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1945.810962][T23865] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1945.841031][T23865] usb 4-1: Manufacturer: syz [ 1945.878699][T23865] usb 4-1: config 0 descriptor?? [ 1946.052649][ T9] usb 2-1: USB disconnect, device number 114 [ 1946.232434][T23865] rc_core: IR keymap rc-hauppauge not found [ 1946.258894][T23865] Registered IR keymap rc-empty [ 1946.273449][T23865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.294032][T23865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.342175][T23865] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1946.381761][T23865] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input221 [ 1946.421661][T23865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.441974][T23865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.461750][T23865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.491710][T23865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.521727][T23865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.551692][T23865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.571572][T23865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.594486][T23865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.631773][T23865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.661877][T23865] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1946.684613][T23865] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1946.714627][T23865] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1946.744553][T23865] usb 4-1: USB disconnect, device number 125 [ 1946.786592][ T426] nvme_fabrics: missing parameter 'transport=%s' [ 1946.822195][ T426] nvme_fabrics: missing parameter 'nqn=%s' [ 1947.032792][ T440] ALSA: mixer_oss: invalid OSS volume ':' [ 1947.038693][ T440] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1947.065928][ T440] ALSA: mixer_oss: invalid OSS volume '4' [ 1947.077330][ T440] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1947.086493][ T440] ALSA: mixer_oss: invalid OSS volume '5' [ 1947.092576][ T440] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1947.098991][ T440] ALSA: mixer_oss: invalid OSS volume '6' [ 1947.179620][ T447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26843'. [ 1947.190027][ T448] netlink: 44 bytes leftover after parsing attributes in process `syz.2.26842'. [ 1947.201982][ T448] netlink: 44 bytes leftover after parsing attributes in process `syz.2.26842'. [ 1947.302741][T23865] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 1947.460503][ T447] tipc: Disabling bearer [ 1947.482641][T23865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1947.494499][T23865] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1947.522442][T23865] usb 2-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 1947.537248][T23865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.549511][T23865] usb 2-1: config 0 descriptor?? [ 1947.551989][ T8288] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 1947.555782][ T443] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1947.730665][ T8288] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1947.757853][ T8288] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1947.785076][ T8288] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1947.797661][ T8288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1947.852481][ T8288] hub 3-1:4.0: USB hub found [ 1948.033176][T23865] apple 0003:05AC:0264.0108: unbalanced delimiter at end of report description [ 1948.074164][ T8288] hub 3-1:4.0: 12 ports detected [ 1948.086130][T23865] apple 0003:05AC:0264.0108: parse failed [ 1948.104984][T23865] apple 0003:05AC:0264.0108: probe with driver apple failed with error -22 [ 1948.113800][ T8288] usb 3-1: selecting invalid altsetting 1 [ 1948.151719][ T8288] hub 3-1:4.0: Using single TT (err -22) [ 1948.191930][ T8288] hub 3-1:4.0: insufficient power available to use all downstream ports [ 1948.235078][T23865] usb 2-1: USB disconnect, device number 115 [ 1948.509328][ T8288] usb 3-1: USB disconnect, device number 111 [ 1949.292690][T23865] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1949.301626][ T44] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1949.465628][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1949.485391][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1949.491517][T23865] usb 4-1: Using ep0 maxpacket: 32 [ 1949.532053][T23865] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 1949.557120][T23865] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1949.600956][T23865] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1949.631936][T23865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1949.641396][ T44] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1949.650908][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.661955][T23865] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1949.690274][ T44] usb 2-1: config 0 descriptor?? [ 1949.712702][T23865] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1949.741981][T23865] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1949.757143][T23865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.776905][T23865] usb 4-1: config 0 descriptor?? [ 1950.010717][T23865] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 126 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1950.129523][ T44] kovaplus 0003:1E7D:2D50.0109: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 1950.248766][ T516] [ 1950.251169][ T516] ===================================================== [ 1950.258128][ T516] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1950.265620][ T516] 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 Not tainted [ 1950.272739][ T516] ----------------------------------------------------- [ 1950.279690][ T516] syz.2.26870/516 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1950.287366][ T516] ffff888069b357f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1950.296109][ T516] [ 1950.296109][ T516] and this task is already holding: [ 1950.303480][ T516] ffff888023fcb028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1950.313253][ T516] which would create a new lock dependency: [ 1950.319150][ T516] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1950.327275][ T516] [ 1950.327275][ T516] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1950.336737][ T516] (&client->buffer_lock){..-.