last executing test programs: 10.237541233s ago: executing program 2 (id=2139): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 8.312777969s ago: executing program 2 (id=2174): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x8) futex(&(0x7f0000000080), 0x3, 0x0, 0x0, 0x0, 0x1) 8.15569883s ago: executing program 2 (id=2178): mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 7.942809179s ago: executing program 2 (id=2182): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) 7.741435219s ago: executing program 2 (id=2185): write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000800)={0xc, {0x3b8, "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"}}, 0x3be) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000780)=ANY=[]) 7.197516599s ago: executing program 2 (id=2195): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) 3.172274109s ago: executing program 0 (id=2236): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80a02, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ppoll(&(0x7f0000000100)=[{r1, 0x25c0}], 0x1, &(0x7f0000000140), 0x0, 0x0) dup3(r1, r0, 0x0) 3.139132938s ago: executing program 0 (id=2237): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000940), &(0x7f0000000200)=0x8) 3.0686009s ago: executing program 0 (id=2238): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 3.008273148s ago: executing program 1 (id=2239): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x407}}}, 0x7) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 2.956376586s ago: executing program 0 (id=2240): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) connect$vsock_stream(r0, &(0x7f0000000000), 0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 2.86953777s ago: executing program 0 (id=2241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x2) read(r2, &(0x7f0000000040)=""/8, 0x8) 2.74309685s ago: executing program 0 (id=2242): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000113c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="0d1b45235c6ad2ec6d57acc7325a1a7f37e46c5fb8", 0x15}, {&(0x7f0000000380)="329c73aacaf7bd70d6e7054d596b92b7a82f45", 0x13}], 0x2, 0x0, 0x0, 0x11}}], 0x1, 0x80) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.902423073s ago: executing program 3 (id=2244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000eaffffff83000040"]) 1.832644882s ago: executing program 1 (id=2246): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 1.614808717s ago: executing program 3 (id=2248): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0'}, 0x2f) 1.526732779s ago: executing program 1 (id=2249): preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1.393262469s ago: executing program 3 (id=2251): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.265380842s ago: executing program 1 (id=2252): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max.burst\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x970b) 1.214478471s ago: executing program 4 (id=2253): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x577, {0x763039aa, 0x114}, 0x10, 0x5}) 1.130977789s ago: executing program 1 (id=2254): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000402000000000b000002", @ANYRES32=r0], 0x20, 0x6044}, 0x6) 952.456449ms ago: executing program 4 (id=2255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000c, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 712.244029ms ago: executing program 4 (id=2256): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"a2e3ad21ed0d1bf91b29420987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f31096c060890e0878f0e1ac6e7049b096e959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074b0d36cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130f91850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f4077fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b21052010689af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153fae46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c343f7f140f319539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474b0679dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691951264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d984836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000003c0)=@fd={0x0, 0x2, 0x4, 0x100000, 0xf86, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "f06e902d"}, 0x0, 0x4, {}, 0x5c000000}) 647.183737ms ago: executing program 4 (id=2257): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 581.463837ms ago: executing program 4 (id=2258): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000009d02"]) 423.070445ms ago: executing program 3 (id=2259): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f00004fa000/0x2000)=nil, 0x2000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) 389.404847ms ago: executing program 4 (id=2260): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) 268.748076ms ago: executing program 3 (id=2261): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x37}, 0x15, r1}) 163.081342ms ago: executing program 1 (id=2262): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000007, 0x10012, r0, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 0s ago: executing program 3 (id=2263): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x3, r2, 0x20}, 0x10) kernel console output (not intermixed with test programs): T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 134.324883][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 134.335561][ T979] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 134.345921][ T979] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.390281][ T979] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 134.410730][ T979] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 134.418073][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 134.433692][ T979] usb 5-1: Manufacturer: syz [ 134.462979][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 134.498971][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16384, setting to 1024 [ 134.525190][ T979] usb 5-1: config 0 descriptor?? [ 134.570662][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.608683][ T5838] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 134.635926][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.667239][ T5838] usb 4-1: config 0 descriptor?? [ 134.691944][ T5838] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16 [ 134.898004][ T979] rc_core: IR keymap rc-hauppauge not found [ 134.925337][ T979] Registered IR keymap rc-empty [ 134.958551][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.019438][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.076072][ T5904] usb 4-1: USB disconnect, device number 6 [ 135.076077][ C1] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 135.092052][ T979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 135.135100][ T979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 135.205813][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.218583][ C0] mceusb 5-1:0.0: long-range (0x14) receiver active [ 135.288126][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.321251][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.349301][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.379110][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.443793][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.498029][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.519513][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.550631][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.580148][ T979] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 135.621499][ T979] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 135.660325][ T979] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x14 active) [ 135.712104][ T979] usb 5-1: USB disconnect, device number 5 [ 136.054548][ T6935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 136.533960][ T979] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 136.814048][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.825304][ T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.836184][ T979] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 136.901810][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.985411][ T979] usb 5-1: config 0 descriptor?? [ 137.430979][ T979] hid-led 0003:0FC5:B080.0005: unknown main item tag 0x1 [ 137.825906][ T979] hid-led 0003:0FC5:B080.0005: probe with driver hid-led failed with error -71 [ 137.856588][ T979] usb 5-1: USB disconnect, device number 6 [ 138.062791][ T6979] netlink: 'syz.1.470': attribute type 2 has an invalid length. [ 138.155193][ T6981] use of bytesused == 0 is deprecated and will be removed in the future, [ 138.176907][ T6981] use the actual size instead. [ 138.692829][ T6987] IPVS: Scheduler module ip_vs_ not found [ 138.935138][ T6998] netlink: 'syz.1.478': attribute type 11 has an invalid length. [ 140.011208][ T7024] program syz.1.489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.790156][ T7041] @: renamed from vlan0 (while UP) [ 141.318402][ T52] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 141.441259][ T7055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.505'. [ 141.509464][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 141.521837][ T7058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.505'. [ 141.521972][ T52] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 141.573921][ T52] usb 2-1: config 0 has no interface number 0 [ 141.615760][ T52] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 141.627310][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.652814][ T52] usb 2-1: Product: syz [ 141.657028][ T52] usb 2-1: Manufacturer: syz [ 141.681124][ T52] usb 2-1: