last executing test programs: 12.150065416s ago: executing program 2 (id=2538): mmap$IORING_OFF_SQ_RING(&(0x7f00008c7000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "c668d0c1"}]}}, 0x0}, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000081, 0x0, 0xaf66}]}) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 9.16007656s ago: executing program 0 (id=2547): r0 = syz_open_dev$media(&(0x7f00000000c0), 0xfffffffffffffc01, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000080)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000940)={{r2, 0x0, 0x1, [0xf4b3, 0x80000000]}, {0x80000000, 0x0, 0x6, [0x2, 0xd]}, 0x2, [0x4, 0x8]}) 8.796039893s ago: executing program 0 (id=2548): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000044}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r5) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x488a03, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x7) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0) fchdir(r9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 7.58207476s ago: executing program 0 (id=2551): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8000, 0x0, 0x2, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffd}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) fallocate(r4, 0x60, 0xfffffffffffffffd, 0x6) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x130, 0x0, 0x7, {0xffffffffffffffff, 0x7, 0x0, '\x00', {0x7ff, 0x1, 0x1, 0x800, 0xee01, 0x0, 0x2000, '\x00', 0xa, 0xffffffffffff8003, 0xb4e7, 0x3, {0x88007, 0xfffffff9}, {0xc7, 0x7f4a}, {0x1, 0x9}, {0x200000008, 0x7}, 0x8000, 0x4, 0x0, 0x9}}}}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='uid_map\x00') pread64(r5, &(0x7f0000000480)=""/177, 0xb1, 0x21) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000008c0)=ANY=[@ANYRESHEX=r2, @ANYRESOCT, @ANYBLOB="2c726f6f746d6f64653d303030303030303030303030303030303034303030302c757365720000643d42e65c60e800c29d6809b09111844ea545b4625a5e5d9582d9c210df66ad618f9432511ff8c4487fbacaceb0d190bafc3549657dd1949ad43fd2ff2b71d7ce6be41126372cdeeac8f44e225090b8f139d3a927251d50d4c1e4265be2050b15dabb6ee94e0b1cb4e696823478da5f257d3f804a76a3e91a1e474233e7fff52fb680ee82f274a2b648435a5b0df088174d7444607d5357dba15361d9d6488d752e45fa6af6a11c14017d9a1fa8d3af257eefe0a6e12a7570407fabe34f1e6347045b8186e2d800"/254, @ANYRESDEC=0x0, @ANYBLOB=',group_i~=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f0000000640)=ANY=[], 0x1, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200) umount2(&(0x7f0000000100)='./file0\x00', 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="22020000", @ANYRES16=r6, @ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x10}, 0x840) 7.560170672s ago: executing program 2 (id=2552): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r4 = msgget$private(0x0, 0x4a0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r4, 0x2, 0x0) msgsnd(r4, &(0x7f0000000440)=ANY=[], 0xe3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) socket(0x400000000010, 0x3, 0x0) 6.888965251s ago: executing program 3 (id=2553): sched_setattr(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6.424989752s ago: executing program 3 (id=2555): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 6.423980532s ago: executing program 2 (id=2556): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) chdir(0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000500)={0x50, 0xf, 0x1d, {0x1000, 0xcac}, {0x8000, 0x7}, @ramp={0x400, 0x407, {0x8, 0xfffb, 0xeb4d, 0xf7f3}}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0xc78, @mcast2, 0x5}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x1, 0xfff3}, {0xfff2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x0) 5.928032916s ago: executing program 4 (id=2558): r0 = syz_open_dev$media(&(0x7f00000000c0), 0xfffffffffffffc01, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000400)={r2, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000080)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000940)={{r3, 0x0, 0x1, [0xf4b3, 0x80000000]}, {0x80000000, 0x0, 0x6, [0x2, 0xd]}, 0x2, [0x4, 0x8]}) 5.792271578s ago: executing program 4 (id=2559): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2084}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x5}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) write$tun(r2, &(0x7f0000000600)={@void, @val={0x5, 0x80, 0xc3, 0x0, 0x1875, 0x1}, @ipv6=@icmpv6={0xa, 0x6, "f829a2", 0x54, 0x3a, 0x1, @mcast2, @local, {[@fragment={0x2b, 0x0, 0x80, 0x1, 0x0, 0x6, 0x67}, @fragment={0x89, 0x0, 0x8, 0x1, 0x0, 0x1, 0x67}, @fragment={0x3c, 0x0, 0xb2, 0x1, 0x0, 0x6, 0x64}, @fragment={0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x68}], @echo_request={0x80, 0x0, 0x0, 0xfff8, 0x4, "dd55b9973f73d0c03d51e82394999d4c888855e5dfb9df777124afe3856fa53bda35510f5f4f5ff462f56016"}}}}, 0x86) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 5.277201203s ago: executing program 2 (id=2561): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 5.191027941s ago: executing program 3 (id=2562): mmap$IORING_OFF_SQ_RING(&(0x7f00008c7000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "c668d0c1"}]}}, 0x0}, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000081, 0x0, 0xaf66}]}) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x6}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x9, 0x7ffc0002}]}) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) 4.848517162s ago: executing program 2 (id=2563): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019100)='net/udp6\x00') mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, 0xffffffffffffffff, 0x80000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000f41000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) syz_usb_connect(0x7, 0x9dd, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000001780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x7e, 0xff, 0x88, 0x10, 0xfd}, 0x19, &(0x7f0000000400)=ANY=[@ANYRES8=r1], 0x9, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4001}}, {0x51, &(0x7f0000000880)=ANY=[@ANYRES8]}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x54, 0x0}, {0x2, &(0x7f0000000680)=ANY=[]}, {0x11, &(0x7f0000000140)=ANY=[]}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x44a}}, {0xc8, &(0x7f0000003280)=ANY=[@ANYBLOB="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"]}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x6) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 4.483825813s ago: executing program 4 (id=2564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001}) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x1, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) 3.851183009s ago: executing program 1 (id=2565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00fb4aab"], 0x4a, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.785885115s ago: executing program 0 (id=2566): sched_setattr(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{0x0}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3.252291872s ago: executing program 0 (id=2567): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r0, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="e771e40000000073", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) 2.907468653s ago: executing program 1 (id=2568): socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.679299183s ago: executing program 1 (id=2569): r0 = syz_open_dev$media(&(0x7f00000000c0), 0xfffffffffffffc01, 0x0) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000400)={r2, 0x0, 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000280)={0x80000000, 0x0, &(0x7f0000000080)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000940)={{r3, 0x0, 0x1, [0xf4b3, 0x80000000]}, {0x80000000, 0x0, 0x6, [0x2, 0xd]}, 0x2, [0x4, 0x8]}) 2.507063828s ago: executing program 0 (id=2570): r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d8, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc001) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'lblc\x00', 0x1, 0xa7e, 0x70}, 0x2c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.479865061s ago: executing program 1 (id=2571): socket(0x80000000000000a, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x6}) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x51) chdir(0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f0000000500)={0x50, 0xf, 0x1d, {0x1000, 0xcac}, {0x8000, 0x7}, @ramp={0x400, 0x407, {0x8, 0xfffb, 0xeb4d, 0xf7f3}}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0xc78, @mcast2, 0x5}]}, &(0x7f0000000100)=0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x1, 0xfff3}, {0xfff2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40810}, 0x0) 1.309110714s ago: executing program 1 (id=2572): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.295612295s ago: executing program 3 (id=2573): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x1, 0x29}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x2}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 1.147151958s ago: executing program 4 (id=2574): syz_open_dev$loop(0x0, 0x8, 0x143a81) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x4) landlock_restrict_self(r0, 0xe) symlink(0x0, &(0x7f00000001c0)='./cgroup/file0\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x41e43, 0x14) 991.244422ms ago: executing program 3 (id=2575): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000300)={0xa, {0x2, 0x6, 0xd, 0x2d8f}}) 986.931633ms ago: executing program 4 (id=2576): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x3, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80d5) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8825}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x80002, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000280)) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYBLOB="31030020000000000040080000", @ANYBLOB='\b\x00', @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000a00)='.\x00', &(0x7f0000000080)='hpfs\x00', 0x18800, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="a281fc9cba02d223a544302a4e9ce8a2d941bb065d9eb75e00f2cdb7daa364be06f598945d069799199fa33acb63e4defcbc87b0895d3c3d56c37b7e47ceb9fd725bbfc26820540130bcdd307ef5", 0x4e}, {&(0x7f0000000480)="4fda84f871780259d7f5d98034361c9429bc092d5eeea73c8c88fc44c02a78d1c5427a2b6b1295e9dd4a16d09f7607ce70f05cbbc5bbe1212bc35f64706632e8", 0x40}, {&(0x7f0000000580)="a8450bb7823587d628a8c7442b5e317ea83e5634790255754305d6f1350f609e4f0875e3dfd77af783aece787b97a86ddcba5f0fef44f6988e53583c50e194a1e3d3d04a439e09f1a955a8112c14b185bd23b422920fed14e3b010641931", 0x5e}, {0x0}], 0x4, 0x0) syz_open_dev$I2C(&(0x7f0000000080), 0xa, 0x400) write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x10006, 0x0, 0x3, 0x1, 0x1}, 0x8) 189.129133ms ago: executing program 4 (id=2577): sched_setattr(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 175.459294ms ago: executing program 3 (id=2578): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 127.138368ms ago: executing program 1 (id=2579): socket$l2tp6(0xa, 0x2, 0x73) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 2 (id=2580): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r3 = msgget$private(0x0, 0x4a0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r3, 0x2, 0x0) msgsnd(r3, &(0x7f0000000440)=ANY=[], 0xe3, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffff, 0xffffffffffffffff, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) socket(0x400000000010, 0x3, 0x0) kernel console output (not intermixed with test programs): 934 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 785.082777][ T27] audit: type=1326 audit(1771605737.947:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 785.222085][ T27] audit: type=1326 audit(1771605737.947:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 785.254564][ T27] audit: type=1326 audit(1771605737.947:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 785.295078][ T27] audit: type=1326 audit(1771605737.947:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 785.373178][ T27] audit: type=1326 audit(1771605737.947:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 785.425410][ T27] audit: type=1326 audit(1771605737.967:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 785.531438][ T27] audit: type=1326 audit(1771605737.977:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10934 comm="syz.4.1856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 787.539113][T10976] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 788.176404][ T4314] usb 5-1: USB disconnect, device number 38 [ 788.288893][T10986] tipc: Failed to obtain node identity [ 788.307363][T10986] tipc: Enabling of bearer rejected, failed to enable media [ 788.655685][T10989] netlink: 'syz.4.1870': attribute type 4 has an invalid length. [ 788.766384][T10991] netlink: 'syz.4.1870': attribute type 4 has an invalid length. [ 788.923611][ T127] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 789.133698][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 789.145789][ T127] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 789.165807][ T127] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 789.197898][ T127] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 789.230815][ T127] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 789.288643][ T127] usb 3-1: config 0 interface 0 has no altsetting 0 [ 789.310390][ T127] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 789.348315][ T127] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 789.373641][ T127] usb 3-1: Product: syz [ 789.380972][T11002] netlink: 'syz.4.1873': attribute type 4 has an invalid length. [ 789.407700][ T127] usb 3-1: Manufacturer: syz [ 789.420528][ T127] usb 3-1: SerialNumber: syz [ 789.459857][ T127] usb 3-1: config 0 descriptor?? [ 789.502713][ T127] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 789.575033][ T127] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 789.601730][T11005] netlink: 'syz.4.1873': attribute type 4 has an invalid length. [ 789.801230][T10992] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 789.809403][ T127] usb 3-1: USB disconnect, device number 37 [ 789.809441][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 789.842841][T11010] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 789.871345][ T127] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 790.443667][ T127] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 790.643651][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 790.655830][ T127] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 790.665245][ T127] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 790.702635][ T127] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 790.843519][ T127] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 790.859581][ T127] usb 3-1: config 0 interface 0 has no altsetting 0 [ 790.878851][ T127] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 790.888109][ T127] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 790.993543][ T127] usb 3-1: Product: syz [ 790.997980][ T127] usb 3-1: Manufacturer: syz [ 791.002904][ T127] usb 3-1: SerialNumber: syz [ 791.040944][ T127] usb 3-1: config 0 descriptor?? [ 791.065568][ T127] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 791.117030][ T127] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 791.258066][ T127] usb 3-1: USB disconnect, device number 38 [ 791.316915][ T127] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 792.602963][T11041] tipc: Failed to obtain node identity [ 792.763854][T11041] tipc: Enabling of bearer rejected, failed to enable media [ 795.823796][ T4314] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 796.023511][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 796.032021][ T4314] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 796.066287][ T4314] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 796.089829][ T4314] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 796.121602][ T4314] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 796.169381][ T4314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 