}-{3:3} [ 1950.336770][ T516] [ 1950.336770][ T516] ... which became SOFTIRQ-irq-safe at: [ 1950.349840][ T516] lock_acquire+0x120/0x360 [ 1950.354458][ T516] _raw_spin_lock+0x2e/0x40 [ 1950.359066][ T516] evdev_pass_values+0xb9/0xbd0 [ 1950.364013][ T516] evdev_events+0x1e6/0x340 [ 1950.368607][ T516] input_pass_values+0x285/0x890 [ 1950.373645][ T516] input_event_dispose+0x3e5/0x6b0 [ 1950.378867][ T516] input_event+0x8c/0xc0 [ 1950.383206][ T516] hidinput_hid_event+0x12d7/0x1c90 [ 1950.388508][ T516] hid_process_event+0x4be/0x620 [ 1950.393542][ T516] hid_report_raw_event+0xe91/0x16d0 [ 1950.398933][ T516] hid_input_report+0x43e/0x520 [ 1950.403892][ T516] hid_irq_in+0x47e/0x6d0 [ 1950.408319][ T516] __usb_hcd_giveback_urb+0x41a/0x690 [ 1950.413788][ T516] dummy_timer+0x862/0x4550 [ 1950.418389][ T516] __hrtimer_run_queues+0x52c/0xc60 [ 1950.423691][ T516] hrtimer_run_softirq+0x187/0x2b0 [ 1950.428910][ T516] handle_softirqs+0x286/0x870 [ 1950.433782][ T516] __irq_exit_rcu+0xca/0x1f0 [ 1950.438478][ T516] irq_exit_rcu+0x9/0x30 [ 1950.442825][ T516] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1950.448575][ T516] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1950.454687][ T516] do_raw_spin_lock+0x88/0x290 [ 1950.459568][ T516] __d_lookup+0x23e/0x780 [ 1950.464022][ T516] lookup_fast+0x84/0x5b0 [ 1950.468483][ T516] link_path_walk+0x642/0xea0 [ 1950.473361][ T516] path_lookupat+0x97/0x430 [ 1950.477981][ T516] filename_lookup+0x212/0x570 [ 1950.482869][ T516] do_readlinkat+0xd9/0x500 [ 1950.487482][ T516] __x64_sys_readlink+0x7f/0x90 [ 1950.492444][ T516] do_syscall_64+0xfa/0x3b0 [ 1950.497060][ T516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.503055][ T516] [ 1950.503055][ T516] to a SOFTIRQ-irq-unsafe lock: [ 1950.510083][ T516] (tasklist_lock){.+.+}-{3:3} [ 1950.510112][ T516] [ 1950.510112][ T516] ... which became SOFTIRQ-irq-unsafe at: [ 1950.522759][ T516] ... [ 1950.522770][ T516] lock_acquire+0x120/0x360 [ 1950.530043][ T516] _raw_read_lock+0x36/0x50 [ 1950.534662][ T516] __do_wait+0xde/0x740 [ 1950.538926][ T516] do_wait+0x1f8/0x520 [ 1950.543099][ T516] kernel_wait+0xab/0x170 [ 1950.547552][ T516] call_usermodehelper_exec_work+0xbe/0x230 [ 1950.553553][ T516] process_scheduled_works+0xade/0x17b0 [ 1950.559206][ T516] worker_thread+0x8a0/0xda0 [ 1950.563903][ T516] kthread+0x70e/0x8a0 [ 1950.568062][ T516] ret_from_fork+0x3fc/0x770 [ 1950.572757][ T516] ret_from_fork_asm+0x1a/0x30 [ 1950.577618][ T516] [ 1950.577618][ T516] other info that might help us debug this: [ 1950.577618][ T516] [ 1950.588205][ T516] Chain exists of: [ 1950.588205][ T516] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1950.588205][ T516] [ 1950.601374][ T516] Possible interrupt unsafe locking scenario: [ 1950.601374][ T516] [ 1950.609706][ T516] CPU0 CPU1 [ 1950.615077][ T516] ---- ---- [ 1950.620474][ T516] lock(tasklist_lock); [ 1950.624764][ T516] local_irq_disable(); [ 1950.631526][ T516] lock(&client->buffer_lock); [ 1950.638942][ T516] lock(&new->fa_lock); [ 1950.645714][ T516] [ 1950.649171][ T516] lock(&client->buffer_lock); [ 1950.654215][ T516] [ 1950.654215][ T516] *** DEADLOCK *** [ 1950.654215][ T516] [ 1950.662385][ T516] 7 locks held by syz.2.26870/516: [ 1950.667871][ T516] #0: ffff888146367118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1950.677054][ T516] #1: ffff88801e74b230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1950.687216][ T516] #2: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 1950.696910][ T516] #3: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1950.706502][ T516] #4: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1950.715744][ T516] #5: ffff888023fcb028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1950.725946][ T516] #6: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1950.735115][ T516] [ 1950.735115][ T516] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1950.745527][ T516] -> (&client->buffer_lock){..