SerialNumber: syz [ 141.692940][ T52] usb 2-1: config 0 descriptor?? [ 141.723334][ T52] redrat3 2-1:0.31: Couldn't find all endpoints [ 141.768025][ T979] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 141.951164][ T979] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.973077][ T7049] netlink: 71 bytes leftover after parsing attributes in process `syz.1.501'. [ 141.984776][ T979] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 142.010333][ T979] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 142.021698][ T5904] usb 2-1: USB disconnect, device number 7 [ 142.045240][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.068081][ T979] usb 1-1: Product: syz [ 142.072685][ T979] usb 1-1: Manufacturer: syz [ 142.087594][ T979] usb 1-1: SerialNumber: syz [ 142.331921][ T979] usb 1-1: 0:2 : does not exist [ 142.354695][ T979] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 142.440137][ T979] usb 1-1: USB disconnect, device number 7 [ 142.786898][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.954215][ T6897] Set syz1 is full, maxelem 65536 reached [ 143.168138][ T979] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 143.338042][ T979] usb 4-1: Using ep0 maxpacket: 8 [ 143.376309][ T979] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 143.408760][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.447669][ T979] usb 4-1: Product: syz [ 143.472421][ T979] usb 4-1: Manufacturer: syz [ 143.477189][ T979] usb 4-1: SerialNumber: syz [ 143.546124][ T979] usb 4-1: config 0 descriptor?? [ 143.581561][ T979] gspca_main: se401-2.14.0 probing 047d:5003 [ 143.770704][ T52] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 143.991769][ T979] gspca_se401: ExtraFeatures: 98 [ 144.008572][ T979] gspca_se401: Too many frame sizes [ 144.108239][ T52] usb 1-1: Using ep0 maxpacket: 32 [ 144.116211][ T52] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.129537][ T52] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 144.137997][ T52] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 144.148845][ T52] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 144.178251][ T52] usb 1-1: config 128 has no interface number 0 [ 144.184627][ T52] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 144.234732][ T979] usb 4-1: USB disconnect, device number 7 [ 144.234779][ T52] usb 1-1: config 128 interface 127 has no altsetting 0 [ 144.261691][ T52] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 144.294916][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.309286][ T52] usb 1-1: Product: syz [ 144.313529][ T52] usb 1-1: Manufacturer: syz [ 144.318738][ T52] usb 1-1: SerialNumber: syz [ 144.327108][ T7106] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 144.440826][ T7127] netlink: 48 bytes leftover after parsing attributes in process `syz.4.535'. [ 144.456896][ T7127] Zero length message leads to an empty skb [ 144.608224][ T52] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.698857][ T52] usb 1-1: USB disconnect, device number 8 [ 144.719646][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 144.930209][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.182039][ T7148] vxcan1: tx address claim with dlc 0 [ 145.248070][ T52] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 145.337018][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 145.373499][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz.4.548'. [ 145.428096][ T52] usb 3-1: Using ep0 maxpacket: 16 [ 145.468506][ T52] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 145.490310][ T52] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 145.546810][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.581623][ T52] usb 3-1: config 0 descriptor?? [ 145.628846][ T7160] netem: incorrect ge model size [ 145.633918][ T7160] netem: change failed [ 145.658080][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 145.668811][ T52] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 145.682339][ T7162] netlink: 'syz.3.552': attribute type 9 has an invalid length. [ 145.755805][ T7162] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 145.847216][ T5196] bcm5974 3-1:0.0: could not read from device [ 145.885342][ T52] bcm5974 3-1:0.0: could not read from device [ 145.895732][ T7162] macvlan2: entered allmulticast mode [ 145.925355][ T7162] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 145.940224][ T5196] bcm5974 3-1:0.0: could not read from device [ 145.971524][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 146.022670][ T52] input: failed to attach handler mousedev to device input18, error: -5 [ 146.065944][ T5196] bcm5974 3-1:0.0: could not read from device [ 146.087984][ T52] usb 3-1: USB disconnect, device number 7 [ 146.385335][ T7178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.559'. [ 146.404837][ T979] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 146.476024][ T7178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.559'. [ 146.578097][ T979] usb 2-1: Using ep0 maxpacket: 32 [ 146.596656][ T979] usb 2-1: config 0 interface 0 has no altsetting 0 [ 146.636945][ T979] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 146.660202][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.687631][ T979] usb 2-1: Product: syz [ 146.702453][ T979] usb 2-1: Manufacturer: syz [ 146.716102][ T979] usb 2-1: SerialNumber: syz [ 146.734732][ T979] usb 2-1: config 0 descriptor?? [ 146.901004][ T5838] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 147.068039][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 147.084015][ T5838] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 147.108197][ T5838] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 147.127486][ T5838] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 147.157866][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.185269][ T979] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 147.192672][ T5838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 147.222414][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 147.252049][ T5838] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 147.270216][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.302373][ T5838] usb 4-1: config 0 descriptor?? [ 147.386783][ T979] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 147.408244][ T979] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 147.531642][ T5838] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 147.606272][ T979] usb 2-1: USB disconnect, device number 8 [ 147.770536][ T5838] usb 4-1: USB disconnect, device number 8 [ 147.793658][ T5838] usblp0: removed [ 148.802465][ T5904] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.905321][ T7248] syz.2.591 uses obsolete (PF_INET,SOCK_PACKET) [ 148.998184][ T5904] usb 2-1: Using ep0 maxpacket: 32 [ 149.017470][ T5904] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 149.047217][ T5904] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 149.103186][ T5904] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.154563][ T5904] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 149.167347][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 149.212393][ T5904] usb 2-1: Product: syz [ 149.235568][ T5904] usb 2-1: Manufacturer: syz [ 149.245696][ T5904] usb 2-1: SerialNumber: syz [ 149.278956][ T5904] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input19 [ 149.544969][ T30] kauditd_printk_skb: 2281 callbacks suppressed [ 149.544988][ T30] audit: type=1326 audit(1744541048.809:2314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2658d169 code=0x7ffc0000 [ 149.586368][ T5904] usb 2-1: USB disconnect, device number 9 [ 149.674236][ T30] audit: type=1326 audit(1744541048.849:2315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2658d169 code=0x7ffc0000 [ 149.715612][ T5904] appletouch 2-1:1.0: input: appletouch disconnected [ 149.765037][ T30] audit: type=1326 audit(1744541048.859:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff2658d169 code=0x7ffc0000 [ 149.789401][ T30] audit: type=1326 audit(1744541048.859:2317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2658d169 code=0x7ffc0000 [ 149.842698][ T30] audit: type=1326 audit(1744541048.859:2318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2658d169 code=0x7ffc0000 [ 149.889310][ T30] audit: type=1326 audit(1744541048.859:2319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff2658d169 code=0x7ffc0000 [ 149.912851][ T30] audit: type=1326 audit(1744541048.859:2320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2658d169 code=0x7ffc0000 [ 149.980937][ T30] audit: type=1326 audit(1744541048.859:2321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2658d169 code=0x7ffc0000 [ 150.020028][ T979] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 150.047998][ T30] audit: type=1326 audit(1744541048.859:2322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7eff2658d169 code=0x7ffc0000 [ 150.107083][ T30] audit: type=1326 audit(1744541048.929:2323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.0.597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff2658d169 code=0x7ffc0000 [ 150.219124][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 150.230153][ T979] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 150.239013][ T979] usb 4-1: config 0 has no interface number 0 [ 150.288286][ T979] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 150.302940][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.324227][ T979] usb 4-1: Product: syz [ 150.334269][ T979] usb 4-1: Manufacturer: syz [ 150.348141][ T979] usb 4-1: SerialNumber: syz [ 150.376125][ T979] usb 4-1: config 0 descriptor?? [ 150.406363][ T979] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 