796.194661][ T4314] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 796.210060][ T4314] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 796.225690][ T4314] usb 5-1: Product: syz [ 796.230117][ T4314] usb 5-1: Manufacturer: syz [ 796.235211][ T4314] usb 5-1: SerialNumber: syz [ 796.259721][ T4314] usb 5-1: config 0 descriptor?? [ 796.291541][ T4314] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 796.306877][ T4314] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 796.506667][T11075] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 796.569528][T11078] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 796.585250][ T4314] usb 5-1: USB disconnect, device number 39 [ 796.591263][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 796.597878][T11064] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 796.681616][T11080] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 796.763554][ T4314] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 797.254047][ T4314] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 797.314695][T11086] tipc: Failed to obtain node identity [ 797.324796][T11086] tipc: Enabling of bearer rejected, failed to enable media [ 797.463609][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 797.471198][ T4314] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 797.513829][ T4314] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 797.587370][ T4314] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 797.633561][ T4314] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 797.697723][ T4314] usb 5-1: config 0 interface 0 has no altsetting 0 [ 797.739384][ T4314] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 797.766739][ T4314] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 797.775819][ T4314] usb 5-1: Product: syz [ 797.780261][ T4314] usb 5-1: Manufacturer: syz [ 797.785686][ T4314] usb 5-1: SerialNumber: syz [ 797.805048][ T4314] usb 5-1: config 0 descriptor?? [ 797.847315][ T4314] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 797.920494][ T4314] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 798.026438][ T4314] usb 5-1: USB disconnect, device number 40 [ 798.056431][ T4314] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 799.593927][ T14] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 799.823519][ T14] usb 2-1: Using ep0 maxpacket: 16 [ 799.830834][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.892892][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.947622][ T14] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 799.988131][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.017110][ T14] usb 2-1: config 0 descriptor?? [ 800.429960][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 800.446956][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 800.479337][ T14] usb 2-1: USB disconnect, device number 56 [ 800.696852][ T6604] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 800.913595][ T6604] usb 5-1: Using ep0 maxpacket: 16 [ 800.925358][ T6604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.967160][ T6604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.056138][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1910'. [ 801.071104][ T6604] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 801.120580][ T6604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.222394][ T6604] usb 5-1: config 0 descriptor?? [ 801.708072][ T6604] gt683r_led 0003:1770:FF00.0027: unbalanced delimiter at end of report description [ 801.750029][ T6604] gt683r_led 0003:1770:FF00.0027: hid parsing failed [ 801.813347][ T6604] gt683r_led: probe of 0003:1770:FF00.0027 failed with error -22 [ 801.930414][ T27] audit: type=1326 audit(1771605754.917:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 802.085901][ T27] audit: type=1326 audit(1771605754.947:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 802.195178][ T27] audit: type=1326 audit(1771605754.947:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 802.355212][ T27] audit: type=1326 audit(1771605754.947:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 802.433622][ T4411] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 802.573847][ T27] audit: type=1326 audit(1771605754.947:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 802.663614][ T4411] usb 4-1: Using ep0 maxpacket: 32 [ 802.677662][ T4411] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 802.686175][ T4411] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 802.697426][ T4411] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 802.708585][ T4411] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 802.725770][ T4411] usb 4-1: config 0 interface 0 has no altsetting 0 [ 802.782647][ T4411] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 802.791926][ T4411] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 802.829114][ T4411] usb 4-1: Product: syz [ 803.016502][ T4411] usb 4-1: Manufacturer: syz [ 803.021554][ T4411] usb 4-1: SerialNumber: syz [ 803.038751][ T4411] usb 4-1: config 0 descriptor?? [ 803.052323][ T27] audit: type=1326 audit(1771605754.947:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 803.053241][ T4411] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 803.153142][ T4411] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 803.208310][ T27] audit: type=1326 audit(1771605754.957:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 803.333520][ T27] audit: type=1326 audit(1771605754.957:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11113 comm="syz.4.1907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 803.361683][ T8231] usb 4-1: USB disconnect, device number 28 [ 803.367783][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 803.374025][T11147] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 803.406072][T11157] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 803.439935][ T8231] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 804.294321][ T8231] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 804.477995][T11170] netlink: 'syz.2.1921': attribute type 4 has an invalid length. [ 804.504317][ T8231] usb 4-1: Using ep0 maxpacket: 32 [ 804.512155][ T8231] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 804.533592][T11172] netlink: 'syz.2.1921': attribute type 4 has an invalid length. [ 804.543835][ T8231] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 804.571913][ T8231] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 804.592775][ T8231] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 804.611027][ T8231] usb 4-1: config 0 interface 0 has no altsetting 0 [ 804.623974][ T4411] usb 5-1: USB disconnect, device number 41 [ 804.639813][ T8231] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 804.671394][ T8231] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 804.683970][ T8231] usb 4-1: Product: syz [ 804.688202][ T8231] usb 4-1: Manufacturer: syz [ 804.698847][ T8231] usb 4-1: SerialNumber: syz [ 804.727000][ T8231] usb 4-1: config 0 descriptor?? [ 804.750325][ T8231] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 804.789768][ T8231] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 804.949497][ T6604] usb 4-1: USB disconnect, device number 29 [ 804.984411][ T6604] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 805.086589][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1923'. [ 807.477014][T11209] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 807.534354][T11214] netlink: 'syz.1.1933': attribute type 4 has an invalid length. [ 807.610644][ T27] audit: type=1326 audit(1771605760.597:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11204 comm="syz.4.1931" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f746259c629 code=0x0 [ 807.919336][T11220] netlink: 'syz.1.1933': attribute type 4 has an invalid length. [ 808.063608][ T4315] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 808.273766][ T4315] usb 3-1: Using ep0 maxpacket: 16 [ 808.298958][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.342295][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.413236][ T4315] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 808.463675][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.501421][ T4315] usb 3-1: config 0 descriptor?? [ 808.584519][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1935'. [ 808.773549][ T4312] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 808.856247][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.862642][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.933205][ T4315] gt683r_led 0003:1770:FF00.0028: unbalanced delimiter at end of report description [ 808.980232][ T4315] gt683r_led 0003:1770:FF00.0028: hid parsing failed [ 808.993816][ T4312] usb 5-1: Using ep0 maxpacket: 32 [ 809.004866][ T4312] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 809.013340][ T4315] gt683r_led: probe of 0003:1770:FF00.0028 failed with error -22 [ 809.015997][ T4312] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 809.024494][ T4312] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 809.046568][ T4312] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 809.060260][ T4312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 809.083634][ T127] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 809.085248][ T4312] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 809.102400][ T4312] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 809.112965][ T4312] usb 5-1: Product: syz [ 809.118791][ T4312] usb 5-1: Manufacturer: syz [ 809.128536][ T4312] usb 5-1: SerialNumber: syz [ 809.137802][ T4312] usb 5-1: config 0 descriptor?? [ 809.150094][ T27] audit: type=1326 audit(1771605762.137:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 809.179589][ T4312] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 809.194228][ T27] audit: type=1326 audit(1771605762.167:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 809.236173][ T4312] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 809.270346][ T27] audit: type=1326 audit(1771605762.167:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 809.293522][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 809.295418][ T27] audit: type=1326 audit(1771605762.167:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 809.322318][ T27] audit: type=1326 audit(1771605762.167:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 809.345547][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.363605][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.418741][ T127] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 809.450707][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.477334][ T27] audit: type=1326 audit(1771605762.177:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 809.515594][ T4312] usb 5-1: USB disconnect, device number 42 [ 809.521608][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 809.528738][ T127] usb 4-1: config 0 descriptor?? [ 809.529620][T11230] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 809.566204][T11242] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 809.566301][ T27] audit: type=1326 audit(1771605762.177:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 809.615270][ T27] audit: type=1326 audit(1771605762.177:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11205 comm="syz.2.1932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 809.638275][ T4312] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 809.964108][ T127] usbhid 4-1:0.0: can't add hid device: -71 [ 809.994190][ T127] usbhid: probe of 4-1:0.0 failed with error -71 [ 810.020397][ T127] usb 4-1: USB disconnect, device number 30 [ 810.163798][ T4312] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 810.443745][ T4312] usb 5-1: Using ep0 maxpacket: 32 [ 810.450883][ T4312] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 810.479340][ T4312] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 810.535687][ T4312] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 810.585497][ T4312] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 810.633694][ T4312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 810.665562][ T4312] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 810.713554][ T4312] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 810.722065][ T4312] usb 5-1: Product: syz [ 810.742698][ T4312] usb 5-1: Manufacturer: syz [ 810.779735][ T4312] usb 5-1: SerialNumber: syz [ 810.818697][ T4312] usb 5-1: config 0 descriptor?? [ 810.874799][ T4312] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 810.930840][ T4312] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 811.530799][ T4312] usb 5-1: USB disconnect, device number 43 [ 811.623199][ T4312] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 811.708910][T11262] netlink: 'syz.1.1945': attribute type 4 has an invalid length. [ 811.772879][T11267] netlink: 'syz.1.1945': attribute type 4 has an invalid length. [ 812.144243][ T4318] usb 3-1: USB disconnect, device number 39 [ 815.049978][T11307] netlink: 'syz.0.1959': attribute type 4 has an invalid length. [ 815.120902][T11310] netlink: 'syz.0.1959': attribute type 4 has an invalid length. [ 815.213639][ T4351] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 815.413820][ T4351] usb 5-1: Using ep0 maxpacket: 32 [ 815.425112][ T4351] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 815.455392][ T4351] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 815.500195][ T4351] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 815.558512][ T4351] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 815.607247][ T4351] usb 5-1: config 0 interface 0 has no altsetting 0 [ 815.647403][ T4351] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 815.663540][T11301] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 815.683490][ T4351] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 815.755264][ T4351] usb 5-1: Product: syz [ 815.759523][ T4351] usb 5-1: Manufacturer: syz [ 815.778857][ T4351] usb 5-1: SerialNumber: syz [ 815.809834][ T4351] usb 5-1: config 0 descriptor?? [ 815.834894][ T4351] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 815.873541][T11301] usb 3-1: Using ep0 maxpacket: 16 [ 815.885527][T11301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.907395][T11301] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.933504][T11301] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 815.946019][ T4351] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 815.974187][T11301] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.995617][T11301] usb 3-1: config 0 descriptor?? [ 816.036831][ T4351] usb 5-1: USB disconnect, device number 44 [ 816.102936][ T4351] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 816.254957][T11328] fuse: Unknown parameter 'user_i00000000000000000000' [ 816.419509][T11301] gt683r_led 0003:1770:FF00.0029: unbalanced delimiter at end of report description [ 816.441944][T11301] gt683r_led 0003:1770:FF00.0029: hid parsing failed [ 816.492237][T11301] gt683r_led: probe of 0003:1770:FF00.0029 failed with error -22 [ 816.673765][ T4351] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 816.893665][ T4351] usb 5-1: Using ep0 maxpacket: 32 [ 816.953024][ T4351] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 816.982013][ T27] audit: type=1326 audit(1771605769.967:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 817.064008][ T4351] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 817.101024][ T27] audit: type=1326 audit(1771605770.007:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 817.182068][ T4351] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 817.212242][ T4351] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 817.266726][ T27] audit: type=1326 audit(1771605770.017:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 817.310447][ T4351] usb 5-1: config 0 interface 0 has no altsetting 0 [ 817.340049][ T4351] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 817.357803][ T27] audit: type=1326 audit(1771605770.017:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 