-.}-{3:3} { [ 1950.751286][ T516] IN-SOFTIRQ-W at: [ 1950.755280][ T516] lock_acquire+0x120/0x360 [ 1950.761454][ T516] _raw_spin_lock+0x2e/0x40 [ 1950.767625][ T516] evdev_pass_values+0xb9/0xbd0 [ 1950.774138][ T516] evdev_events+0x1e6/0x340 [ 1950.780308][ T516] input_pass_values+0x285/0x890 [ 1950.786903][ T516] input_event_dispose+0x3e5/0x6b0 [ 1950.793696][ T516] input_event+0x8c/0xc0 [ 1950.799633][ T516] hidinput_hid_event+0x12d7/0x1c90 [ 1950.806503][ T516] hid_process_event+0x4be/0x620 [ 1950.813097][ T516] hid_report_raw_event+0xe91/0x16d0 [ 1950.820051][ T516] hid_input_report+0x43e/0x520 [ 1950.826563][ T516] hid_irq_in+0x47e/0x6d0 [ 1950.832583][ T516] __usb_hcd_giveback_urb+0x41a/0x690 [ 1950.839640][ T516] dummy_timer+0x862/0x4550 [ 1950.845799][ T516] __hrtimer_run_queues+0x52c/0xc60 [ 1950.852664][ T516] hrtimer_run_softirq+0x187/0x2b0 [ 1950.859436][ T516] handle_softirqs+0x286/0x870 [ 1950.865920][ T516] __irq_exit_rcu+0xca/0x1f0 [ 1950.872180][ T516] irq_exit_rcu+0x9/0x30 [ 1950.878087][ T516] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1950.885389][ T516] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1950.893034][ T516] do_raw_spin_lock+0x88/0x290 [ 1950.899461][ T516] __d_lookup+0x23e/0x780 [ 1950.905551][ T516] lookup_fast+0x84/0x5b0 [ 1950.911541][ T516] link_path_walk+0x642/0xea0 [ 1950.917886][ T516] path_lookupat+0x97/0x430 [ 1950.924051][ T516] filename_lookup+0x212/0x570 [ 1950.930498][ T516] do_readlinkat+0xd9/0x500 [ 1950.936665][ T516] __x64_sys_readlink+0x7f/0x90 [ 1950.943180][ T516] do_syscall_64+0xfa/0x3b0 [ 1950.949345][ T516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.956902][ T516] INITIAL USE at: [ 1950.960813][ T516] lock_acquire+0x120/0x360 [ 1950.966896][ T516] _raw_spin_lock+0x2e/0x40 [ 1950.972969][ T516] evdev_handle_get_val+0x70/0x9f0 [ 1950.979658][ T516] evdev_ioctl_handler+0x1202/0x1f10 [ 1950.986518][ T516] __ia32_compat_sys_ioctl+0x543/0x840 [ 1950.993577][ T516] __do_fast_syscall_32+0xb6/0x2b0 [ 1951.000272][ T516] do_fast_syscall_32+0x34/0x80 [ 1951.006707][ T516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1951.014616][ T516] } [ 1951.017125][ T516] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1951.025295][ T516] [ 1951.025295][ T516] the dependencies between the lock to be acquired [ 1951.025305][ T516] and SOFTIRQ-irq-unsafe lock: [ 1951.038922][ T516] -> (tasklist_lock){.+.+}-{3:3} { [ 1951.044246][ T516] HARDIRQ-ON-R at: [ 1951.048411][ T516] lock_acquire+0x120/0x360 [ 1951.054936][ T516] _raw_read_lock+0x36/0x50 [ 1951.061452][ T516] __do_wait+0xde/0x740 [ 1951.067616][ T516] do_wait+0x1f8/0x520 [ 1951.073691][ T516] kernel_wait+0xab/0x170 [ 1951.080028][ T516] call_usermodehelper_exec_work+0xbe/0x230 [ 1951.087933][ T516] process_scheduled_works+0xade/0x17b0 [ 1951.095494][ T516] worker_thread+0x8a0/0xda0 [ 1951.102113][ T516] kthread+0x70e/0x8a0 [ 1951.108201][ T516] ret_from_fork+0x3fc/0x770 [ 1951.114813][ T516] ret_from_fork_asm+0x1a/0x30 [ 1951.121593][ T516] SOFTIRQ-ON-R at: [ 1951.125753][ T516] lock_acquire+0x120/0x360 [ 1951.132273][ T516] _raw_read_lock+0x36/0x50 [ 1951.138871][ T516] __do_wait+0xde/0x740 [ 1951.145036][ T516] do_wait+0x1f8/0x520 [ 1951.151123][ T516] kernel_wait+0xab/0x170 [ 1951.157460][ T516] call_usermodehelper_exec_work+0xbe/0x230 [ 1951.165371][ T516] process_scheduled_works+0xade/0x17b0 [ 1951.173018][ T516] worker_thread+0x8a0/0xda0 [ 1951.179624][ T516] kthread+0x70e/0x8a0 [ 1951.186132][ T516] ret_from_fork+0x3fc/0x770 [ 1951.192742][ T516] ret_from_fork_asm+0x1a/0x30 [ 1951.199524][ T516] INITIAL USE at: [ 1951.203609][ T516] lock_acquire+0x120/0x360 [ 1951.210038][ T516] _raw_write_lock_irq+0xa2/0xf0 [ 1951.216927][ T516] copy_process+0x224f/0x3c00 [ 1951.223539][ T516] kernel_clone+0x21e/0x870 [ 1951.229968][ T516] user_mode_thread+0xdd/0x140 [ 1951.236661][ T516] rest_init+0x23/0x300 [ 1951.242754][ T516] start_kernel+0x47d/0x500 [ 1951.249175][ T516] x86_64_start_reservations+0x24/0x30 [ 1951.256557][ T516] x86_64_start_kernel+0x143/0x1c0 [ 1951.263587][ T516] common_startup_64+0x13e/0x147 [ 1951.270444][ T516] INITIAL READ USE at: [ 1951.274954][ T516] lock_acquire+0x120/0x360 [ 1951.281813][ T516] _raw_read_lock+0x36/0x50 [ 1951.288671][ T516] __do_wait+0xde/0x740 [ 1951.295183][ T516] do_wait+0x1f8/0x520 [ 1951.301611][ T516] kernel_wait+0xab/0x170 [ 1951.308385][ T516] call_usermodehelper_exec_work+0xbe/0x230 [ 1951.316644][ T516] process_scheduled_works+0xade/0x17b0 [ 1951.324555][ T516] worker_thread+0x8a0/0xda0 [ 1951.331509][ T516] kthread+0x70e/0x8a0 [ 1951.337936][ T516] ret_from_fork+0x3fc/0x770 [ 1951.344899][ T516] ret_from_fork_asm+0x1a/0x30 [ 1951.352035][ T516] } [ 1951.354717][ T516] ... key at: [] tasklist_lock+0x18/0x40 [ 1951.362632][ T516] ... acquired at: [ 1951.366609][ T516] lock_acquire+0x120/0x360 [ 1951.371309][ T516] _raw_read_lock+0x36/0x50 [ 1951.375995][ T516] send_sigurg+0x12b/0x420 [ 1951.380597][ T516] sk_send_sigurg+0x6c/0x2e0 [ 1951.385393][ T516] queue_oob+0x490/0x5a0 [ 1951.389825][ T516] unix_stream_sendmsg+0xaf9/0xc90 [ 1951.395120][ T516] __sock_sendmsg+0x21c/0x270 [ 1951.399988][ T516] ____sys_sendmsg+0x52d/0x830 [ 1951.404933][ T516] ___sys_sendmsg+0x21f/0x2a0 [ 1951.409795][ T516] __sys_sendmmsg+0x28e/0x430 [ 1951.414654][ T516] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1951.420385][ T516] __do_fast_syscall_32+0xb6/0x2b0 [ 1951.425690][ T516] do_fast_syscall_32+0x34/0x80 [ 1951.430744][ T516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1951.437258][ T516] [ 1951.439591][ T516] -> (&f_owner->lock){....}-{3:3} { [ 1951.444917][ T516] INITIAL USE at: [ 1951.448911][ T516] lock_acquire+0x120/0x360 [ 1951.455176][ T516] _raw_write_lock_irq+0xa2/0xf0 [ 1951.461896][ T516] __f_setown+0x67/0x370 [ 1951.467916][ T516] fcntl_dirnotify+0x3d6/0x690 [ 1951.474438][ T516] do_fcntl+0x6d0/0x1910 [ 1951.480442][ T516] do_compat_fcntl64+0x477/0x720 [ 1951.487156][ T516] __do_fast_syscall_32+0xb6/0x2b0 [ 1951.494027][ T516] do_fast_syscall_32+0x34/0x80 [ 1951.500639][ T516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1951.508719][ T516] INITIAL READ USE at: [ 1951.513144][ T516] lock_acquire+0x120/0x360 [ 1951.519841][ T516] _raw_read_lock_irq+0xaa/0xf0 [ 1951.526878][ T516] do_fcntl+0x812/0x1910 [ 1951.533309][ T516] do_compat_fcntl64+0x477/0x720 [ 1951.540435][ T516] __do_fast_syscall_32+0xb6/0x2b0 [ 1951.547740][ T516] do_fast_syscall_32+0x34/0x80 [ 1951.554782][ T516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1951.563336][ T516] } [ 1951.565935][ T516] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1951.574899][ T516] ... acquired at: [ 1951.578800][ T516] lock_acquire+0x120/0x360 [ 1951.583499][ T516] _raw_read_lock_irqsave+0xaf/0x100 [ 1951.588973][ T516] send_sigio+0x38/0x370 [ 1951.593407][ T516] kill_fasync+0x24d/0x4d0 [ 1951.598035][ T516] lease_break_callback+0x26/0x30 [ 1951.603268][ T516] __break_lease+0x6a5/0x1620 [ 1951.608149][ T516] do_dentry_open+0xd62/0x1970 [ 1951.613110][ T516] vfs_open+0x3b/0x340 [ 1951.617366][ T516] path_openat+0x2ee5/0x3830 [ 1951.622159][ T516] do_filp_open+0x1fa/0x410 [ 1951.626858][ T516] do_sys_openat2+0x121/0x1c0 [ 1951.631722][ T516] __ia32_compat_sys_openat+0x131/0x160 [ 1951.637489][ T516] __do_fast_syscall_32+0xb6/0x2b0 [ 1951.642799][ T516] do_fast_syscall_32+0x34/0x80 [ 1951.647862][ T516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1951.654379][ T516] [ 1951.656709][ T516] -> (&new->fa_lock){....}-{3:3} { [ 1951.661856][ T516] INITIAL USE at: [ 1951.665758][ T516] lock_acquire+0x120/0x360 [ 1951.671838][ T516] _raw_write_lock_irq+0xa2/0xf0 [ 1951.678360][ T516] fasync_remove_entry+0xf1/0x1c0 [ 1951.684983][ T516] tty_fasync+0x13c/0x350 [ 1951.690909][ T516] __fput+0x8a2/0xa70 [ 1951.696480][ T516] task_work_run+0x1d1/0x260 [ 1951.702651][ T516] exit_to_user_mode_loop+0xec/0x110 [ 1951.709514][ T516] __do_fast_syscall_32+0x1f4/0x2b0 [ 1951.716299][ T516] do_fast_syscall_32+0x34/0x80 [ 1951.722739][ T516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1951.730647][ T516] INITIAL READ USE at: [ 1951.734994][ T516] lock_acquire+0x120/0x360 [ 1951.741518][ T516] _raw_read_lock_irqsave+0xaf/0x100 [ 1951.748818][ T516] kill_fasync+0x199/0x4d0 [ 1951.755282][ T516] pipe_release+0x1b2/0x330 [ 1951.761803][ T516] __fput+0x449/0xa70 [ 1951.767799][ T516] fput_close_sync+0x119/0x200 [ 1951.774580][ T516] __ia32_sys_close+0x7f/0x110 [ 1951.781354][ T516] __do_fast_syscall_32+0xb6/0x2b0 [ 1951.788481][ T516] do_fast_syscall_32+0x34/0x80 [ 1951.795351][ T516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1951.803697][ T516] } [ 1951.806200][ T516] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1951.814930][ T516] ... acquired at: [ 1951.818748][ T516] lock_acquire+0x120/0x360 [ 1951.823437][ T516] _raw_read_lock_irqsave+0xaf/0x100 [ 1951.828920][ T516] kill_fasync+0x199/0x4d0 [ 1951.833526][ T516] evdev_pass_values+0x627/0xbd0 [ 1951.838648][ T516] evdev_events+0x1e6/0x340 [ 1951.843338][ T516] input_pass_values+0x285/0x890 [ 1951.848493][ T516] input_event_dispose+0x330/0x6b0 [ 1951.853812][ T516] input_inject_event+0x1fe/0x320 [ 1951.859025][ T516] evdev_write+0x2fc/0x480 [ 1951.863622][ T516] vfs_write+0x27e/0xa90 [ 1951.868058][ T516] ksys_write+0x145/0x250 [ 1951.872584][ T516] __do_fast_syscall_32+0xb6/0x2b0 [ 1951.877909][ T516] do_fast_syscall_32+0x34/0x80 [ 1951.882957][ T516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1951.889473][ T516] [ 1951.891811][ T516] [ 1951.891811][ T516] stack backtrace: [ 1951.897715][ T516] CPU: 1 UID: 0 PID: 516 Comm: syz.2.26870 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1951.897739][ T516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1951.897750][ T516] Call Trace: [ 1951.897758][ T516] [ 