150.448533][ T5838] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 150.472945][ T7282] IPVS: Scheduler module ip_vs_ not found [ 150.608013][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 150.619259][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.644331][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.648971][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.671973][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.711295][ T5838] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 150.744310][ T979] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 150.754180][ T5838] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 150.754211][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.765860][ T5838] usb 1-1: config 0 descriptor?? [ 150.833481][ T979] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 151.235478][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 151.237196][ T120] usb 4-1: USB disconnect, device number 9 [ 151.276826][ T5838] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 151.285848][ T120] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 151.309096][ T5838] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 151.316109][ T5838] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 151.331110][ T120] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 151.347966][ T5838] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 151.354981][ T5838] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 151.379182][ T120] quatech2 4-1:0.51: device disconnected [ 151.412565][ T5838] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 151.455228][ T7276] random: crng reseeded on system resumption [ 151.702288][ T5838] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 151.738614][ T5838] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 151.836913][ T5888] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 151.872029][ T5838] usb 1-1: USB disconnect, device number 9 [ 151.950572][ T5888] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 151.987122][ T5888] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 152.010250][ T5888] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 152.208334][ T979] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.399921][ T979] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.421976][ T979] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.463843][ T979] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.483306][ T979] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 152.492946][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.505561][ T979] usb 5-1: Product: syz [ 152.515904][ T979] usb 5-1: Manufacturer: syz [ 152.539332][ T979] usb 5-1: SerialNumber: syz [ 152.595564][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 152.683784][ T7333] bridge_slave_1: left allmulticast mode [ 152.689910][ T7333] bridge_slave_1: left promiscuous mode [ 152.696994][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.723037][ T7336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.736600][ T7333] bridge_slave_0: left allmulticast mode [ 152.742803][ T7333] bridge_slave_0: left promiscuous mode [ 152.765098][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.120809][ T979] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 153.149653][ T979] usb 5-1: USB disconnect, device number 7 [ 153.173482][ T979] usblp0: removed [ 153.245000][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.634'. [ 154.548483][ T120] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 154.787971][ T120] usb 4-1: Using ep0 maxpacket: 16 [ 154.795053][ T120] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 154.807283][ T120] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.873287][ T120] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.920333][ T120] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 154.938654][ T120] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.958883][ T120] usb 4-1: Product: syz [ 154.966530][ T120] usb 4-1: Manufacturer: syz [ 154.984659][ T120] usb 4-1: SerialNumber: syz [ 155.200018][ T7392] input: syz0 as /devices/virtual/input/input22 [ 155.431287][ T120] usb 4-1: 0:2 : does not exist [ 155.448251][ T979] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 155.628519][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 155.644897][ T979] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 155.654089][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.666236][ T979] usb 1-1: Product: syz [ 155.670678][ T979] usb 1-1: Manufacturer: syz [ 155.675309][ T979] usb 1-1: SerialNumber: syz [ 155.707099][ T979] usb 1-1: config 0 descriptor?? [ 155.732537][ T979] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 155.847119][ T120] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1) [ 155.906302][ T7409] input: syz0 as /devices/virtual/input/input23 [ 155.929515][ T120] usb 4-1: USB disconnect, device number 10 [ 156.180173][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.547408][ T979] gspca_ov534_9: reg_w failed -71 [ 156.732197][ T5904] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 156.762991][ T5904] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 156.838005][ T979] gspca_ov534_9: Unknown sensor 0000 [ 156.838111][ T979] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 156.900974][ T979] usb 1-1: USB disconnect, device number 10 [ 158.016501][ T7459] netlink: 32 bytes leftover after parsing attributes in process `syz.3.682'. [ 158.061674][ T7463] ======================================================= [ 158.061674][ T7463] WARNING: The mand mount option has been deprecated and [ 158.061674][ T7463] and is ignored by this kernel. Remove the mand [ 158.061674][ T7463] option from the mount to silence this warning. [ 158.061674][ T7463] ======================================================= [ 158.108433][ T979] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 158.223201][ T7463] tmpfs: Unknown parameter '0xffffffffffffffff' [ 158.348407][ T979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.374909][ T979] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 158.417965][ T979] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 158.450572][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.476244][ T979] usb 1-1: config 0 descriptor?? [ 158.496124][ T979] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 158.756707][ T979] usb 1-1: USB disconnect, device number 11 [ 159.178564][ T7488] syz.3.694 (7488) used greatest stack depth: 19136 bytes left [ 159.982183][ T7506] ip6gre1: entered allmulticast mode [ 160.540230][ T979] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 160.679869][ T5888] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.718091][ T979] usb 1-1: Using ep0 maxpacket: 16 [ 160.741254][ T979] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 160.758080][ T979] usb 1-1: config 0 has no interface number 0 [ 160.767695][ T979] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.806958][ T979] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.831222][ T979] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 160.840193][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 160.861988][ T979] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 160.874858][ T5888] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 160.892390][ T979] usb 1-1: Product: syz [ 160.893991][ T5888] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.896605][ T979] usb 1-1: SerialNumber: syz [ 160.927429][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.962874][ T979] usb 1-1: config 0 descriptor?? [ 160.965318][ T5888] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.985107][ T979] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 160.992937][ T5888] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 161.001215][ T979] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input24 [ 161.016954][ T5888] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 161.029593][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.188100][ T5838] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 161.254476][ T5888] usb 3-1: GET_CAPABILITIES returned 0 [ 161.265951][ T5888] usbtmc 3-1:16.0: can't read capabilities [ 161.300654][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.309080][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.316374][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.323625][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.331409][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.338897][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.346083][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.354374][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.358082][ T5838] usb 5-1: Using ep0 maxpacket: 32 [ 161.361760][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.373933][ T979] usb 1-1: USB disconnect, device number 12 [ 161.379993][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 161.380026][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 161.417773][ T5838] usb 5-1: config 0 interface 0 has no altsetting 0 [ 161.433514][ T979] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 161.434855][ T5838] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 161.496868][ T5888] usb 3-1: USB disconnect, device number 8 [ 161.515232][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.527038][ T5838] usb 5-1: Product: syz [ 161.554891][ T5838] usb 5-1: Manufacturer: syz [ 161.562531][ T5838] usb 5-1: SerialNumber: syz [ 161.588174][ T5838] usb 5-1: config 0 descriptor?? [ 161.938383][ T7547] capability: warning: `syz.1.721' uses deprecated v2 capabilities in a way that may be