817.387755][ T4351] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 817.418435][ T4351] usb 5-1: Product: syz [ 817.440400][ T4351] usb 5-1: Manufacturer: syz [ 817.452080][ T4351] usb 5-1: SerialNumber: syz [ 817.468049][ T27] audit: type=1326 audit(1771605770.017:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 817.508808][ T4351] usb 5-1: config 0 descriptor?? [ 817.539279][ T4351] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 817.591603][ T4351] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 817.610221][ T27] audit: type=1326 audit(1771605770.017:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 817.781302][ T27] audit: type=1326 audit(1771605770.017:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 817.808761][ T27] audit: type=1326 audit(1771605770.017:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11308 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 817.835699][ T27] audit: type=1326 audit(1771605770.237:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.3.1966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe2d19c629 code=0x0 [ 817.897506][ T4312] usb 5-1: USB disconnect, device number 45 [ 817.904641][T11355] netlink: 'syz.0.1969': attribute type 4 has an invalid length. [ 817.908488][ T4312] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 817.928834][T11354] netlink: 'syz.0.1969': attribute type 4 has an invalid length. [ 818.148562][T11357] netlink: 'syz.3.1971': attribute type 4 has an invalid length. [ 818.252249][T11357] netlink: 'syz.3.1971': attribute type 4 has an invalid length. [ 819.649443][ T127] usb 3-1: USB disconnect, device number 40 [ 819.944019][T11375] qfq: no options [ 820.205468][ T4314] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 820.250775][T11378] fuse: Unknown parameter 'user_i00000000000000000000' [ 820.425609][ T4314] usb 3-1: Using ep0 maxpacket: 16 [ 820.432421][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.502007][ T4314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.998909][ T4314] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 821.156028][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.207654][ T4314] usb 3-1: config 0 descriptor?? [ 821.425654][T11393] netlink: 'syz.4.1983': attribute type 4 has an invalid length. [ 821.454036][T11391] input: syz0 as /devices/virtual/input/input16 [ 821.573811][T11395] netlink: 'syz.4.1983': attribute type 4 has an invalid length. [ 821.823198][ T4314] usbhid 3-1:0.0: can't add hid device: -71 [ 821.835688][ T4314] usbhid: probe of 3-1:0.0 failed with error -71 [ 821.909876][ T4314] usb 3-1: USB disconnect, device number 41 [ 821.930347][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1984'. [ 823.008991][T11423] netlink: 'syz.2.1987': attribute type 4 has an invalid length. [ 823.017095][ T127] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 823.027031][T11419] netlink: 'syz.2.1987': attribute type 4 has an invalid length. [ 823.161109][T11425] netlink: 'syz.1.1989': attribute type 9 has an invalid length. [ 823.173661][T11425] netlink: 'syz.1.1989': attribute type 6 has an invalid length. [ 823.243655][ T127] usb 5-1: Using ep0 maxpacket: 16 [ 823.252952][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.312413][ T127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.355862][ T127] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 823.379653][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.414831][ T127] usb 5-1: config 0 descriptor?? [ 823.472110][T11428] fuse: Unknown parameter 'user_i00000000000000000000' [ 823.867184][ T127] gt683r_led 0003:1770:FF00.002A: unbalanced delimiter at end of report description [ 823.887726][ T127] gt683r_led 0003:1770:FF00.002A: hid parsing failed [ 823.917546][ T127] gt683r_led: probe of 0003:1770:FF00.002A failed with error -22 [ 824.069390][ T27] audit: type=1326 audit(1771605777.057:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 824.122448][ T27] audit: type=1326 audit(1771605777.077:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 824.173499][ T27] audit: type=1326 audit(1771605777.087:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 824.820889][ T27] audit: type=1326 audit(1771605777.087:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 825.016490][ T27] audit: type=1326 audit(1771605777.087:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 825.164497][ T27] audit: type=1326 audit(1771605777.097:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 825.302974][ T27] audit: type=1326 audit(1771605777.097:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 825.399375][ T27] audit: type=1326 audit(1771605777.097:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11404 comm="syz.4.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 826.051117][T11444] netlink: 'syz.2.1994': attribute type 4 has an invalid length. [ 826.112769][T11446] netlink: 'syz.2.1994': attribute type 4 has an invalid length. [ 826.459055][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1996'. [ 826.813506][ T127] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 827.013557][ T127] usb 3-1: Using ep0 maxpacket: 16 [ 827.020397][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 827.059302][ T127] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 827.092873][ T127] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 827.156208][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.210025][ T127] usb 3-1: config 0 descriptor?? [ 827.395738][ T6604] usb 5-1: USB disconnect, device number 46 [ 827.858001][ T127] usbhid 3-1:0.0: can't add hid device: -71 [ 827.866775][ T127] usbhid: probe of 3-1:0.0 failed with error -71 [ 827.893790][T11471] input: syz0 as /devices/virtual/input/input17 [ 827.922817][ T127] usb 3-1: USB disconnect, device number 42 [ 828.170538][T11474] fuse: Unknown parameter 'user_id00000000000000000000' [ 828.202784][ T27] audit: type=1326 audit(1771605781.187:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11463 comm="syz.0.1999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bc2b9c629 code=0x0 [ 829.153541][ T4314] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 829.358746][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 829.373451][ T4314] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 829.390751][ T4314] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 829.403936][ T4314] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 829.415800][ T4314] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 829.432721][ T4314] usb 2-1: config 0 interface 0 has no altsetting 0 [ 829.460888][ T4314] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 829.477962][ T4314] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 829.496991][ T4314] usb 2-1: Product: syz [ 829.507678][ T4314] usb 2-1: Manufacturer: syz [ 829.517980][ T4314] usb 2-1: SerialNumber: syz [ 829.549262][ T4314] usb 2-1: config 0 descriptor?? [ 829.573117][ T4314] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 829.624867][ T4314] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 829.778441][T11496] netlink: 'syz.0.2007': attribute type 4 has an invalid length. [ 829.855890][T11498] netlink: 'syz.0.2007': attribute type 4 has an invalid length. [ 829.881374][ T4315] usb 2-1: USB disconnect, device number 57 [ 829.881572][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 829.901797][T11476] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 829.950033][T11497] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 829.982439][ T4315] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 830.310103][T11501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2008'. [ 830.463506][ T4315] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 830.707178][ T4315] usb 2-1: Using ep0 maxpacket: 32 [ 830.714512][ T4315] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 830.737851][ T4315] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 830.848534][ T4315] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 830.949476][ T4315] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 831.039266][ T4315] usb 2-1: config 0 interface 0 has no altsetting 0 [ 831.109597][ T4315] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 831.146357][ T4315] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 831.169816][ T4315] usb 2-1: Product: syz [ 831.181141][ T4315] usb 2-1: Manufacturer: syz [ 831.197747][ T4315] usb 2-1: SerialNumber: syz [ 831.226689][ T4315] usb 2-1: config 0 descriptor?? [ 831.255967][ T4315] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 831.329361][ T4315] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 831.433450][ T4314] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 831.462876][ T4351] usb 2-1: USB disconnect, device number 58 [ 831.477724][ T4351] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 831.653472][ T4314] usb 5-1: Using ep0 maxpacket: 16 [ 831.661713][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.707991][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.726388][ T4314] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 831.742376][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.760761][ T4314] usb 5-1: config 0 descriptor?? [ 831.955096][T11521] binder: BINDER_SET_CONTEXT_MGR already set [ 831.989254][T11521] binder: 11518:11521 ioctl 4018620d 200000000040 returned -16 [ 832.174321][ T4314] gt683r_led 0003:1770:FF00.002B: unbalanced delimiter at end of report description [ 832.671312][ T27] audit: type=1326 audit(1771605785.657:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 832.750859][ T4314] gt683r_led 0003:1770:FF00.002B: hid parsing failed [ 832.781934][ T4314] gt683r_led: probe of 0003:1770:FF00.002B failed with error -22 [ 832.801528][ T27] audit: type=1326 audit(1771605785.657:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 832.910651][ T27] audit: type=1326 audit(1771605785.657:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 833.024237][ T27] audit: type=1326 audit(1771605785.657:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 833.134730][ T27] audit: type=1326 audit(1771605785.657:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 833.259063][ T27] audit: type=1326 audit(1771605785.657:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 833.441443][ T27] audit: type=1326 audit(1771605785.697:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 833.610924][ T27] audit: type=1326 audit(1771605785.697:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11506 comm="syz.4.2010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 834.405362][T11546] netlink: 'syz.3.2018': attribute type 4 has an invalid length. [ 834.489452][T11547] netlink: 'syz.3.2018': attribute type 4 has an invalid length. [ 834.970730][T11557] input: syz0 as /devices/virtual/input/input18 [ 835.421287][ T26] usb 5-1: USB disconnect, device number 47 [ 835.650685][T11564] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 835.654132][ T4312] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 835.853670][ T4315] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 835.873658][ T4312] usb 3-1: Using ep0 maxpacket: 8 [ 835.950952][ T4312] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 836.043758][ T4315] usb 2-1: Using ep0 maxpacket: 32 [ 836.057522][ T4315] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 836.066880][ T4315] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 836.079057][ T4315] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 836.091066][ T4315] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 836.173654][ T4315] usb 2-1: config 0 interface 0 has no altsetting 0 [ 836.201560][ T4315] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 836.211627][ T4315] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 836.220308][ T4315] usb 2-1: Product: syz [ 836.228490][ T4315] usb 2-1: Manufacturer: syz [ 836.233230][ T4315] usb 2-1: SerialNumber: syz [ 836.287131][ T4315] usb 2-1: config 0 descriptor?? [ 836.291195][ T4312] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 836.314609][ T4315] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 836.349071][ T4315] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 836.529628][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.572114][ T4312] usb 3-1: Product: syz [ 836.612964][ T4312] usb 3-1: Manufacturer: syz [ 836.623730][ T4312] usb 3-1: SerialNumber: syz [ 836.663972][ T4312] usb 3-1: config 0 descriptor?? [ 836.686464][ T4314] usb 2-1: USB disconnect, device number 59 [ 836.705459][ T4312] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 836.714740][ T4314] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 836.739024][ T4312] usb 3-1: setting power ON [ 836.762674][ T4312] dvb-usb: bulk message failed: -22 (2/0) [ 836.784183][ T4312] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 836.809900][ T4312] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 836.828150][ T4312] usb 3-1: media controller created [ 836.866633][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 836.904378][T11562] dvb-usb: bulk message failed: -22 (3/0) [ 836.921603][ T4312] usb 3-1: selecting invalid altsetting 6 [ 836.940346][ T4312] usb 3-1: digital interface selection failed (-22) [ 836.947487][ T4312] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 836.984296][ T4312] usb 3-1: setting power OFF [ 836.996207][ T4312] dvb-usb: bulk message failed: -22 (2/0) [ 837.016161][ T4312] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 837.045591][ T4312] (NULL device *): no alternate interface [ 837.103691][ T4314] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 837.143240][ T4312] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 837.208811][ T4312] usb 3-1: USB disconnect, device number 43 [ 837.343524][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 837.354620][ T4314] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 837.373075][ T4314] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 837.405591][ T4314] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 837.447570][ T4314] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 837.513425][ T4314] usb 2-1: config 0 interface 0 has no altsetting 0 [ 837.545830][ T4314] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 837.563508][ T4314] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 837.593411][ T4314] usb 2-1: Product: syz [ 837.597687][ T4314] usb 2-1: Manufacturer: syz [ 837.602318][ T4314] usb 2-1: SerialNumber: syz [ 837.606667][T11590] program syz.0.2030 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 837.635083][ T4314] usb 2-1: config 0 descriptor?? [ 837.655212][T11590] netlink: 'syz.0.2030': attribute type 10 has an invalid length. [ 837.670260][ T4314] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 837.716553][ T4314] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 837.859611][ T4315] usb 2-1: USB disconnect, device number 60 [ 837.877554][ T4315] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 838.260276][T11606] binder: BINDER_SET_CONTEXT_MGR already set [ 838.267970][T11606] binder: 11597:11606 ioctl 4018620d 200000000040 returned -16 [ 839.363475][ T4351] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 839.673593][ T4351] usb 2-1: Using ep0 maxpacket: 16 [ 839.690853][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.731310][ T4351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.759634][ T4351] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 839.802584][ T4351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.884462][ T4351] usb 2-1: config 0 descriptor?? [ 840.319226][ T4351] gt683r_led 0003:1770:FF00.002C: unbalanced delimiter at end of report description [ 840.484291][ T4351] gt683r_led 0003:1770:FF00.002C: hid parsing failed [ 840.491155][ T4351] gt683r_led: probe of 0003:1770:FF00.002C failed with error -22 [ 840.536437][ T27] audit: type=1326 audit(1771605793.527:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 840.610172][ T27] audit: type=1326 audit(1771605793.547:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 840.723503][ T27] audit: type=1326 audit(1771605793.557:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 840.852952][ T27] audit: type=1326 audit(1771605793.557:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 840.881501][ T27] audit: type=1326 audit(1771605793.557:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 841.064291][ T27] audit: type=1326 audit(1771605793.557:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 841.098454][ T27] audit: type=1326 audit(1771605793.557:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 841.433696][ T27] audit: type=1326 audit(1771605793.557:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11611 comm="syz.1.