1951.897766][ T516] dump_stack_lvl+0x189/0x250 [ 1951.897796][ T516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1951.897821][ T516] ? __pfx__printk+0x10/0x10 [ 1951.897843][ T516] validate_chain+0x1f05/0x2140 [ 1951.897868][ T516] __lock_acquire+0xab9/0xd20 [ 1951.897894][ T516] ? kill_fasync+0x199/0x4d0 [ 1951.897915][ T516] lock_acquire+0x120/0x360 [ 1951.897937][ T516] ? kill_fasync+0x199/0x4d0 [ 1951.897964][ T516] _raw_read_lock_irqsave+0xaf/0x100 [ 1951.897986][ T516] ? kill_fasync+0x199/0x4d0 [ 1951.898007][ T516] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1951.898028][ T516] ? do_raw_spin_lock+0x121/0x290 [ 1951.898050][ T516] kill_fasync+0x199/0x4d0 [ 1951.898071][ T516] ? kill_fasync+0x53/0x4d0 [ 1951.898093][ T516] evdev_pass_values+0x627/0xbd0 [ 1951.898113][ T516] ? evdev_pass_values+0x5f1/0xbd0 [ 1951.898133][ T516] evdev_events+0x1e6/0x340 [ 1951.898148][ T516] ? evdev_events+0x79/0x340 [ 1951.898164][ T516] ? input_pass_values+0x8d/0x890 [ 1951.898179][ T516] input_pass_values+0x285/0x890 [ 1951.898198][ T516] ? input_handle_event+0x70c/0xf30 [ 1951.898229][ T516] input_event_dispose+0x330/0x6b0 [ 1951.898254][ T516] input_inject_event+0x1fe/0x320 [ 1951.898277][ T516] ? input_inject_event+0xbc/0x320 [ 1951.898301][ T516] evdev_write+0x2fc/0x480 [ 1951.898320][ T516] ? __pfx_evdev_write+0x10/0x10 [ 1951.898337][ T516] ? bpf_lsm_file_permission+0x9/0x20 [ 1951.898361][ T516] ? security_file_permission+0x75/0x290 [ 1951.898379][ T516] ? rw_verify_area+0x258/0x650 [ 1951.898403][ T516] ? __pfx_evdev_write+0x10/0x10 [ 1951.898420][ T516] vfs_write+0x27e/0xa90 [ 1951.898448][ T516] ? __pfx_vfs_write+0x10/0x10 [ 1951.898475][ T516] ? __fget_files+0x2a/0x420 [ 1951.898494][ T516] ? __fget_files+0x2a/0x420 [ 1951.898510][ T516] ? __fget_files+0x3a0/0x420 [ 1951.898527][ T516] ? __fget_files+0x2a/0x420 [ 1951.898547][ T516] ksys_write+0x145/0x250 [ 1951.898563][ T516] ? __pfx_ksys_write+0x10/0x10 [ 1951.898577][ T516] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1951.898603][ T516] ? lockdep_hardirqs_on+0x9c/0x150 [ 1951.898626][ T516] __do_fast_syscall_32+0xb6/0x2b0 [ 1951.898652][ T516] ? lockdep_hardirqs_on+0x9c/0x150 [ 1951.898676][ T516] do_fast_syscall_32+0x34/0x80 [ 1951.898701][ T516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1951.898722][ T516] RIP: 0023:0xf7f27539 [ 1951.898736][ T516] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1951.898751][ T516] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1951.898768][ T516] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1951.898780][ T516] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 1951.898790][ T516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1951.898799][ T516] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1951.898809][ T516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1951.898825][ T516] [ 1952.219830][ C1] vkms_vblank_simulate: vblank timer overrun [ 1952.298986][ T9] usb 4-1: USB disconnect, device number 126 [ 1952.319654][ T9] usblp0: removed [ 1952.665783][ T44] kovaplus 0003:1E7D:2D50.0109: couldn't init struct kovaplus_device [ 1952.675355][ T44] kovaplus 0003:1E7D:2D50.0109: couldn't install mouse [ 1952.683707][ T44] kovaplus 0003:1E7D:2D50.0109: probe with driver kovaplus failed with error -71 [ 1952.696537][ T44] usb 2-1: USB disconnect, device number 116