insecure [ 162.028373][ T5838] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 162.428305][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 162.431070][ T5838] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 162.459143][ T5838] gs_usb 5-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 162.488196][ T5838] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 162.528368][ T5838] usb 5-1: USB disconnect, device number 8 [ 162.598736][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 162.606346][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 162.628415][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 162.668926][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 162.700618][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 162.710605][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 162.722167][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.737748][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 162.757437][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.770435][ T9] usb 3-1: config 0 descriptor?? [ 162.883431][ T7570] netlink: 692 bytes leftover after parsing attributes in process `syz.0.732'. [ 162.938355][ T979] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 162.991917][ T9] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 163.028508][ T5904] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 163.091567][ T7574] netlink: 1144 bytes leftover after parsing attributes in process `syz.4.734'. [ 163.102936][ T979] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.115281][ T979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.145232][ T979] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 163.158317][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 163.186933][ T979] usb 2-1: SerialNumber: syz [ 163.227482][ T919] usb 3-1: USB disconnect, device number 9 [ 163.236373][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.252382][ T919] usblp0: removed [ 163.266588][ T5904] usb 4-1: config 0 has no interfaces? [ 163.274661][ T5904] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 163.290403][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.308690][ T5904] usb 4-1: config 0 descriptor?? [ 163.423887][ T979] usb 2-1: 0:2 : does not exist [ 163.474549][ T979] usb 2-1: USB disconnect, device number 10 [ 163.680408][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.228045][ T5888] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 164.403384][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 164.411724][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.423290][ T5888] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 164.432223][ T979] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 164.436432][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.453154][ T5888] usb 3-1: config 0 descriptor?? [ 164.588396][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 164.596419][ T979] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 164.606396][ T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.620381][ T979] usb 1-1: config 0 descriptor?? [ 164.629660][ T979] gspca_main: sq930x-2.14.0 probing 041e:403c [ 164.818000][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.873327][ T5888] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 164.980219][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.998112][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 165.014226][ T9] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 165.034101][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.043099][ T9] usb 5-1: Product: syz [ 165.051847][ T9] usb 5-1: Manufacturer: syz [ 165.053571][ T52] usb 4-1: USB disconnect, device number 11 [ 165.056810][ T9] usb 5-1: SerialNumber: syz [ 165.119948][ T9] usb 5-1: config 0 descriptor?? [ 165.136852][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 165.199452][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 165.224702][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 165.256320][ T9] usb 5-1: media controller created [ 165.302754][ T919] usb 3-1: USB disconnect, device number 10 [ 165.354801][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.488139][ T979] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 165.536599][ T9] DVB: Unable to find symbol tda10046_attach() [ 165.541168][ T7613] block device autoloading is deprecated and will be removed. [ 165.557666][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 165.578901][ T979] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 165.591776][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 165.624114][ T979] usb 1-1: USB disconnect, device number 13 [ 165.732126][ T7621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 166.109351][ T9] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 166.143617][ T9] usb 5-1: USB disconnect, device number 9 [ 166.358644][ T7641] sch_fq: defrate 2048 ignored. [ 166.547853][ T7648] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 166.753317][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 166.847399][ T7658] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 166.859404][ T7658] macvtap1: entered promiscuous mode [ 166.866290][ T7658] macvtap1: entered allmulticast mode [ 166.902965][ T7658] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 166.947279][ T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 166.981301][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.014941][ T7658] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 167.026814][ T9] usb 1-1: config 0 descriptor?? [ 167.066697][ T7658] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 167.455359][ T979] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 167.480911][ T9] usb 1-1: Cannot set MAC address [ 167.486394][ T9] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 167.536311][ T979] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 167.566118][ T9] usb 1-1: USB disconnect, device number 14 [ 168.244818][ T7685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.497689][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 170.497709][ T30] audit: type=1326 audit(1744541069.759:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164498d169 code=0x7fc00000 [ 170.612891][ T30] audit: type=1326 audit(1744541069.759:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f164498d169 code=0x7fc00000 [ 170.691203][ T30] audit: type=1326 audit(1744541069.759:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164498d169 code=0x7fc00000 [ 170.730686][ T30] audit: type=1326 audit(1744541069.759:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164498d169 code=0x7fc00000 [ 170.755646][ T30] audit: type=1326 audit(1744541069.759:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164498d169 code=0x7fc00000 [ 170.777908][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.906404][ T30] audit: type=1326 audit(1744541069.759:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164498d169 code=0x7fc00000 [ 170.928773][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.000876][ T30] audit: type=1326 audit(1744541069.759:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164498d169 code=0x7fc00000 [ 171.028346][ T7744] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 171.094510][ T30] audit: type=1326 audit(1744541069.759:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164498d169 code=0x7fc00000 [ 171.156450][ T30] audit: type=1326 audit(1744541069.759:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164498d169 code=0x7fc00000 [ 171.178729][ C0] vkms_vblank_simulate: vblank timer overrun [ 171.247161][ T30] audit: type=1326 audit(1744541069.759:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7720 comm="syz.2.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164498d169 code=0x7fc00000 [ 171.528390][ T52] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 171.729686][ T52] usb 1-1: config 0 has no interfaces? [ 171.742241][ T52] usb 1-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 171.752340][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.768332][ T52] usb 1-1: Product: syz [ 171.777367][ T52] usb 1-1: Manufacturer: syz [ 171.797035][ T52] usb 1-1: SerialNumber: syz [ 171.833106][ T52] usb 1-1: config 0 descriptor?? [ 172.074706][ T7779] hsr0: entered promiscuous mode [ 172.163016][ T9] usb 1-1: USB disconnect, device number 15 [ 172.307235][ T7785] usb usb8: usbfs: process 7785 (syz.2.828) did not claim interface 0 before use [ 172.657997][ T5888] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 172.842929][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 172.855227][ T5888] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 172.869009][ T5888] usb 2-1: config 0 has no interface number 0 [ 172.912771][ T5888] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 172.926263][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.940800][ T5888] usb 2-1: Product: syz [ 172.945037][ T5888] usb 2-1: Manufacturer: syz [ 172.951800][ T5888] usb 2-1: SerialNumber: syz [ 172.960225][ T5888] usb 2-1: config 0 descriptor?? [ 172.977138][ T5888] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 173.069786][ T5838] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 173.121962][ T7817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.220613][ T5888] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 173.252149][ T5888] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 173.279982][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 173.287334][ T5838] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.318540][ T5838] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 173.327608][ T5838] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 