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 841.850064][T11636] program syz.0.2043 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 842.120929][T11636] netlink: 'syz.0.2043': attribute type 10 has an invalid length. [ 842.416608][T11646] input: syz0 as /devices/virtual/input/input19 [ 842.648658][ T4359] usb 2-1: USB disconnect, device number 61 [ 842.997609][T11660] netlink: 'syz.3.2048': attribute type 4 has an invalid length. [ 843.011818][T11659] binder: BINDER_SET_CONTEXT_MGR already set [ 843.026878][T11659] binder: 11654:11659 ioctl 4018620d 200000000040 returned -16 [ 843.129936][T11661] netlink: 'syz.3.2048': attribute type 4 has an invalid length. [ 845.724870][T11672] tipc: Enabling of bearer rejected, failed to enable media [ 845.801571][T11677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2053'. [ 845.866832][T11675] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 846.019785][T11684] program syz.2.2056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 846.156071][T11684] netlink: 'syz.2.2056': attribute type 10 has an invalid length. [ 846.213524][T11684] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 846.368585][ T27] audit: type=1326 audit(1771605799.357:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11689 comm="syz.4.2058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f746259c629 code=0x0 [ 846.678091][T11707] input: syz0 as /devices/virtual/input/input20 [ 846.883575][ T4312] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 847.093683][ T4312] usb 2-1: Using ep0 maxpacket: 16 [ 847.105860][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.232083][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 847.303793][ T4312] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 847.330657][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.375391][ T4312] usb 2-1: config 0 descriptor?? [ 847.816428][ T4312] gt683r_led 0003:1770:FF00.002D: unbalanced delimiter at end of report description [ 847.849870][ T4312] gt683r_led 0003:1770:FF00.002D: hid parsing failed [ 847.891772][ T4312] gt683r_led: probe of 0003:1770:FF00.002D failed with error -22 [ 848.018961][ T27] audit: type=1326 audit(1771605801.007:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11693 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 848.162699][ T27] audit: type=1326 audit(1771605801.037:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11693 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 848.246830][ T27] audit: type=1326 audit(1771605801.037:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11693 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 848.381206][ T27] audit: type=1326 audit(1771605801.037:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11693 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 848.472718][ T27] audit: type=1326 audit(1771605801.037:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11693 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 848.547099][ T27] audit: type=1326 audit(1771605801.047:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11693 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 848.681317][ T27] audit: type=1326 audit(1771605801.047:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11693 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 848.829281][ T27] audit: type=1326 audit(1771605801.047:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11693 comm="syz.1.2059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 849.233496][T11301] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 849.441761][T11301] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 849.468384][T11301] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.532265][T11301] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 849.566311][T11301] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 849.596334][T11301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.620714][T11301] usb 4-1: config 0 descriptor?? [ 849.648211][T11301] usbhid 4-1:0.0: can't add hid device: -22 [ 849.676816][T11301] usbhid: probe of 4-1:0.0 failed with error -22 [ 850.609806][T11723] binder: 11718:11723 ioctl 4018620d 0 returned -22 [ 851.068117][ T4351] usb 2-1: USB disconnect, device number 62 [ 851.832481][T11739] program syz.1.2070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 851.943678][T11739] netlink: 'syz.1.2070': attribute type 10 has an invalid length. [ 853.323249][ T4314] usb 4-1: USB disconnect, device number 31 [ 853.491903][T11751] input: syz0 as /devices/virtual/input/input21 [ 854.688940][T11768] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 855.241708][T11776] program syz.1.2081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 855.338741][T11776] netlink: 'syz.1.2081': attribute type 10 has an invalid length. [ 857.544639][ T4359] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 857.830756][ T4359] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.872134][ T4359] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 857.999457][ T4359] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.187305][ T4359] usb 2-1: config 0 descriptor?? [ 858.251859][ T4359] usbhid 2-1:0.0: can't add hid device: -22 [ 858.285010][ T4359] usbhid: probe of 2-1:0.0 failed with error -22 [ 859.241527][T11814] program syz.2.2092 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 859.282457][T11814] netlink: 'syz.2.2092': attribute type 10 has an invalid length. [ 861.366753][ T6604] usb 2-1: USB disconnect, device number 63 [ 861.436886][T11833] binder: 11830:11833 ioctl 4018620d 0 returned -22 [ 863.892281][T11859] program syz.1.2105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 863.943767][T11857] netlink: 'syz.1.2105': attribute type 10 has an invalid length. [ 865.575974][T11879] fuse: Unknown parameter '0x000000000000000501777777777777777777777' [ 867.118903][T11899] program syz.4.2119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 867.181683][T11899] netlink: 'syz.4.2119': attribute type 10 has an invalid length. [ 867.674453][ T4351] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 868.344357][ T4351] usb 3-1: Using ep0 maxpacket: 32 [ 868.381447][ T4351] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 868.408924][ T4351] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 868.420540][ T4351] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 868.466169][ T4351] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 868.499935][ T4351] usb 3-1: config 0 interface 0 has no altsetting 0 [ 868.543575][ T4351] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 868.561048][ T4351] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 868.580935][ T4351] usb 3-1: Product: syz [ 868.591483][ T4351] usb 3-1: Manufacturer: syz [ 868.612821][ T4351] usb 3-1: SerialNumber: syz [ 868.631851][ T4351] usb 3-1: config 0 descriptor?? [ 868.641755][ T4351] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 868.673074][ T4351] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 868.927500][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 868.933605][ T4351] usb 3-1: USB disconnect, device number 44 [ 868.943172][T11904] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 869.400050][ T4351] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 869.859528][T11924] netlink: 'syz.0.2127': attribute type 4 has an invalid length. [ 869.945210][T11926] netlink: 'syz.0.2127': attribute type 4 has an invalid length. [ 870.296116][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.304225][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.653497][ T26] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 871.203662][T11936] program syz.2.2131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 871.244292][T11936] netlink: 'syz.2.2131': attribute type 10 has an invalid length. [ 872.510373][T11953] fuse: Unknown parameter '0x000000000000000500000000000000000000000' [ 873.224583][T11965] netlink: 'syz.2.2138': attribute type 4 has an invalid length. [ 873.353186][T11967] netlink: 'syz.1.2139': attribute type 4 has an invalid length. [ 873.731184][T11969] netlink: 'syz.1.2139': attribute type 4 has an invalid length. [ 873.813560][ T127] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 873.945173][ T27] audit: type=1800 audit(1771605826.937:163): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2140" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 874.003472][ T127] usb 3-1: Using ep0 maxpacket: 32 [ 874.010476][ T127] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 874.106981][ T127] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 874.139109][ T127] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 874.213610][ T127] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 874.281499][ T127] usb 3-1: config 0 interface 0 has no altsetting 0 [ 874.344476][ T127] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 874.414514][ T127] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 874.443511][ T127] usb 3-1: Product: syz [ 874.463516][ T127] usb 3-1: Manufacturer: syz [ 874.490038][ T127] usb 3-1: SerialNumber: syz [ 874.525154][ T127] usb 3-1: config 0 descriptor?? [ 874.544871][ T127] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 874.595270][ T127] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 874.856059][ T4312] usb 3-1: USB disconnect, device number 46 [ 874.856263][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 874.902255][T11972] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 874.967729][ T4312] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 875.436974][T11990] program syz.4.2144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 876.483480][ T127] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 880.407865][T11990] netlink: 'syz.4.2144': attribute type 10 has an invalid length. [ 880.697322][T12027] netlink: 'syz.3.2151': attribute type 4 has an invalid length. [ 880.808257][T12034] netlink: 'syz.0.2152': attribute type 4 has an invalid length. [ 881.008589][T12043] netlink: 'syz.0.2152': attribute type 4 has an invalid length. [ 881.271053][T12047] fuse: Unknown parameter '0x000000000000000500000000000000000000000' [ 883.010622][T12062] program syz.3.2160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 883.074262][T12062] netlink: 'syz.3.2160': attribute type 10 has an invalid length. [ 884.104508][T12069] netlink: 'syz.0.2165': attribute type 4 has an invalid length. [ 884.454630][T12077] device syzkaller0 entered promiscuous mode [ 885.271506][T12093] program syz.3.2172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 885.308696][T12085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2168'. [ 885.334880][T12093] netlink: 'syz.3.2172': attribute type 10 has an invalid length. [ 885.768792][T12099] netlink: 'syz.1.2171': attribute type 4 has an invalid length. [ 886.324039][T12105] netlink: 'syz.1.2171': attribute type 4 has an invalid length. [ 886.613235][T12113] netlink: 'syz.3.2175': attribute type 4 has an invalid length. [ 886.756394][T12117] netlink: 'syz.0.2177': attribute type 4 has an invalid length. [ 886.843516][T12122] netlink: 'syz.3.2175': attribute type 4 has an invalid length. [ 888.222086][T12144] fuse: Unknown parameter '0x000000000000000501777777777777777777777' [ 889.810364][T12154] program syz.4.2185 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 889.870041][T12154] netlink: 'syz.4.2185': attribute type 10 has an invalid length. [ 890.420112][T12164] netlink: 'syz.2.2188': attribute type 4 has an invalid length. [ 891.551421][T12182] input: syz0 as /devices/virtual/input/input22 [ 891.739123][T12189] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 891.833602][ T4351] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 891.918270][ T27] audit: type=1326 audit(1771605844.907:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.1.2196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe2b999c629 code=0x0 [ 892.044151][ T4351] usb 3-1: Using ep0 maxpacket: 16 [ 892.062738][ T4351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.594116][ T4351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.700147][ T4351] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 892.719478][ T4351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.781407][ T4351] usb 3-1: config 0 descriptor?? [ 893.262115][ T4351] gt683r_led 0003:1770:FF00.002E: unbalanced delimiter at end of report description [ 893.308904][T12203] netlink: 'syz.1.2201': attribute type 4 has an invalid length. [ 893.368913][ T4351] gt683r_led 0003:1770:FF00.002E: hid parsing failed [ 893.439613][ T4351] gt683r_led: probe of 0003:1770:FF00.002E failed with error -22 [ 893.489744][ T27] audit: type=1326 audit(1771605846.477:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 893.537857][ T27] audit: type=1326 audit(1771605846.507:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 893.560324][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.668021][ T27] audit: type=1326 audit(1771605846.507:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 893.696581][ T27] audit: type=1326 audit(1771605846.507:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 893.725305][ T27] audit: type=1326 audit(1771605846.507:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 893.769407][ T27] audit: type=1326 audit(1771605846.507:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 893.954407][ T27] audit: type=1326 audit(1771605846.517:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12173 comm="syz.2.2193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 893.976978][ C1] vkms_vblank_simulate: vblank timer overrun [ 894.814767][T12223] fuse: Unknown parameter '0x000000000000000501777777777777777777777' [ 895.980492][ T4351] usb 3-1: USB disconnect, device number 48 [ 896.561619][T12253] input: syz0 as /devices/virtual/input/input23 [ 898.687562][T12272] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 898.718251][ T27] audit: type=1326 audit(1771605851.707:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12268 comm="syz.0.2223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bc2b9c629 code=0x0 [ 899.613427][ T4312] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 899.652169][T12294] ptrace attach of "./syz-executor exec"[4275] was attempted by "./syz-executor exec"[12294] [ 899.823732][ T4312] usb 2-1: Using ep0 maxpacket: 16 [ 899.834840][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.909395][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 899.947436][ T4312] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 899.991516][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.078434][ T4312] usb 2-1: config 0 descriptor?? [ 900.512416][ T4312] gt683r_led 0003:1770:FF00.002F: unbalanced delimiter at end of report description [ 900.548197][ T4312] gt683r_led 0003:1770:FF00.002F: hid parsing failed [ 900.589046][ T4312] gt683r_led: probe of 0003:1770:FF00.002F failed with error -22 [ 900.743914][ T4315] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 900.973483][ T4315] usb 4-1: Using ep0 maxpacket: 8 [ 900.987783][ T4315] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 901.013795][ T4315] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 901.023163][ T4315] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 901.034851][ T4315] usb 4-1: config 0 has no interface number 0 [ 