173.338739][ T7820] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 173.338934][ T7820] macvtap1: entered promiscuous mode [ 173.339154][ T7820] macvtap1: entered allmulticast mode [ 173.360672][ T5838] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 173.402679][ T7820] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 173.408031][ T5838] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 173.460121][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.462190][ T7820] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 173.475933][ T5838] hub 1-1:1.0: bad descriptor, ignoring hub [ 173.490282][ T5838] hub 1-1:1.0: probe with driver hub failed with error -5 [ 173.501501][ T5838] cdc_wdm 1-1:1.0: skipping garbage [ 173.508330][ T7820] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 173.509951][ T5838] cdc_wdm 1-1:1.0: skipping garbage [ 173.558711][ T5838] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 173.564901][ T5838] cdc_wdm 1-1:1.0: Unknown control protocol [ 173.661019][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 173.669474][ T5838] usb 2-1: USB disconnect, device number 11 [ 173.710212][ T5838] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 173.749275][ T5838] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 173.783311][ T5838] quatech2 2-1:0.51: device disconnected [ 173.949287][ T120] usb 1-1: USB disconnect, device number 16 [ 174.110717][ T5888] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 174.280413][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 174.315989][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 174.344431][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 174.363287][ T5888] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 174.383105][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.394756][ T5888] usb 3-1: config 0 descriptor?? [ 174.833134][ T5888] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 174.861924][ T5888] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 174.888401][ T5888] kovaplus 0003:1E7D:2D50.000A: unknown main item tag 0x0 [ 174.933878][ T5888] kovaplus 0003:1E7D:2D50.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 175.061259][ T7868] loop4: detected capacity change from 0 to 8 [ 175.072926][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.082370][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 175.095702][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 175.105028][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 175.119657][ T7868] Dev loop4: unable to read RDB block 8 [ 175.125514][ T7868] loop4: unable to read partition table [ 175.133290][ T36] loop: Write error at byte offset 1, length 4096. [ 175.145022][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 175.154527][ C1] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 175.182772][ T7868] loop4: partition table beyond EOD, truncated [ 175.192343][ T7868] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 175.252094][ T5888] kovaplus 0003:1E7D:2D50.000A: couldn't init struct kovaplus_device [ 175.269366][ T5888] kovaplus 0003:1E7D:2D50.000A: couldn't install mouse [ 175.293298][ T5888] kovaplus 0003:1E7D:2D50.000A: probe with driver kovaplus failed with error -71 [ 175.338417][ T5888] usb 3-1: USB disconnect, device number 11 [ 175.405204][ T7876] netlink: 'syz.0.868': attribute type 16 has an invalid length. [ 175.440572][ T7876] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.868'. [ 176.168846][ T7903] loop2: detected capacity change from 0 to 7 [ 176.191018][ T7903] Dev loop2: unable to read RDB block 7 [ 176.207214][ T7903] loop2: unable to read partition table [ 176.228959][ T7903] loop2: partition table beyond EOD, truncated [ 176.250630][ T7903] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 177.391055][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 177.391077][ T30] audit: type=1326 audit(1744541076.659:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7938 comm="syz.1.899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8db838d169 code=0x0 [ 177.456244][ T7943] loop2: detected capacity change from 0 to 7 [ 177.522523][ T7943] Dev loop2: unable to read RDB block 7 [ 177.560693][ T7943] loop2: unable to read partition table [ 177.566611][ T7943] loop2: partition table beyond EOD, truncated [ 177.573724][ T7943] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 178.061680][ T7954] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 179.653034][ T8002] input: syz0 as /devices/virtual/input/input25 [ 179.946880][ T8006] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.956327][ T8006] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.965199][ T8006] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.975382][ T8006] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.985440][ T8006] vxlan0: entered promiscuous mode [ 179.991506][ T8006] vxlan0: entered allmulticast mode [ 180.669355][ T8037] netlink: 'syz.2.937': attribute type 1 has an invalid length. [ 180.748028][ T5838] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 180.963911][ T5838] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 180.982740][ T5838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 181.011947][ T5838] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 181.035695][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 181.072874][ T5838] usb 4-1: Product: syz [ 181.104902][ T5838] usb 4-1: Manufacturer: syz [ 181.113928][ T5838] usb 4-1: SerialNumber: syz [ 181.121456][ T8046] loop4: detected capacity change from 0 to 8 [ 181.132872][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 181.142106][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 181.161506][ T5838] usb 4-1: config 0 descriptor?? [ 181.172230][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 181.175188][ T8048] netlink: 'syz.4.942': attribute type 4 has an invalid length. [ 181.181453][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 181.201304][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 181.210528][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 181.221070][ T8046] Dev loop4: unable to read RDB block 8 [ 181.221107][ T12] loop: Write error at byte offset 1, length 4096. [ 181.226670][ T8046] loop4: unable to read partition table [ 181.242416][ T5838] usb 4-1: selecting invalid altsetting 0 [ 181.256862][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 181.266386][ C1] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 181.278196][ T8046] loop4: partition table beyond EOD, truncated [ 181.284399][ T8046] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 181.459150][ T5838] usb 4-1: USB disconnect, device number 12 [ 182.039092][ T8064] netlink: 172 bytes leftover after parsing attributes in process `syz.1.949'. [ 182.508617][ T8077] tap0: tun_chr_ioctl cmd 1074025677 [ 182.514267][ T8077] tap0: linktype set to 778 [ 182.915806][ T8089] mmap: syz.3.960 (8089) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.968754][ T8058] syz.2.946 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 183.455619][ T8105] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.750170][ T8112] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.792014][ T8112] bond1: entered promiscuous mode [ 183.834749][ T8112] bond1: entered allmulticast mode [ 183.846276][ T8112] bond0: (slave bond1): Enslaving as an active interface with an up link [ 183.890882][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 184.204878][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.979'. [ 184.390737][ T8136] netlink: 452 bytes leftover after parsing attributes in process `syz.4.982'. [ 184.554618][ T8142] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 185.498000][ T5838] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 185.677998][ T5838] usb 5-1: Using ep0 maxpacket: 16 [ 185.686295][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 185.717938][ T5838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.771225][ T5838] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 185.796294][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.843231][ T5838] usb 5-1: Product: syz [ 185.864714][ T5838] usb 5-1: Manufacturer: syz [ 185.881932][ T5838] usb 5-1: SerialNumber: syz [ 185.913687][ T5838] usb 5-1: config 0 descriptor?? [ 185.951813][ T5838] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 185.973893][ T5838] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 186.559096][ T5838] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 186.770410][ T5838] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 186.787983][ T5838] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 186.819624][ T5838] em28xx 5-1:0.0: No AC97 audio processor [ 186.851983][ T5838] usb 5-1: USB disconnect, device number 10 [ 186.881822][ T5838] em28xx 5-1:0.0: Disconnecting em28xx [ 186.940089][ T5838] em28xx 5-1:0.0: Freeing device [ 187.120945][ T5904] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 187.280392][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 187.290648][ T5904] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.303924][ T5904] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.315177][ T5904] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.347070][ T5904] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 187.376587][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 187.385810][ T5904] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 187.418683][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.449857][ T5904] usb 3-1: config 0 descriptor?? [ 187.880084][ T5904] hid (null): unknown global tag 0xc [ 187.968221][ T5904] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5010.000B/input/input26 [ 188.083001][ T5904] kye 0003:0458:5010.000B: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0 [ 188.132978][ T5904] usb 3-1: USB disconnect, device number 12 [ 188.248285][ T979] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 188.412310][ T979] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 188.430997][ T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.449367][ T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.502588][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.529961][ T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.548167][ T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.565461][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.588334][ T5904] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 188.610401][ T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.627969][ T5838] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 188.644354][ T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.699373][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.707570][ T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.732122][ T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.764210][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.770989][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 188.787110][ T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.801799][ T5904] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.815663][ T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.829592][ T5904] usb 1-1: config 0 has no interface number 0 [ 188.837562][ T5838] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 188.842031][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.857477][ T5904] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 188.871131][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.877926][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.888177][ T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.909864][ T5838] usb 2-1: config 0 descriptor?? [ 188.917505][ T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.931505][ T5904] usb 1-1: Product: syz [ 188.935708][ T5904] usb 1-1: Manufacturer: syz [ 188.954529][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 188.964636][ T5904] usb 1-1: SerialNumber: syz [ 188.985588][ T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.002470][ T5904] usb 1-1: config 0 descriptor?? [ 189.018492][ T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.033166][ T5904] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 189.041135][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.050774][ T979] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.063476][ T979] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.090339][ T979] usb 5-1: config 0 interface 0 has no altsetting 0 [ 189.101573][ T979] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 189.123599][ T979] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 189.142709][ T979] usb 5-1: Product: syz [ 189.152827][ T979] usb 5-1: Manufacturer: syz [ 189.162946][ T979] usb 5-1: SerialNumber: syz [ 189.176726][ T979] usb 5-1: config 0 descriptor?? [ 189.208665][ T979] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 189.326442][ T5838] [drm:udl_init] *ERROR* Selecting channel failed [ 189.370996][ T5838] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 189.383780][ T5838] [drm] Initialized udl on minor 2 [ 189.423126][ T5838] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 189.456443][ T5838] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 189.488738][ T5888] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 189.501978][ T5838] usb 2-1: USB disconnect, device number 12 [ 189.524450][ T5888] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 189.865232][ T5904] gspca_spca1528: reg_w err -71 [ 189.901196][ T5904] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 189.923158][ T5904] usb 1-1: USB disconnect, device number 17 [ 190.403297][ T8262] syz.2.1038 (8262): drop_caches: 2 [ 191.096732][ T919] usb 5-1: USB disconnect, device number 11 [ 191.139064][ T919] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 191.276587][ T8308] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1060'. [ 191.469424][ T8314] macsec0: entered promiscuous mode [ 191.485794][ T8314] macsec1: entered allmulticast mode [ 191.491363][ T8314] macsec0: entered allmulticast mode [ 191.496802][ T8314] veth1_macvtap: entered allmulticast mode [ 191.508201][ T5904] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 191.658078][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 191.678406][ T5904] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 191.699036][ T5904] usb 3-1: config 0 has no interface number 0 [ 191.708297][ T5838] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 191.716526][ T5904] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.739167][ T5904] usb 3-1: config 0 interface 85 has no altsetting 0 [ 191.773781][ T5904] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 191.795521][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.815525][ T5904] usb 3-1: Product: syz [ 191.819799][ T5904] usb 3-1: Manufacturer: syz [ 191.824762][ T5904] usb 3-1: SerialNumber: syz [ 191.832893][ T5904] usb 3-1: config 0 descriptor?? [ 191.878224][ T5838] usb 1-1: Using ep0 maxpacket: 32 [ 191.909380][ T5838] usb 1-1: unable to get BOS descriptor or descriptor too short [ 191.935711][ T5838] usb 1-1: no configurations [ 191.963559][ T5838] usb 1-1: can't read configurations, error -22 [ 192.181235][ T919] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 192.338050][ T919] usb 4-1: Using ep0 maxpacket: 8 [ 192.348971][ T919] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 192.360185][ T919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.379150][ T919] usb 4-1: config 0 descriptor?? [ 192.455759][ T5904] appletouch 3-1:0.85: Geyser mode initialized. [ 192.493075][ T5904] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input27 [ 192.606473][ T919] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 192.720873][ T5904] usb 3-1: USB disconnect, device number 13 [ 192.720979][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 192.791483][ T5904] appletouch 3-1:0.85: input: appletouch disconnected [ 193.222045][ T919] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 193.234009][ T919] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 193.260558][ T919] asix 4-1:0.0: probe with driver asix failed with error -71 [ 193.272869][ T919] usb 4-1: USB disconnect, device number 13 [ 193.955331][ T5838] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 193.978962][ T5838] hid-generic 0000:0003:0000.000C: unknown main item tag 0x0 [ 194.014841][ T5838] hid-generic 0000:0003:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 194.276071][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.282582][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.988648][ T8410] syz.4.1108 (8410): /proc/8409/oom_adj is deprecated, please use /proc/8409/oom_score_adj instead. [ 195.836282][ T8430] could not allocate digest TFM handle sha384-arm64 [ 196.280539][ T8446] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1121'. [ 196.306825][ T8446] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1121'. [ 196.538362][ T120] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 196.708209][ T120] usb 3-1: Using ep0 maxpacket: 8 [ 196.718265][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.751138][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.797448][ T120] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 196.818296][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.918838][ T120] usb 3-1: config 0 descriptor?? [ 196.997338][ T8464] vlan2: entered allmulticast mode [ 197.007577][ T8464] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 197.343344][ T120] microsoft 0003:045E:009D.000D: unknown main item tag 0x0 [ 197.381181][ T120] microsoft 0003:045E:009D.000D: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.2-1/input0 [ 197.415609][ T120] microsoft 0003:045E:009D.000D: no inputs found [ 197.468096][ T120] microsoft 0003:045E:009D.000D: could not initialize ff, continuing anyway [ 197.572618][ T919] usb 3-1: USB disconnect, device number 14 [ 198.107743][ T8483] syz.3.1140 (8483): drop_caches: 2 [ 198.691801][ T919] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0 [ 198.701015][ T8516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1164'. [ 198.715101][ T919] hid-generic 0000:0003:0000.000E: unknown main item tag 0x0 [ 198.744999][ T919] hid-generic 0000:0003:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 199.498313][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 199.678189][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 199.689958][ T9] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 199.703033][ T9] usb 2-1: config 0 has no interface number 0 [ 199.710943][ T9] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 199.743717][ T9] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 199.775138][ T9] usb 2-1: config 0 interface 126 has no altsetting 0 [ 199.811497][ T9] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 199.838509][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.856918][ T9] usb 2-1: Product: syz [ 199.867132][ T9] usb 2-1: Manufacturer: syz [ 199.872878][ T13] wlan1: Trigger new scan to find an IBSS to join [ 199.890280][ T9] usb 2-1: SerialNumber: syz [ 199.910546][ T9] usb 2-1: config 0 descriptor?? [ 199.925366][ T8537] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.936444][ T8537] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 200.378981][ T9] ir_usb 2-1:0.126: IR Dongle converter detected [ 200.599554][ T9] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 200.814102][ T9] usb 2-1: USB disconnect, device number 13 [ 200.839127][ T9] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 200.890908][ T9] ir_usb 2-1:0.126: device disconnected [ 201.568080][ T30] audit: type=1326 audit(1744541100.809:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8595 comm="syz.1.1189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8db838d169 code=0x0 [ 201.601106][ T8598] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1190'. [ 202.104598][ T8611] loop6: detected capacity change from 0 to 524288000 [ 203.032867][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 203.209479][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 203.231539][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.257918][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.288320][ T9] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 203.297532][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.362814][ T9] usb 5-1: config 0 descriptor?? [ 203.841283][ T9] hid-multitouch 0003:1FD2:6007.000F: unknown main item tag 0x0 [ 203.880794][ T9] hid-multitouch 0003:1FD2:6007.000F: unknown main item tag 0x0 [ 203.901263][ T9] hid-multitouch 0003:1FD2:6007.000F: unknown main item tag 0x0 [ 203.937105][ T9] hid-multitouch 0003:1FD2:6007.000F: unknown main item tag 0x0 [ 203.981829][ T9] hid-multitouch 0003:1FD2:6007.000F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 204.071328][ T9] usb 5-1: USB disconnect, device number 12 [ 204.910656][ T53] wlan1: Trigger new scan to find an IBSS to join [ 205.118813][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 205.193562][ T8676] bond0 (unregistering): left allmulticast mode [ 205.211746][ T8676] bond_slave_0: left allmulticast mode [ 205.217815][ T8676] bond_slave_1: left allmulticast mode [ 205.237980][ T8676] bond1: left allmulticast mode [ 205.243049][ T8676] bond0 (unregistering): left promiscuous mode [ 205.258669][ T8676] bond_slave_0: left promiscuous mode [ 205.269865][ T8676] bond_slave_1: left promiscuous mode [ 205.285550][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 205.291073][ T8676] bond1: left promiscuous mode [ 205.301219][ T9] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 205.321144][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.349982][ T9] usb 3-1: Product: syz [ 205.359773][ T9] usb 3-1: Manufacturer: syz [ 205.370898][ T9] usb 3-1: SerialNumber: syz [ 205.374251][ T8676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.401032][ T9] usb 3-1: config 0 descriptor?? [ 205.401447][ T8676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.451941][ T8676] bond0 (unregistering): (slave bond1): Releasing backup interface [ 205.465076][ T8676] bond0 (unregistering): Released all slaves [ 205.620926][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 205.690427][ T8699] batadv_slave_1: entered promiscuous mode [ 205.743738][ T8699] batadv_slave_1: left promiscuous mode [ 205.833819][ T36] wlan1: Creating new IBSS network, BSSID 4e:62:46:4e:2b:5c [ 206.048042][ T5904] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 206.221701][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 206.241458][ T9] gspca_sunplus: reg_w_riv err -71 [ 206.246713][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 206.281272][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.307368][ T9] usb 3-1: USB disconnect, device number 15 [ 206.318010][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.376496][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.409110][ T5904] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 206.433209][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.473215][ T5904] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 206.488110][ T5904] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 206.537302][ T5904] usb 1-1: Manufacturer: syz [ 206.565706][ T5904] usb 1-1: config 0 descriptor?? [ 206.896594][ T8734] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1251'. [ 206.928387][ T30] audit: type=1326 audit(1744541106.189:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.2.1252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f164498d169 code=0x0 [ 207.097989][ T5904] rc_core: IR keymap rc-hauppauge not found [ 207.104792][ T5904] Registered IR keymap rc-empty [ 207.108091][ T5838] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 207.114589][ T5904] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.148063][ T5904] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.189231][ T5904] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 207.257504][ T5904] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input29 [ 207.279975][ T5838] usb 4-1: config 2 has an invalid interface number: 83 but max is 0 [ 207.291329][ T5904] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.299278][ T5838] usb 4-1: config 2 has an invalid interface number: 5 but max is 0 [ 207.307313][ T5838] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 207.318512][ T5904] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.351948][ T5838] usb 4-1: config 2 has no interface number 0 [ 207.357667][ T5904] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.377975][ T5838] usb 4-1: config 2 has no interface number 1 [ 207.384980][ T5838] usb 4-1: too many endpoints for config 2 interface 5 altsetting 6: 249, using maximum allowed: 30 [ 207.398420][ T5904] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.417209][ T5838] usb 4-1: config 2 interface 5 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 249 [ 207.441680][ T5904] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.451098][ T5838] usb 4-1: config 2 interface 5 has no altsetting 0 [ 207.465077][ T5838] usb 4-1: New USB device found, idVendor=045e, idProduct=00c2, bcdDevice=e1.35 [ 207.483445][ T5904] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.487939][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.508294][ T5904] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.538680][ T5904] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.578331][ T5904] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.608069][ T5904] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 207.650191][ T5904] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 207.670868][ T5904] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 207.693764][ T5904] usb 1-1: USB disconnect, device number 20 [ 207.751743][ T5838] usb 4-1: string descriptor 0 read error: -71 [ 207.808272][ T5838] usb 4-1: USB disconnect, device number 14 [ 208.348686][ T5838] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 208.511972][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.547443][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.577423][ T5838] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 208.600368][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.640852][ T5838] usb 2-1: config 0 descriptor?? [ 209.074478][ T5838] sony 0003:054C:024B.0010: unexpected long global item [ 209.124516][ T5838] sony 0003:054C:024B.0010: parse failed [ 209.138056][ T5838] sony 0003:054C:024B.0010: probe with driver sony failed with error -22 [ 209.279346][ T5838] usb 2-1: USB disconnect, device number 14 [ 209.287349][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 209.681115][ T8790] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 209.700111][ T8790] macvlan2: entered allmulticast mode [ 209.705558][ T8790] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 209.735961][ T8790] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 209.802720][ T8790] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 211.711510][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 211.713137][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 211.718989][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 211.725347][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 211.731265][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 212.223503][ T8858] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 212.361094][ T8865] netlink: 'syz.2.1305': attribute type 2 has an invalid length. [ 212.839783][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 213.021163][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.041772][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 213.067973][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.097290][ T9] usb 5-1: config 0 descriptor?? [ 213.111398][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 213.716779][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 213.733667][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 213.758055][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 213.773741][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 213.791838][ T5904] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 213.811255][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 213.833882][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 213.861772][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 213.882494][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 213.896419][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 213.913720][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 213.928861][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 213.956384][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 213.970820][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 213.991993][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 214.007650][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.028639][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.048448][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 