901.070265][ T4315] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 901.083854][ T4315] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 901.108347][ T4315] usb 4-1: config 0 interface 255 has no altsetting 0 [ 901.135220][ T4315] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 901.145332][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 901.153588][ T4315] usb 4-1: Product: syz [ 901.245524][ T4315] usb 4-1: config 0 descriptor?? [ 901.258043][ T27] audit: type=1326 audit(1771605854.247:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12278 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 901.389074][ T27] audit: type=1326 audit(1771605854.267:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12278 comm="syz.1.2225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 902.163108][ T4315] usb 4-1: USB disconnect, device number 32 [ 902.486827][T12319] fuse: Unknown parameter '0x000000000000000500000000000000000000000' [ 902.702008][T12325] input: syz0 as /devices/virtual/input/input24 [ 903.862734][ T4312] usb 2-1: USB disconnect, device number 64 [ 904.318414][T12336] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 905.690366][T12356] input: syz0 as /devices/virtual/input/input25 [ 906.133691][ T4359] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 906.347315][ T4359] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 906.519647][ T4359] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 906.530813][T12366] program syz.2.2251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.563803][ T4359] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 906.583168][T12367] netlink: 'syz.2.2251': attribute type 10 has an invalid length. [ 906.602740][ T4359] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 906.683373][ T4359] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 906.723490][ T4359] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 906.743692][ T4359] usb 2-1: Product: syz [ 906.747942][ T4359] usb 2-1: Manufacturer: syz [ 906.799811][ T4359] cdc_wdm 2-1:1.0: skipping garbage [ 906.813586][ T4359] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 906.820806][T12371] netlink: 'syz.2.2253': attribute type 4 has an invalid length. [ 907.163279][ T4351] usb 2-1: USB disconnect, device number 65 [ 907.492689][T12386] netlink: 'syz.0.2257': attribute type 4 has an invalid length. [ 907.670296][T12388] netlink: 'syz.0.2257': attribute type 4 has an invalid length. [ 907.893632][ T4359] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 907.939597][T12390] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 908.093442][ T4359] usb 4-1: Using ep0 maxpacket: 16 [ 908.120311][ T4359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.185021][ T4359] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.418618][ T4359] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 908.478271][T12401] input: syz0 as /devices/virtual/input/input26 [ 908.499359][ T4359] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.545010][ T4359] usb 4-1: config 0 descriptor?? [ 908.992022][ T4359] gt683r_led 0003:1770:FF00.0030: unbalanced delimiter at end of report description [ 909.020756][ T4359] gt683r_led 0003:1770:FF00.0030: hid parsing failed [ 909.050685][ T4359] gt683r_led: probe of 0003:1770:FF00.0030 failed with error -22 [ 909.194481][T12406] program syz.2.2263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 909.228937][ T27] audit: type=1326 audit(1771605862.217:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 909.254060][T12407] netlink: 'syz.2.2263': attribute type 10 has an invalid length. [ 909.292586][ T27] audit: type=1326 audit(1771605862.227:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 909.469327][ T27] audit: type=1326 audit(1771605862.257:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 909.573590][ T27] audit: type=1326 audit(1771605862.257:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 909.653572][ T27] audit: type=1326 audit(1771605862.257:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 909.774258][ T27] audit: type=1326 audit(1771605862.257:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 909.932750][ T27] audit: type=1326 audit(1771605862.257:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 910.031976][ T27] audit: type=1326 audit(1771605862.257:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12377 comm="syz.3.2255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 910.124204][T12419] netlink: 'syz.0.2266': attribute type 4 has an invalid length. [ 911.279512][T12439] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 911.390364][ T6604] usb 4-1: USB disconnect, device number 33 [ 911.638225][T12443] input: syz0 as /devices/virtual/input/input27 [ 911.847699][ T27] audit: type=1326 audit(1771605864.837:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12444 comm="syz.3.2274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe2d19c629 code=0x0 [ 911.869903][ C0] vkms_vblank_simulate: vblank timer overrun [ 911.993521][T12451] program syz.1.2275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 912.028103][T12451] netlink: 'syz.1.2275': attribute type 10 has an invalid length. [ 912.367682][T12456] netlink: 'syz.4.2276': attribute type 4 has an invalid length. [ 912.548512][T12460] netlink: 'syz.4.2276': attribute type 4 has an invalid length. [ 912.693936][T12464] netlink: 'syz.3.2278': attribute type 4 has an invalid length. [ 914.260660][T12486] program syz.3.2287 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 914.319766][T12486] netlink: 'syz.3.2287': attribute type 10 has an invalid length. [ 914.710890][T12495] device syzkaller0 entered promiscuous mode [ 914.743505][T11301] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 914.751772][T12497] netlink: 'syz.3.2289': attribute type 4 has an invalid length. [ 914.943579][T11301] usb 2-1: Using ep0 maxpacket: 16 [ 914.956406][T11301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.988862][T11301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.001584][T11301] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 915.031702][T11301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.061584][T11301] usb 2-1: config 0 descriptor?? [ 915.493471][T11301] gt683r_led 0003:1770:FF00.0031: unbalanced delimiter at end of report description [ 915.527357][T11301] gt683r_led 0003:1770:FF00.0031: hid parsing failed [ 915.575536][T11301] gt683r_led: probe of 0003:1770:FF00.0031 failed with error -22 [ 915.726134][ T27] audit: type=1326 audit(1771605868.717:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 915.850109][ T27] audit: type=1326 audit(1771605868.737:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 915.962500][ T27] audit: type=1326 audit(1771605868.747:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 916.052949][ T27] audit: type=1326 audit(1771605868.747:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 916.163108][ T27] audit: type=1326 audit(1771605868.747:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 916.268095][ T27] audit: type=1326 audit(1771605868.747:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 916.348664][ T27] audit: type=1326 audit(1771605868.747:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 916.453079][ T27] audit: type=1326 audit(1771605868.747:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 916.673893][T12518] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 4, id = 0 [ 916.952247][T12524] program syz.0.2299 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.017593][T12524] netlink: 'syz.0.2299': attribute type 10 has an invalid length. [ 917.186601][T12531] netlink: 'syz.4.2300': attribute type 4 has an invalid length. [ 917.369427][T12535] netlink: 'syz.4.2300': attribute type 4 has an invalid length. [ 918.705533][ T4351] usb 2-1: USB disconnect, device number 66 [ 918.773784][T12554] netlink: 'syz.2.2307': attribute type 4 has an invalid length. [ 919.003480][T12560] program syz.1.2312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 919.021602][T12558] netlink: 'syz.2.2307': attribute type 4 has an invalid length. [ 919.104490][T12560] netlink: 'syz.1.2312': attribute type 10 has an invalid length. [ 919.880323][ T27] audit: type=1326 audit(1771605872.867:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12578 comm="syz.0.2318" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bc2b9c629 code=0x0 [ 920.644679][T12587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 921.641059][T12604] program syz.3.2324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 921.706315][T12604] netlink: 'syz.3.2324': attribute type 10 has an invalid length. [ 922.613029][T12617] netlink: 'syz.3.2327': attribute type 4 has an invalid length. [ 922.958302][T12620] netlink: 'syz.3.2327': attribute type 4 has an invalid length. [ 923.973537][ T6604] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 924.173456][ T6604] usb 5-1: Using ep0 maxpacket: 8 [ 924.194959][ T6604] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 924.240518][ T6604] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 924.270986][ T6604] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.288362][ T6604] usb 5-1: Product: syz [ 924.292965][ T6604] usb 5-1: Manufacturer: syz [ 924.305161][ T6604] usb 5-1: SerialNumber: syz [ 924.351108][ T6604] usb 5-1: config 0 descriptor?? [ 924.400122][ T6604] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 924.943567][ T6604] usb 5-1: setting power ON [ 924.963655][ T6604] dvb-usb: bulk message failed: -22 (2/0) [ 924.996560][ T6604] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 925.051933][ T6604] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 925.091716][ T6604] usb 5-1: media controller created [ 925.169695][ T6604] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 925.250316][T12639] program syz.2.2335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 925.275543][ T6604] usb 5-1: selecting invalid altsetting 6 [ 925.281458][ T6604] usb 5-1: digital interface selection failed (-22) [ 925.325474][ T6604] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 925.337519][T12639] netlink: 'syz.2.2335': attribute type 10 has an invalid length. [ 925.378845][ T6604] usb 5-1: setting power OFF [ 925.393688][ T6604] dvb-usb: bulk message failed: -22 (2/0) [ 925.413606][ T6604] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 925.454966][ T6604] (NULL device *): no alternate interface [ 925.598811][ T6604] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 925.697335][ T6604] usb 5-1: USB disconnect, device number 48 [ 926.343940][T12648] syz.2.2337 (12648): drop_caches: 2 [ 927.173963][ T4411] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 927.233247][ T27] audit: type=1800 audit(1771605880.217:193): pid=12668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2341" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 927.389734][ T4411] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD4, skipping [ 927.457327][ T4411] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 927.493600][ T4411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.536535][ T4411] usb 3-1: Product: syz [ 927.557806][ T4411] usb 3-1: Manufacturer: syz [ 927.612098][ T4411] usb 3-1: SerialNumber: syz [ 927.664017][ T4411] usb 3-1: config 0 descriptor?? [ 927.699245][T12665] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 927.726827][ T4411] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 927.772083][ T9134] udevd[9134]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.757863][T12665] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2340'. [ 929.223029][T12685] netlink: 'syz.1.2346': attribute type 4 has an invalid length. [ 929.298331][T12687] program syz.0.2347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 929.348283][T12687] netlink: 'syz.0.2347': attribute type 10 has an invalid length. [ 929.376674][T12690] netlink: 'syz.1.2346': attribute type 4 has an invalid length. [ 929.581556][T12693] Cannot find del_set index 4 as target [ 931.373653][ T7] usb 3-1: USB disconnect, device number 49 [ 931.648125][T12716] binder: 12711:12716 ioctl 4018620d 0 returned -22 [ 931.736386][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.742878][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.551444][ T27] audit: type=1800 audit(1771605885.537:194): pid=12726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2357" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 932.790430][T12728] program syz.3.2359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 932.864475][T12728] netlink: 'syz.3.2359': attribute type 10 has an invalid length. [ 933.373606][T12734] ptrace attach of "./syz-executor exec"[4280] was attempted by "./syz-executor exec"[12734] [ 934.231992][T12747] netlink: 'syz.0.2365': attribute type 4 has an invalid length. [ 934.511896][T12754] netlink: 'syz.0.2365': attribute type 4 has an invalid length. [ 935.562839][T12763] program syz.1.2370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 935.619096][T12764] netlink: 'syz.1.2370': attribute type 10 has an invalid length. [ 936.233618][ T127] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 936.423609][ T127] usb 2-1: Using ep0 maxpacket: 16 [ 936.430995][ T127] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 254, using maximum allowed: 30 [ 936.483657][ T127] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.546869][ T127] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 936.603511][ T127] usb 2-1: config 0 interface 0 has no altsetting 0 [ 936.610184][ T127] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 936.652208][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.689197][ T127] usb 2-1: config 0 descriptor?? [ 936.744299][T12772] binder: 12769:12772 ioctl 4018620d 0 returned -22 [ 936.914320][ T127] usbhid 2-1:0.0: can't add hid device: -71 [ 936.938719][ T127] usbhid: probe of 2-1:0.0 failed with error -71 [ 936.979335][ T127] usb 2-1: USB disconnect, device number 67 [ 937.129897][ T27] audit: type=1326 audit(1771605890.107:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc2b9c629 code=0x7ffc0000 [ 937.197868][ T27] audit: type=1326 audit(1771605890.177:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0bc2b9c629 code=0x7ffc0000 [ 937.344036][ T27] audit: type=1326 audit(1771605890.177:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc2b9c629 code=0x7ffc0000 [ 937.423680][ T27] audit: type=1326 audit(1771605890.177:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc2b9c629 code=0x7ffc0000 [ 937.716533][ T27] audit: type=1326 audit(1771605890.217:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f0bc2b9c629 code=0x7ffc0000 [ 937.928678][ T27] audit: type=1326 audit(1771605890.217:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc2b9c629 code=0x7ffc0000 [ 938.129827][ T27] audit: type=1326 audit(1771605890.247:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc2b9c629 code=0x7ffc0000 [ 938.312859][ T27] audit: type=1326 audit(1771605890.297:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0bc2b9c629 code=0x7ffc0000 [ 938.373768][ T6604] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 938.433002][ T27] audit: type=1326 audit(1771605890.297:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc2b9c629 code=0x7ffc0000 [ 938.604226][ T6604] usb 2-1: Using ep0 maxpacket: 16 [ 938.615566][ T6604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.665218][ T6604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.693503][ T27] audit: type=1326 audit(1771605890.297:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12773 comm="syz.0.2373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bc2b9c629 code=0x7ffc0000 [ 938.716481][ T6604] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 938.789336][ T6604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.883739][ T6604] usb 2-1: config 0 descriptor?? [ 939.294890][ T6604] gt683r_led 0003:1770:FF00.0032: unbalanced delimiter at end of report description [ 939.404298][ T6604] gt683r_led 0003:1770:FF00.0032: hid parsing failed [ 939.500932][ T6604] gt683r_led: probe of 0003:1770:FF00.0032 failed with error -22 [ 939.520107][ T27] audit: type=1326 audit(1771605892.507:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12781 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 939.626797][ T27] audit: type=1326 audit(1771605892.527:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12781 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 940.225149][ T27] audit: type=1326 audit(1771605892.527:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12781 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 940.248365][ T27] audit: type=1326 audit(1771605892.527:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12781 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 940.618833][T12805] device syzkaller0 entered promiscuous mode [ 940.867038][T12809] netlink: 'syz.2.2384': attribute type 4 has an invalid length. [ 941.220681][T12826] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 941.241477][T12826] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 941.270527][T12821] ptrace attach of "./syz-executor exec"[4277] was attempted by "./syz-executor exec"[12821] [ 941.927825][T12838] binder: 12833:12838 ioctl 4018620d 0 returned -22 [ 942.126478][ T4411] usb 2-1: USB disconnect, device number 68 [ 943.883960][T12845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2393'. [ 944.244906][T12848] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 944.332574][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 944.332591][ T27] audit: type=1326 audit(1771605897.317:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12847 comm="syz.4.2394" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f746259c629 code=0x0 [ 945.293937][T12866] netlink: 'syz.3.2399': attribute type 4 has an invalid length. [ 945.351245][T12869] netlink: 'syz.0.2396': attribute type 4 has an invalid length. [ 945.642391][T12867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2400'. [ 945.693506][T12873] netlink: 'syz.0.2396': attribute type 4 has an invalid length. [ 946.223849][ T4411] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 946.424136][ T4411] usb 4-1: Using ep0 maxpacket: 16 [ 946.436065][ T4411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.510461][ T4411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.581064][ T4411] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 946.642773][ T4411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.710559][ T4411] usb 4-1: config 0 descriptor?? [ 947.558963][ T4411] gt683r_led 0003:1770:FF00.0033: unbalanced delimiter at end of report description [ 947.579313][ T4411] gt683r_led 0003:1770:FF00.0033: hid parsing failed [ 947.624514][ T4411] gt683r_led: probe of 0003:1770:FF00.0033 failed with error -22 [ 947.781296][ T27] audit: type=1326 audit(1771605900.767:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.3.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 947.882951][ T27] audit: type=1326 audit(1771605900.807:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.3.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 947.994451][ T27] audit: type=1326 audit(1771605900.817:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.3.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 948.077194][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2405'. [ 948.121494][ T27] audit: type=1326 audit(1771605900.817:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.3.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 948.248556][ T27] audit: type=1326 audit(1771605900.817:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.3.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 948.337573][ T27] audit: type=1326 audit(1771605900.827:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.3.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 948.475939][ T27] audit: type=1326 audit(1771605900.827:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.3.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 948.602364][T12902] program syz.2.2409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 948.620040][ T27] audit: type=1326 audit(1771605900.827:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12875 comm="syz.3.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 948.651874][T12902] netlink: 'syz.2.2409': attribute type 10 has an invalid length. [ 948.920826][T12906] binder: BINDER_SET_CONTEXT_MGR already set [ 948.939412][T12906] binder: 12899:12906 ioctl 4018620d 200000000040 returned -16 [ 949.519785][T12922] fuse: Unknown parameter '0x000000000000000500000000000000000000000' [ 950.429295][ T4312] usb 4-1: USB disconnect, device number 34 [ 950.804468][T12930] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 950.824149][T12933] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2418'. [ 950.861267][ T27] audit: type=1326 audit(1771605903.847:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12929 comm="syz.3.2417" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe2d19c629 code=0x0 [ 951.430028][T12942] netlink: 'syz.0.2419': attribute type 4 has an invalid length. [ 951.722616][T12943] netlink: 'syz.0.2419': attribute type 4 has an invalid length. [ 953.017800][T12955] input: syz0 as /devices/virtual/input/input28 [ 953.263581][ T26] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 953.464854][ T26] usb 3-1: Using ep0 maxpacket: 32 [ 953.479819][ T26] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 953.573505][ T26] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 953.616933][ T26] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 953.659247][ T26] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 953.714785][ T26] usb 3-1: config 0 interface 0 has no altsetting 0 [ 953.738348][ T26] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 953.778439][ T26] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 953.799018][ T26] usb 3-1: Product: syz [ 953.827592][ T26] usb 3-1: Manufacturer: syz [ 953.846862][ T26] usb 3-1: SerialNumber: syz [ 953.881003][ T26] usb 3-1: config 0 descriptor?? [ 953.915128][ T26] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 953.978895][ T26] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 954.337768][ T26] usb 3-1: USB disconnect, device number 50 [ 954.344394][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 954.354310][T12957] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 954.412406][ T26] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 954.432869][T12959] ldusb: No device or device unplugged -19 [ 955.409298][T12971] ptrace attach of "./syz-executor exec"[4280] was attempted by "./syz-executor exec"[12971] [ 956.673666][ T6604] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 956.944221][ T6604] usb 2-1: Using ep0 maxpacket: 16 [ 956.956581][ T6604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.997144][ T6604] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.030427][T12987] binder: BINDER_SET_CONTEXT_MGR already set [ 957.037467][T12987] binder: 12984:12987 ioctl 4018620d 200000000040 returned -16 [ 957.057217][ T6604] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 957.117081][ T6604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.195848][ T6604] usb 2-1: config 0 descriptor?? [ 957.652468][ T6604] gt683r_led 0003:1770:FF00.0034: unbalanced delimiter at end of report description [ 957.706213][ T6604] gt683r_led 0003:1770:FF00.0034: hid parsing failed [ 957.784743][ T6604] gt683r_led: probe of 0003:1770:FF00.0034 failed with error -22 [ 957.865167][ T27] audit: type=1326 audit(1771605910.857:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 958.286696][ T27] audit: type=1326 audit(1771605910.867:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 958.481770][ T27] audit: type=1326 audit(1771605910.867:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 958.525014][ T27] audit: type=1326 audit(1771605910.867:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 958.614571][ T27] audit: type=1326 audit(1771605910.867:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 958.753949][ T27] audit: type=1326 audit(1771605910.867:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 958.823834][ T27] audit: type=1326 audit(1771605910.897:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12973 comm="syz.1.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 958.977680][T12999] netlink: 'syz.4.2434': attribute type 4 has an invalid length. [ 959.234008][T13002] netlink: 'syz.4.2434': attribute type 4 has an invalid length. [ 960.180839][ T1191] usb 2-1: USB disconnect, device number 69 [ 960.425031][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2439'. [ 960.753585][ T7] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 960.953463][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 960.962210][ T7] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 961.024100][ T7] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 961.090913][ T7] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 961.125908][ T7] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 961.169844][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 961.210187][ T7] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 961.240389][ T7] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 961.291661][ T7] usb 2-1: Product: syz [ 961.300582][ T7] usb 2-1: Manufacturer: syz [ 961.329801][ T7] usb 2-1: SerialNumber: syz [ 961.362234][ T7] usb 2-1: config 0 descriptor?? [ 961.387349][T13031] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 961.402153][ T7] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 961.425106][ T27] audit: type=1326 audit(1771605914.417:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13022 comm="syz.0.2441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bc2b9c629 code=0x0 [ 961.480066][ T7] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 961.942855][T13020] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 961.951073][ C0] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 961.968298][ T6604] usb 2-1: USB disconnect, device number 70 [ 962.021334][ T6604] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 964.330012][T13071] binder: BINDER_SET_CONTEXT_MGR already set [ 964.336553][T13071] binder: 13065:13071 ioctl 4018620d 200000000040 returned -16 [ 964.351178][T13077] netlink: 'syz.0.2458': attribute type 4 has an invalid length. [ 964.518497][T13081] input: syz0 as /devices/virtual/input/input29 [ 964.743632][ T4312] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 965.083631][ T4312] usb 5-1: Using ep0 maxpacket: 16 [ 965.230252][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.424048][ T4312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.602473][ T4312] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 965.632781][ T4312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.685781][ T4312] usb 5-1: config 0 descriptor?? [ 966.134117][ T27] audit: type=1326 audit(1771605919.127:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13086 comm="syz.0.2460" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bc2b9c629 code=0x0 [ 966.297689][ T4312] gt683r_led 0003:1770:FF00.0035: unbalanced delimiter at end of report description [ 966.347329][ T4312] gt683r_led 0003:1770:FF00.0035: hid parsing failed [ 966.420681][ T4312] gt683r_led: probe of 0003:1770:FF00.0035 failed with error -22 [ 966.519265][ T27] audit: type=1326 audit(1771605919.507:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 966.628884][ T27] audit: type=1326 audit(1771605919.517:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 966.774487][ T27] audit: type=1326 audit(1771605919.537:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 966.910014][ T27] audit: type=1326 audit(1771605919.537:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 966.932795][ C1] vkms_vblank_simulate: vblank timer overrun [ 967.016516][ T27] audit: type=1326 audit(1771605919.537:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 967.074221][ T27] audit: type=1326 audit(1771605919.537:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 967.136200][T13099] netlink: 'syz.0.2462': attribute type 4 has an invalid length. [ 967.145220][T13099] netlink: 'syz.0.2462': attribute type 4 has an invalid length. [ 967.154744][ T27] audit: type=1326 audit(1771605919.547:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 967.184166][T13094] fuse: Unknown parameter '0x000000000000000501777777777777777777777' [ 967.249627][ T27] audit: type=1326 audit(1771605919.547:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13067 comm="syz.4.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 967.599558][T13102] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 968.053729][ T1191] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 968.263451][ T1191] usb 2-1: Using ep0 maxpacket: 32 [ 968.286952][ T1191] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 968.333584][ T1191] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 968.414353][ T1191] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 968.443599][ T1191] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 968.483519][ T1191] usb 2-1: config 0 interface 0 has no altsetting 0 [ 968.525543][ T1191] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 968.613398][ T1191] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 968.647921][ T1191] usb 2-1: Product: syz [ 968.658117][ T1191] usb 2-1: Manufacturer: syz [ 968.668728][ T1191] usb 2-1: SerialNumber: syz [ 968.724096][ T1191] usb 2-1: config 0 descriptor?? [ 968.753604][ T4312] usb 5-1: USB disconnect, device number 49 [ 968.761510][ T1191] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 968.846431][ T1191] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 969.095100][T13106] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 969.095532][ T4312] usb 2-1: USB disconnect, device number 71 [ 969.102501][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 969.565272][ T4312] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 969.596136][T13111] ldusb: No device or device unplugged -19 [ 970.211603][T13127] netlink: 'syz.0.2469': attribute type 4 has an invalid length. [ 971.108684][T13139] ptrace attach of "./syz-executor exec"[4277] was attempted by "./syz-executor exec"[13139] [ 971.440041][T13145] binder: BINDER_SET_CONTEXT_MGR already set [ 971.457708][T13145] binder: 13140:13145 ioctl 4018620d 200000000040 returned -16 [ 971.565713][ T127] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 971.823475][ T1191] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 972.023542][ T1191] usb 5-1: Using ep0 maxpacket: 16 [ 972.061016][ T1191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.268979][ T1191] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.493578][ T1191] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 972.560180][T13158] netlink: 'syz.3.2477': attribute type 4 has an invalid length. [ 972.573112][ T1191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.625352][ T1191] usb 5-1: config 0 descriptor?? [ 972.895540][T13160] netlink: 'syz.3.2477': attribute type 4 has an invalid length. [ 973.066247][ T1191] gt683r_led 0003:1770:FF00.0036: unbalanced delimiter at end of report description [ 973.091447][ T1191] gt683r_led 0003:1770:FF00.0036: hid parsing failed [ 973.139481][ T1191] gt683r_led: probe of 0003:1770:FF00.0036 failed with error -22 [ 973.263165][T13164] program syz.1.2478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 973.283786][ T27] audit: type=1326 audit(1771605926.277:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 973.315938][T13164] netlink: 'syz.1.2478': attribute type 10 has an invalid length. [ 973.339744][ T27] audit: type=1326 audit(1771605926.297:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 973.471487][ T27] audit: type=1326 audit(1771605926.297:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 973.573180][ T27] audit: type=1326 audit(1771605926.297:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 974.090073][ T27] audit: type=1326 audit(1771605926.297:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 974.330514][ T27] audit: type=1326 audit(1771605926.297:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 974.431097][ T27] audit: type=1326 audit(1771605926.297:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 974.463413][ T27] audit: type=1326 audit(1771605926.297:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13146 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f746259c629 code=0x7ffc0000 [ 974.659897][T13177] netlink: 'syz.0.2482': attribute type 4 has an invalid length. [ 975.528417][T13182] fuse: Unknown parameter '0x000000000000000500000000000000000000000' [ 976.060689][ T6604] usb 5-1: USB disconnect, device number 50 [ 976.357769][T13197] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 976.422847][ T27] audit: type=1326 audit(1771605929.407:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13196 comm="syz.4.2488" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f746259c629 code=0x0 [ 978.257127][T13218] netlink: 'syz.0.2494': attribute type 4 has an invalid length. [ 978.405823][T13220] binder: BINDER_SET_CONTEXT_MGR already set [ 978.415037][T13220] binder: 13215:13220 ioctl 4018620d 200000000040 returned -16 [ 979.686825][T13240] netlink: 'syz.3.2499': attribute type 4 has an invalid length. [ 979.867709][T13241] netlink: 'syz.3.2499': attribute type 4 has an invalid length. [ 981.441580][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2501'. [ 981.977945][T13253] device syzkaller0 entered promiscuous mode [ 982.492242][T13265] netlink: 'syz.3.2506': attribute type 4 has an invalid length. [ 982.963893][T13258] fuse: Unknown parameter '0x000000000000000500000000000000000000000' [ 983.067219][T13270] netlink: 'syz.1.2507': attribute type 4 has an invalid length. [ 983.502672][T13277] netlink: 'syz.1.2507': attribute type 4 has an invalid length. [ 984.345366][T13288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2513'. [ 985.103731][T13298] netlink: 'syz.2.2516': attribute type 4 has an invalid length. [ 985.323578][T13301] netlink: 'syz.2.2516': attribute type 4 has an invalid length. [ 985.485202][ T27] audit: type=1800 audit(1771605938.477:249): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2518" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 985.605357][T13300] device syzkaller0 entered promiscuous mode [ 987.423877][ T4312] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 987.623593][ T4312] usb 2-1: Using ep0 maxpacket: 16 [ 987.641613][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.678776][ T4312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.719636][ T4312] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 987.744613][ T4312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.792359][ T4312] usb 2-1: config 0 descriptor?? [ 988.234813][ T4312] gt683r_led 0003:1770:FF00.0037: unbalanced delimiter at end of report description [ 988.272139][ T4312] gt683r_led 0003:1770:FF00.0037: hid parsing failed [ 988.288854][ T4312] gt683r_led: probe of 0003:1770:FF00.0037 failed with error -22 [ 988.451587][ T27] audit: type=1326 audit(1771605941.437:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.1.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 988.528298][ T27] audit: type=1326 audit(1771605941.467:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.1.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 988.570891][ T27] audit: type=1326 audit(1771605941.477:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.1.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 988.594829][ T27] audit: type=1326 audit(1771605941.477:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.1.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 988.618466][ T27] audit: type=1326 audit(1771605941.477:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.1.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 988.650320][ T27] audit: type=1326 audit(1771605941.477:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.1.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 988.676487][ T27] audit: type=1326 audit(1771605941.477:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.1.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 988.699600][ T27] audit: type=1326 audit(1771605941.477:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13322 comm="syz.1.2521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2b999c629 code=0x7ffc0000 [ 990.300291][ T6604] usb 2-1: USB disconnect, device number 73 [ 990.913734][T13319] netlink: 'syz.3.2520': attribute type 4 has an invalid length. [ 990.924057][T13337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2526'. [ 991.223564][T13350] input: syz0 as /devices/virtual/input/input30 [ 991.821891][T13357] netlink: 'syz.2.2530': attribute type 4 has an invalid length. [ 991.943116][T13362] netlink: 'syz.2.2530': attribute type 4 has an invalid length. [ 992.208259][T13359] fuse: Unknown parameter '0x000000000000000501777777777777777777777' [ 992.934292][ T1191] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 993.172612][ T1191] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 993.182426][ T1191] usb 4-1: config 0 has no interface number 0 [ 993.183982][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.189097][ T1191] usb 4-1: config 0 interface 41 has no altsetting 0 [ 993.199989][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.210719][ T1191] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 993.306316][ T1191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.346929][ T1191] usb 4-1: Product: syz [ 993.353812][ T1191] usb 4-1: Manufacturer: syz [ 993.373530][ T1191] usb 4-1: SerialNumber: syz [ 993.391738][ T1191] usb 4-1: config 0 descriptor?? [ 993.437336][ T1191] CoreChips: probe of 4-1:0.41 failed with error -22 [ 993.736228][ T4312] usb 4-1: USB disconnect, device number 35 [ 994.063432][ T4359] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 994.253518][ T4359] usb 3-1: Using ep0 maxpacket: 16 [ 994.268262][ T4359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.329389][ T4359] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.542041][ T4359] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 994.552380][T13392] netlink: 'syz.4.2540': attribute type 4 has an invalid length. [ 994.582271][ T4359] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.637975][ T4359] usb 3-1: config 0 descriptor?? [ 994.647534][T13395] ptrace attach of "./syz-executor exec"[4280] was attempted by "./syz-executor exec"[13395] [ 994.689233][T13394] netlink: 'syz.4.2540': attribute type 4 has an invalid length. [ 994.717272][T13391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2541'. [ 994.872780][T13400] netlink: 'syz.1.2542': attribute type 4 has an invalid length. [ 995.122796][ T4359] gt683r_led 0003:1770:FF00.0038: unbalanced delimiter at end of report description [ 995.199188][ T4359] gt683r_led 0003:1770:FF00.0038: hid parsing failed [ 995.225768][ T4359] gt683r_led: probe of 0003:1770:FF00.0038 failed with error -22 [ 995.352095][T13407] input: syz0 as /devices/virtual/input/input31 [ 995.364670][ T27] audit: type=1326 audit(1771605948.357:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.2.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 995.432799][ T27] audit: type=1326 audit(1771605948.377:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.2.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 995.520849][ T27] audit: type=1326 audit(1771605948.377:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.2.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 995.588923][ T27] audit: type=1326 audit(1771605948.377:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.2.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 995.704487][ T27] audit: type=1326 audit(1771605948.377:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.2.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 995.781389][ T27] audit: type=1326 audit(1771605948.377:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.2.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 995.849606][ T27] audit: type=1326 audit(1771605948.377:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.2.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 995.943242][ T27] audit: type=1326 audit(1771605948.397:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13380 comm="syz.2.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67919c629 code=0x7ffc0000 [ 998.050927][ T4312] usb 3-1: USB disconnect, device number 51 [ 998.269772][T13433] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 998.373907][ T27] audit: type=1326 audit(1771605951.367:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13428 comm="syz.2.2552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe67919c629 code=0x0 [ 999.018422][T13442] netlink: 'syz.3.2553': attribute type 4 has an invalid length. [ 999.071098][T13437] fuse: Unknown parameter '0x000000000000000501777777777777777777777' [ 999.083991][T13444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2554'. [ 999.333819][T13447] input: syz0 as /devices/virtual/input/input32 [ 999.521436][T13451] netlink: 'syz.3.2555': attribute type 4 has an invalid length. [ 999.596014][T13452] netlink: 'syz.3.2555': attribute type 4 has an invalid length. [ 1000.383522][ T6604] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1000.563403][ T6604] usb 2-1: Using ep0 maxpacket: 32 [ 1000.566698][ T6604] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1000.603473][ T6604] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.620857][ T6604] usb 2-1: config 0 descriptor?? [ 1000.826271][ T6604] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1000.829730][ T6604] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1000.833777][ T6604] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1000.833850][ T6604] usb 2-1: media controller created [ 1000.905334][ T6604] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1001.023754][ T127] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1001.124516][T13479] ptrace attach of "./syz-executor exec"[4271] was attempted by "./syz-executor exec"[13479] [ 1001.214185][ T6604] DVB: Unable to find symbol dib7000p_attach() [ 1001.220662][ T6604] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1001.263596][ T127] usb 4-1: Using ep0 maxpacket: 16 [ 1001.275406][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.343907][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.415553][ T127] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1001.438342][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.518673][ T127] usb 4-1: config 0 descriptor?? [ 1001.623553][ T6604] rc_core: IR keymap rc-dib0700-rc5 not found [ 1001.636747][ T6604] Registered IR keymap rc-empty [ 1001.739631][ T6604] dvb-usb: could not initialize remote control. [ 1001.878160][ T6604] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1001.966541][ T127] gt683r_led 0003:1770:FF00.0039: unbalanced delimiter at end of report description [ 1001.988856][ T127] gt683r_led 0003:1770:FF00.0039: hid parsing failed [ 1002.027021][ T6604] usb 2-1: USB disconnect, device number 74 [ 1002.037684][ T127] gt683r_led: probe of 0003:1770:FF00.0039 failed with error -22 [ 1002.170448][ T27] audit: type=1326 audit(1771605955.157:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 1002.234420][T13492] netlink: 'syz.0.2566': attribute type 4 has an invalid length. [ 1002.266625][ T6604] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1002.289380][ T27] audit: type=1326 audit(1771605955.187:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 1002.444963][ T27] audit: type=1326 audit(1771605955.197:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 1002.591548][ T27] audit: type=1326 audit(1771605955.197:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 1002.685738][ T27] audit: type=1326 audit(1771605955.197:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 1002.785738][ T27] audit: type=1326 audit(1771605955.197:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 1002.901893][ T27] audit: type=1326 audit(1771605955.197:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 1002.985161][ T27] audit: type=1326 audit(1771605955.197:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13466 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2d19c629 code=0x7ffc0000 [ 1003.323017][T13502] input: syz0 as /devices/virtual/input/input34 [ 1004.205495][ T127] usb 4-1: USB disconnect, device number 36 [ 1004.518722][T13513] netlink: 'syz.1.2572': attribute type 4 has an invalid length. [ 1004.569368][T13513] netlink: 'syz.1.2572': attribute type 4 has an invalid length. [ 1005.729468][T13523] [ 1005.731886][T13523] ===================================================== [ 1005.738845][T13523] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 1005.746597][T13523] syzkaller #0 Not tainted [ 1005.751034][T13523] ----------------------------------------------------- [ 1005.758168][T13523] syz.3.2578/13523 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1005.766149][T13523] ffffffff8c80a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xec/0x3c0 [ 1005.774822][T13523] [ 1005.774822][T13523] and this task is already holding: [ 1005.782548][T13523] ffff888029948130 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x25/0x3c0 [ 1005.791452][T13523] which would create a new lock dependency: [ 1005.797355][T13523] (&f->f_owner.lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 1005.805197][T13523] [ 1005.805197][T13523] but this new dependency connects a HARDIRQ-irq-safe lock: [ 1005.814778][T13523] (&dev->event_lock#2){-.-.}-{2:2} [ 1005.814820][T13523] [ 1005.814820][T13523] ... which became HARDIRQ-irq-safe at: [ 1005.827864][T13523] lock_acquire+0x1bb/0x4a0 [ 1005.832491][T13523] _raw_spin_lock_irqsave+0xb0/0x100 [ 1005.837896][T13523] input_event+0x76/0xb0 [ 1005.842236][T13523] psmouse_report_standard_packet+0x4f/0x200 [ 1005.848400][T13523] psmouse_process_byte+0x42b/0x620 [ 1005.853786][T13523] psmouse_handle_byte+0x43/0x490 [ 1005.858903][T13523] psmouse_interrupt+0x699/0x1130 [ 1005.864047][T13523] serio_interrupt+0x87/0x130 [ 1005.868822][T13523] i8042_interrupt+0x365/0x710 [ 1005.873879][T13523] __handle_irq_event_percpu+0x293/0xa50 [ 1005.879725][T13523] handle_irq_event+0x87/0x1e0 [ 1005.884587][T13523] handle_edge_irq+0x243/0xb20 [ 1005.889457][T13523] __common_interrupt+0xd7/0x1e0 [ 1005.894517][T13523] common_interrupt+0xb0/0xd0 [ 1005.899299][T13523] asm_common_interrupt+0x22/0x40 [ 1005.904514][T13523] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1005.910413][T13523] i8042_aux_write+0x105/0x170 [ 1005.915296][T13523] ps2_do_sendbyte+0x1f9/0x6e0 [ 1005.920176][T13523] ps2_sendbyte+0x5b/0x110 [ 1005.924685][T13523] cypress_send_ext_cmd+0x240/0x930 [ 1005.930343][T13523] cypress_detect+0x8f/0x1a0 [ 1005.935051][T13523] psmouse_extensions+0xcb2/0x1570 [ 1005.940867][T13523] psmouse_switch_protocol+0x2fc/0x870 [ 1005.946426][T13523] psmouse_connect+0x8f8/0x1500 [ 1005.951459][T13523] serio_driver_probe+0x76/0x90 [ 1005.956459][T13523] really_probe+0x2aa/0xc70 [ 1005.961102][T13523] __driver_probe_device+0x18c/0x330 [ 1005.966490][T13523] driver_probe_device+0x4f/0x420 [ 1005.972059][T13523] __driver_attach+0x44a/0x6e0 [ 1005.976920][T13523] bus_for_each_dev+0x182/0x1f0 [ 1005.981893][T13523] serio_handle_event+0x29c/0x840 [ 1005.987024][T13523] process_one_work+0x8a2/0x1160 [ 1005.992056][T13523] worker_thread+0xaa2/0x1270 [ 1005.996872][T13523] kthread+0x29d/0x330 [ 1006.001052][T13523] ret_from_fork+0x1f/0x30 [ 1006.005569][T13523] [ 1006.005569][T13523] to a HARDIRQ-irq-unsafe lock: [ 1006.012672][T13523] (tasklist_lock){.+.+}-{2:2} [ 1006.012694][T13523] [ 1006.012694][T13523] ... which became HARDIRQ-irq-unsafe at: [ 1006.025630][T13523] ... [ 1006.025641][T13523] lock_acquire+0x1bb/0x4a0 [ 1006.030180][T13528] netlink: 'syz.4.2577': attribute type 4 has an invalid length. [ 1006.032897][T13523] _raw_read_lock+0x32/0x40 [ 1006.045266][T13523] do_wait+0x2b6/0xb60 [ 1006.049544][T13523] kernel_wait+0xd3/0x1c0 [ 1006.053998][T13523] call_usermodehelper_exec_work+0xb5/0x220 [ 1006.060024][T13523] process_one_work+0x8a2/0x1160 [ 1006.065075][T13523] worker_thread+0xaa2/0x1270 [ 1006.069943][T13523] kthread+0x29d/0x330 [ 1006.074104][T13523] ret_from_fork+0x1f/0x30 [ 1006.078624][T13523] [ 1006.078624][T13523] other info that might help us debug this: [ 1006.078624][T13523] [ 1006.089032][T13523] Chain exists of: [ 1006.089032][T13523] &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock [ 1006.089032][T13523] [ 1006.102273][T13523] Possible interrupt unsafe locking scenario: [ 1006.102273][T13523] [ 1006.110629][T13523] CPU0 CPU1 [ 1006.116013][T13523] ---- ---- [ 1006.121387][T13523] lock(tasklist_lock); [ 1006.125676][T13523] local_irq_disable(); [ 1006.132436][T13523] lock(&dev->event_lock#2); [ 1006.139652][T13523] lock(&f->f_owner.lock); [ 1006.146884][T13523] [ 1006.150362][T13523] lock(&dev->event_lock#2); [ 1006.155230][T13523] [ 1006.155230][T13523] *** DEADLOCK *** [ 1006.155230][T13523] [ 1006.163383][T13523] 2 locks held by syz.3.2578/13523: [ 1006.168593][T13523] #0: ffff88807d244680 (&u->lock){+.+.}-{2:2}, at: queue_oob+0x1de/0x4f0 [ 1006.177140][T13523] #1: ffff888029948130 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x25/0x3c0 [ 1006.186484][T13523] [ 1006.186484][T13523] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 1006.196901][T13523] -> (&dev->event_lock#2){-.-.}-{2:2} { [ 1006.202688][T13523] IN-HARDIRQ-W at: [ 1006.206846][T13523] lock_acquire+0x1bb/0x4a0 [ 1006.213378][T13523] _raw_spin_lock_irqsave+0xb0/0x100 [ 1006.220894][T13523] input_event+0x76/0xb0 [ 1006.227204][T13523] psmouse_report_standard_packet+0x4f/0x200 [ 1006.235205][T13523] psmouse_process_byte+0x42b/0x620 [ 1006.242451][T13523] psmouse_handle_byte+0x43/0x490 [ 1006.249550][T13523] psmouse_interrupt+0x699/0x1130 [ 1006.256600][T13523] serio_interrupt+0x87/0x130 [ 1006.263333][T13523] i8042_interrupt+0x365/0x710 [ 1006.270159][T13523] __handle_irq_event_percpu+0x293/0xa50 [ 1006.277808][T13523] handle_irq_event+0x87/0x1e0 [ 1006.284609][T13523] handle_edge_irq+0x243/0xb20 [ 1006.291384][T13523] __common_interrupt+0xd7/0x1e0 [ 1006.298356][T13523] common_interrupt+0xb0/0xd0 [ 1006.305066][T13523] asm_common_interrupt+0x22/0x40 [ 1006.312098][T13523] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1006.319860][T13523] i8042_aux_write+0x105/0x170 [ 1006.326726][T13523] ps2_do_sendbyte+0x1f9/0x6e0 [ 1006.333933][T13523] ps2_sendbyte+0x5b/0x110 [ 1006.340449][T13523] cypress_send_ext_cmd+0x240/0x930 [ 1006.347704][T13523] cypress_detect+0x8f/0x1a0 [ 1006.354385][T13523] psmouse_extensions+0xcb2/0x1570 [ 1006.361531][T13523] psmouse_switch_protocol+0x2fc/0x870 [ 1006.369098][T13523] psmouse_connect+0x8f8/0x1500 [ 1006.376051][T13523] serio_driver_probe+0x76/0x90 [ 1006.382962][T13523] really_probe+0x2aa/0xc70 [ 1006.389650][T13523] __driver_probe_device+0x18c/0x330 [ 1006.396955][T13523] driver_probe_device+0x4f/0x420 [ 1006.404094][T13523] __driver_attach+0x44a/0x6e0 [ 1006.410873][T13523] bus_for_each_dev+0x182/0x1f0 [ 1006.417742][T13523] serio_handle_event+0x29c/0x840 [ 1006.424787][T13523] process_one_work+0x8a2/0x1160 [ 1006.431742][T13523] worker_thread+0xaa2/0x1270 [ 1006.438711][T13523] kthread+0x29d/0x330 [ 1006.445222][T13523] ret_from_fork+0x1f/0x30 [ 1006.451813][T13523] IN-SOFTIRQ-W at: [ 1006.455985][T13523] lock_acquire+0x1bb/0x4a0 [ 1006.462503][T13523] _raw_spin_lock_irqsave+0xb0/0x100 [ 1006.469803][T13523] input_inject_event+0xa7/0x310 [ 1006.476842][T13523] led_trigger_event+0x12f/0x210 [ 1006.483792][T13523] kbd_bh+0x1bc/0x2d0 [ 1006.489782][T13523] tasklet_action_common+0x2fe/0x4d0 [ 1006.497177][T13523] handle_softirqs+0x2a1/0x930 [ 1006.504043][T13523] run_ksoftirqd+0xa4/0x100 [ 1006.510636][T13523] smpboot_thread_fn+0x64a/0xa40 [ 1006.517864][T13523] kthread+0x29d/0x330 [ 1006.523950][T13523] ret_from_fork+0x1f/0x30 [ 1006.530555][T13523] INITIAL USE at: [ 1006.534632][T13523] lock_acquire+0x1bb/0x4a0 [ 1006.541059][T13523] _raw_spin_lock_irqsave+0xb0/0x100 [ 1006.548297][T13523] input_inject_event+0xa7/0x310 [ 1006.555288][T13523] led_trigger_event+0x12f/0x210 [ 1006.562351][T13523] kbd_led_trigger_activate+0xb9/0x100 [ 1006.569740][T13523] led_trigger_set+0x50c/0x910 [ 1006.576944][T13523] led_trigger_set_default+0x19c/0x1e0 [ 1006.584321][T13523] led_classdev_register_ext+0x625/0x860 [ 1006.591878][T13523] input_leds_connect+0x4e7/0x6b0 [ 1006.598832][T13523] input_register_device+0xdfd/0x1310 [ 1006.606331][T13523] atkbd_connect+0x6f8/0x9a0 [ 1006.612853][T13523] serio_driver_probe+0x76/0x90 [ 1006.619643][T13523] really_probe+0x2aa/0xc70 [ 1006.626191][T13523] __driver_probe_device+0x18c/0x330 [ 1006.633504][T13523] driver_probe_device+0x4f/0x420 [ 1006.640660][T13523] __driver_attach+0x44a/0x6e0 [ 1006.647481][T13523] bus_for_each_dev+0x182/0x1f0 [ 1006.654364][T13523] serio_handle_event+0x29c/0x840 [ 1006.661336][T13523] process_one_work+0x8a2/0x1160 [ 1006.668387][T13523] worker_thread+0xaa2/0x1270 [ 1006.675601][T13523] kthread+0x29d/0x330 [ 1006.681635][T13523] ret_from_fork+0x1f/0x30 [ 1006.687984][T13523] } [ 1006.690752][T13523] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1006.699980][T13523] -> (&new->fa_lock){....}-{2:2} { [ 1006.705292][T13523] INITIAL USE at: [ 1006.709288][T13523] lock_acquire+0x1bb/0x4a0 [ 1006.715570][T13523] _raw_write_lock_irq+0xab/0xf0 [ 1006.722397][T13523] fasync_remove_entry+0xf0/0x1c0 [ 1006.729187][T13523] lease_modify+0x1a2/0x390 [ 1006.735456][T13523] locks_remove_file+0x52f/0xec0 [ 1006.742351][T13523] __fput+0x188/0x920 [ 1006.748239][T13523] task_work_run+0x1d0/0x260 [ 1006.754946][T13523] exit_to_user_mode_loop+0xe6/0x110 [ 1006.762127][T13523] exit_to_user_mode_prepare+0xee/0x180 [ 1006.769447][T13523] syscall_exit_to_user_mode+0x16/0x40 [ 1006.776670][T13523] do_syscall_64+0x58/0xa0 [ 1006.782857][T13523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.790508][T13523] INITIAL READ USE at: [ 1006.795030][T13523] lock_acquire+0x1bb/0x4a0 [ 1006.801840][T13523] _raw_read_lock_irqsave+0xb8/0x100 [ 1006.809326][T13523] kill_fasync+0x18e/0x4b0 [ 1006.816022][T13523] mousedev_notify_readers+0x6eb/0xc00 [ 1006.823701][T13523] mousedev_event+0x568/0x11f0 [ 1006.830748][T13523] input_pass_values+0x9c7/0x12f0 [ 1006.838426][T13523] input_event_dispose+0x346/0x6c0 [ 1006.846101][T13523] input_inject_event+0x1f5/0x310 [ 1006.853345][T13523] evdev_write+0x35b/0x490 [ 1006.859976][T13523] vfs_write+0x2e6/0xa30 [ 1006.866414][T13523] ksys_write+0x14c/0x250 [ 1006.873016][T13523] do_syscall_64+0x4c/0xa0 [ 1006.879623][T13523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.887706][T13523] } [ 1006.890398][T13523] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1006.899274][T13523] ... acquired at: [ 1006.903185][T13523] _raw_read_lock_irqsave+0xb8/0x100 [ 1006.908666][T13523] kill_fasync+0x18e/0x4b0 [ 1006.913329][T13523] mousedev_notify_readers+0x6eb/0xc00 [ 1006.919023][T13523] mousedev_event+0x568/0x11f0 [ 1006.924076][T13523] input_pass_values+0x9c7/0x12f0 [ 1006.929301][T13523] input_event_dispose+0x346/0x6c0 [ 1006.934603][T13523] input_inject_event+0x1f5/0x310 [ 1006.939841][T13523] evdev_write+0x35b/0x490 [ 1006.944485][T13523] vfs_write+0x2e6/0xa30 [ 1006.948923][T13523] ksys_write+0x14c/0x250 [ 1006.953462][T13523] do_syscall_64+0x4c/0xa0 [ 1006.958093][T13523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1006.964172][T13523] [ 1006.966510][T13523] -> (&f->f_owner.lock){....}-{2:2} { [ 1006.971908][T13523] INITIAL USE at: [ 1006.975810][T13523] lock_acquire+0x1bb/0x4a0 [ 1006.981901][T13523] _raw_write_lock_irq+0xab/0xf0 [ 1006.988431][T13523] __f_setown+0x37/0x330 [ 1006.994256][T13523] generic_setlease+0xf6a/0x1400 [ 1007.000765][T13523] fcntl_setlease+0x262/0x330 [ 1007.007047][T13523] do_fcntl+0x117/0x1270 [ 1007.012935][T13523] __se_sys_fcntl+0xc9/0x190 [ 1007.019115][T13523] do_syscall_64+0x4c/0xa0 [ 1007.025114][T13523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.032853][T13523] INITIAL READ USE at: [ 1007.037190][T13523] lock_acquire+0x1bb/0x4a0 [ 1007.043710][T13523] _raw_read_lock_irq+0xb3/0xf0 [ 1007.050767][T13523] do_fcntl+0x1c8/0x1270 [ 1007.057036][T13523] __se_sys_fcntl+0xc9/0x190 [ 1007.063653][T13523] do_syscall_64+0x4c/0xa0 [ 1007.070088][T13523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.078201][T13523] } [ 1007.080706][T13523] ... key at: [] __alloc_file.__key+0x0/0x10 [ 1007.088877][T13523] ... acquired at: [ 1007.092685][T13523] _raw_read_lock_irqsave+0xb8/0x100 [ 1007.098155][T13523] send_sigio+0x2f/0x360 [ 1007.102583][T13523] kill_fasync+0x224/0x4b0 [ 1007.107285][T13523] mousedev_notify_readers+0x6eb/0xc00 [ 1007.113015][T13523] mousedev_event+0x568/0x11f0 [ 1007.118506][T13523] input_pass_values+0x9c7/0x12f0 [ 1007.123713][T13523] input_event_dispose+0x346/0x6c0 [ 1007.129126][T13523] input_inject_event+0x1f5/0x310 [ 1007.134382][T13523] evdev_write+0x35b/0x490 [ 1007.139009][T13523] vfs_write+0x2e6/0xa30 [ 1007.143458][T13523] ksys_write+0x14c/0x250 [ 1007.148017][T13523] do_syscall_64+0x4c/0xa0 [ 1007.152622][T13523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.158707][T13523] [ 1007.161034][T13523] [ 1007.161034][T13523] the dependencies between the lock to be acquired [ 1007.161042][T13523] and HARDIRQ-irq-unsafe lock: [ 1007.174839][T13523] -> (tasklist_lock){.+.+}-{2:2} { [ 1007.179974][T13523] HARDIRQ-ON-R at: [ 1007.184227][T13523] lock_acquire+0x1bb/0x4a0 [ 1007.190399][T13523] _raw_read_lock+0x32/0x40 [ 1007.196829][T13523] do_wait+0x2b6/0xb60 [ 1007.202668][T13523] kernel_wait+0xd3/0x1c0 [ 1007.208839][T13523] call_usermodehelper_exec_work+0xb5/0x220 [ 1007.216498][T13523] process_one_work+0x8a2/0x1160 [ 1007.223191][T13523] worker_thread+0xaa2/0x1270 [ 1007.229619][T13523] kthread+0x29d/0x330 [ 1007.235435][T13523] ret_from_fork+0x1f/0x30 [ 1007.241603][T13523] SOFTIRQ-ON-R at: [ 1007.245604][T13523] lock_acquire+0x1bb/0x4a0 [ 1007.251810][T13523] _raw_read_lock+0x32/0x40 [ 1007.257990][T13523] do_wait+0x2b6/0xb60 [ 1007.263733][T13523] kernel_wait+0xd3/0x1c0 [ 1007.269829][T13523] call_usermodehelper_exec_work+0xb5/0x220 [ 1007.277402][T13523] process_one_work+0x8a2/0x1160 [ 1007.284058][T13523] worker_thread+0xaa2/0x1270 [ 1007.290501][T13523] kthread+0x29d/0x330 [ 1007.296263][T13523] ret_from_fork+0x1f/0x30 [ 1007.302620][T13523] INITIAL USE at: [ 1007.306713][T13523] lock_acquire+0x1bb/0x4a0 [ 1007.312805][T13523] _raw_write_lock_irq+0xab/0xf0 [ 1007.319418][T13523] copy_process+0x2557/0x4030 [ 1007.325682][T13523] kernel_clone+0x24b/0x900 [ 1007.331773][T13523] user_mode_thread+0x10d/0x180 [ 1007.338221][T13523] rest_init+0x23/0x300 [ 1007.344050][T13523] start_kernel+0x0/0x53c [ 1007.350009][T13523] start_kernel+0x493/0x53c [ 1007.356146][T13523] secondary_startup_64_no_verify+0xcf/0xdb [ 1007.363631][T13523] INITIAL READ USE at: [ 1007.367971][T13523] lock_acquire+0x1bb/0x4a0 [ 1007.374501][T13523] _raw_read_lock+0x32/0x40 [ 1007.381016][T13523] do_wait+0x2b6/0xb60 [ 1007.387116][T13523] kernel_wait+0xd3/0x1c0 [ 1007.393559][T13523] call_usermodehelper_exec_work+0xb5/0x220 [ 1007.401936][T13523] process_one_work+0x8a2/0x1160 [ 1007.408897][T13523] worker_thread+0xaa2/0x1270 [ 1007.415684][T13523] kthread+0x29d/0x330 [ 1007.421760][T13523] ret_from_fork+0x1f/0x30 [ 1007.428185][T13523] } [ 1007.430684][T13523] ... key at: [] tasklist_lock+0x18/0x40 [ 1007.438418][T13523] ... acquired at: [ 1007.442233][T13523] _raw_read_lock+0x32/0x40 [ 1007.446923][T13523] send_sigurg+0xec/0x3c0 [ 1007.451458][T13523] sk_send_sigurg+0x6b/0xc0 [ 1007.456273][T13523] queue_oob+0x3ed/0x4f0 [ 1007.460703][T13523] unix_stream_sendmsg+0x8cf/0xa70 [ 1007.466014][T13523] ____sys_sendmsg+0x5be/0x970 [ 1007.470985][T13523] ___sys_sendmsg+0x2a2/0x360 [ 1007.475892][T13523] __sys_sendmmsg+0x2c3/0x510 [ 1007.480780][T13523] __x64_sys_sendmmsg+0x9c/0xb0 [ 1007.485830][T13523] do_syscall_64+0x4c/0xa0 [ 1007.490435][T13523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.496612][T13523] [ 1007.498983][T13523] [ 1007.498983][T13523] stack backtrace: [ 1007.504888][T13523] CPU: 1 PID: 13523 Comm: syz.3.2578 Not tainted syzkaller #0 [ 1007.512364][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1007.522472][T13523] Call Trace: [ 1007.525783][T13523] [ 1007.528728][T13523] dump_stack_lvl+0x188/0x24e [ 1007.533492][T13523] ? load_image+0x400/0x400 [ 1007.538035][T13523] ? show_regs_print_info+0x12/0x12 [ 1007.543257][T13523] ? load_image+0x400/0x400 [ 1007.547858][T13523] ? print_shortest_lock_dependencies+0xf0/0x160 [ 1007.554211][T13523] __lock_acquire+0x66c8/0x7d10 [ 1007.559176][T13523] ? verify_lock_unused+0x140/0x140 [ 1007.564394][T13523] ? verify_lock_unused+0x140/0x140 [ 1007.569613][T13523] lock_acquire+0x1bb/0x4a0 [ 1007.574228][T13523] ? send_sigurg+0xec/0x3c0 [ 1007.579103][T13523] ? read_lock_is_recursive+0x10/0x10 [ 1007.584492][T13523] ? do_raw_read_lock+0x39/0x80 [ 1007.589360][T13523] ? _raw_read_lock_irqsave+0xc4/0x100 [ 1007.594852][T13523] ? _raw_read_lock+0x40/0x40 [ 1007.599651][T13523] ? __lock_acquire+0x7d10/0x7d10 [ 1007.604732][T13523] ? do_raw_spin_lock+0x128/0x2f0 [ 1007.609831][T13523] _raw_read_lock+0x32/0x40 [ 1007.614368][T13523] ? send_sigurg+0xec/0x3c0 [ 1007.619012][T13523] send_sigurg+0xec/0x3c0 [ 1007.623368][T13523] sk_send_sigurg+0x6b/0xc0 [ 1007.627909][T13523] queue_oob+0x3ed/0x4f0 [ 1007.632189][T13523] ? scm_stat_add+0xc0/0xc0 [ 1007.636722][T13523] ? apparmor_socket_getpeersec_dgram+0x5/0x10 [ 1007.642908][T13523] ? security_socket_getpeersec_dgram+0x9d/0xc0 [ 1007.649284][T13523] unix_stream_sendmsg+0x8cf/0xa70 [ 1007.654434][T13523] ? __might_fault+0xa6/0x120 [ 1007.659134][T13523] ? unix_show_fdinfo+0x2c0/0x2c0 [ 1007.664190][T13523] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 1007.670775][T13523] ? lock_acquire+0x225/0x4a0 [ 1007.675575][T13523] ? aa_sock_msg_perm+0x94/0x150 [ 1007.680536][T13523] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1007.685932][T13523] ? security_socket_sendmsg+0x7c/0xa0 [ 1007.691444][T13523] ? unix_show_fdinfo+0x2c0/0x2c0 [ 1007.696691][T13523] ____sys_sendmsg+0x5be/0x970 [ 1007.701661][T13523] ? __sys_sendmsg_sock+0x30/0x30 [ 1007.706892][T13523] ? __import_iovec+0x315/0x500 [ 1007.711869][T13523] ? import_iovec+0x6f/0xa0 [ 1007.716391][T13523] ___sys_sendmsg+0x2a2/0x360 [ 1007.721154][T13523] ? __sched_text_start+0x8/0x8 [ 1007.726114][T13523] ? __sys_sendmsg+0x290/0x290 [ 1007.730908][T13523] __sys_sendmmsg+0x2c3/0x510 [ 1007.735617][T13523] ? __ia32_sys_sendmsg+0x80/0x80 [ 1007.740668][T13523] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1007.746586][T13523] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1007.752589][T13523] ? lock_chain_count+0x20/0x20 [ 1007.757479][T13523] __x64_sys_sendmmsg+0x9c/0xb0 [ 1007.762360][T13523] do_syscall_64+0x4c/0xa0 [ 1007.766886][T13523] ? clear_bhb_loop+0x60/0xb0 [ 1007.771599][T13523] ? clear_bhb_loop+0x60/0xb0 [ 1007.776304][T13523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.782218][T13523] RIP: 0033:0x7fbe2d19c629 [ 1007.786677][T13523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.806442][T13523] RSP: 002b:00007fbe2e029028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1007.814873][T13523] RAX: ffffffffffffffda RBX: 00007fbe2d415fa0 RCX: 00007fbe2d19c629 [ 1007.822852][T13523] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 1007.831182][T13523] RBP: 00007fbe2d232b39 R08: 0000000000000000 R09: 0000000000000000 [ 1007.839267][T13523] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 1007.847243][T13523] R13: 00007fbe2d416038 R14: 00007fbe2d415fa0 R15: 00007ffc52167158 [ 1007.855229][T13523] [ 1007.927109][T13526] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1007.999264][ T27] audit: type=1326 audit(1771605960.987:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13524 comm="syz.2.2580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe67919c629 code=0x0