214.067241][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 214.081034][ T5904] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.101300][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.123685][ T9] pwc: Registered as video103. [ 214.134151][ T5904] usb 1-1: Product: syz [ 214.160675][ T5904] usb 1-1: Manufacturer: syz [ 214.165336][ T5904] usb 1-1: SerialNumber: syz [ 214.178156][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 214.226949][ T9] usb 5-1: USB disconnect, device number 13 [ 214.421033][ T5904] usb 1-1: 0:2 : does not exist [ 214.470624][ T5904] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 214.617345][ T5904] usb 1-1: USB disconnect, device number 21 [ 214.949350][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.819252][ T8948] netlink: 'syz.4.1343': attribute type 1 has an invalid length. [ 216.428325][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1349'. [ 217.117975][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.138344][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 217.302349][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 217.317500][ T9] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 217.337338][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.381487][ T9] usb 5-1: Product: syz [ 217.400708][ T9] usb 5-1: Manufacturer: syz [ 217.405360][ T9] usb 5-1: SerialNumber: syz [ 217.423993][ T9] usb 5-1: config 0 descriptor?? [ 217.443413][ T9] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 217.462595][ T9] usb 5-1: setting power ON [ 217.467504][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 217.503493][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 217.555717][ T9] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 217.572749][ T9] usb 5-1: media controller created [ 217.618026][ T5838] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 217.627038][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.661306][ T8972] dvb-usb: bulk message failed: -22 (3/0) [ 217.681009][ T8972] usb 5-1: gpio_write failed. [ 217.685989][ T8972] dvb-usb: bulk message failed: -22 (4/0) [ 217.719314][ T8972] dvb-usb: bulk message failed: -22 (4/0) [ 217.747982][ T8972] cxusb: i2c read failed [ 217.784051][ T5838] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 217.795418][ T9] usb 5-1: selecting invalid altsetting 6 [ 217.817505][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.817937][ T9] usb 5-1: digital interface selection failed (-22) [ 217.838677][ T5838] usb 3-1: Product: syz [ 217.842984][ T5838] usb 3-1: Manufacturer: syz [ 217.863272][ T5838] usb 3-1: SerialNumber: syz [ 217.873267][ T9] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 217.904920][ T5838] usb 3-1: config 0 descriptor?? [ 217.923714][ T9] usb 5-1: setting power OFF [ 217.931649][ T9] dvb-usb: bulk message failed: -22 (2/0) [ 217.937602][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 217.943877][ T8999] sctp: [Deprecated]: syz.3.1366 (pid 8999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.943877][ T8999] Use struct sctp_sack_info instead [ 217.988381][ T9] (NULL device *): no alternate interface [ 218.112566][ T9] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 218.199528][ T9] usb 5-1: USB disconnect, device number 14 [ 218.329971][ T5838] usb 3-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 218.342853][ T9008] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 218.349676][ T9008] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 218.357368][ T5838] usb 3-1: Firmware version (0.0) predates our first public release. [ 218.380943][ T5838] usb 3-1: Please update to version 0.2 or newer [ 218.383538][ T9008] vhci_hcd vhci_hcd.0: Device attached [ 218.435963][ T9009] vhci_hcd: connection closed [ 218.449690][ T70] vhci_hcd: stop threads [ 218.476661][ T70] vhci_hcd: release socket [ 218.485924][ T70] vhci_hcd: disconnect device [ 218.635304][ T5838] usb 3-1: USB disconnect, device number 16 [ 218.742331][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 218.909952][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 218.922971][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 218.935039][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 218.966991][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 218.992043][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.020670][ T9] usb 4-1: Product: syz [ 219.036413][ T9] usb 4-1: Manufacturer: syz [ 219.049434][ T9] usb 4-1: SerialNumber: syz [ 219.076014][ T9] usb 4-1: config 0 descriptor?? [ 219.115004][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 219.149842][ T9] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 219.699613][ T9] em28xx 4-1:0.0: chip ID is em2884 [ 219.901349][ T9] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 219.920273][ T9] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 219.927348][ T9] em28xx 4-1:0.0: No AC97 audio processor [ 219.958683][ T9] usb 4-1: USB disconnect, device number 15 [ 219.989435][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 220.016497][ T9] em28xx 4-1:0.0: Freeing device [ 220.039826][ T9059] support for the xor transformation has been removed. [ 220.607956][ T5838] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 220.804501][ T5838] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 220.828018][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.852853][ T5838] usb 2-1: Product: syz [ 220.867517][ T5838] usb 2-1: Manufacturer: syz [ 220.877613][ T5838] usb 2-1: SerialNumber: syz [ 220.954711][ T5838] usb 2-1: config 0 descriptor?? [ 220.965713][ T5838] ch341 2-1:0.0: ch341-uart converter detected [ 221.375644][ T9108] netlink: 'syz.3.1416': attribute type 10 has an invalid length. [ 221.388326][ T919] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 221.482267][ T9108] team0: Port device wlan1 added [ 221.589088][ T919] usb 5-1: Using ep0 maxpacket: 8 [ 221.603046][ T919] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 221.638965][ T919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.680753][ T919] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.692069][ T919] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.722201][ T919] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.747557][ T919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.792292][ T5838] usb 2-1: failed to send control message: -71 [ 221.813717][ T5838] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 221.849155][ T5838] usb 2-1: USB disconnect, device number 15 [ 221.873564][ T5838] ch341 2-1:0.0: device disconnected [ 221.989528][ T919] usb 5-1: GET_CAPABILITIES returned 0 [ 222.004986][ T919] usbtmc 5-1:16.0: can't read capabilities [ 222.210899][ T5838] usb 5-1: USB disconnect, device number 15 [ 222.529650][ T5888] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 222.699967][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 222.724824][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 222.795857][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 222.817938][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 222.868369][ T5888] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 222.889551][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.920409][ T5888] usb 1-1: config 0 descriptor?? [ 222.928122][ T9130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 222.949513][ T5888] hub 1-1:0.0: USB hub found [ 223.275974][ T5888] hub 1-1:0.0: 8 ports detected [ 223.286484][ T5888] hub 1-1:0.0: insufficient power available to use all downstream ports [ 223.459547][ T9] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 223.569404][ T5888] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 223.578417][ T5888] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 223.600281][ T5888] usbhid 1-1:0.0: can't add hid device: -71 [ 223.606345][ T5888] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 223.651221][ T9] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.688419][ T9] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.704521][ T5888] usb 1-1: USB disconnect, device number 22 [ 223.738234][ T9] usb 2-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 223.792832][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 223.818695][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 223.852481][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.895028][ T9] usb 2-1: config 0 descriptor?? [ 224.381857][ T9] uclogic 0003:28BD:0074.0011: interface is invalid, ignoring [ 224.552338][ T9] usb 2-1: USB disconnect, device number 16 [ 225.610634][ T9216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.164042][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 226.349056][ T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 226.367957][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.414770][ T9] usb 5-1: config 0 descriptor?? [ 226.440608][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 227.060270][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 227.066466][ T9] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 227.116876][ T9] usb 5-1: USB disconnect, device number 16 [ 227.745337][ T9278] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 228.031354][ T9272] syz.2.1493 (9272): drop_caches: 2 [ 228.340324][ T9298] input: syz0 as /devices/virtual/input/input31 [ 228.532350][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1510'. [ 228.937967][ T52] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 229.097965][ T52] usb 3-1: Using ep0 maxpacket: 32 [ 229.105169][ T52] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 229.118455][ T52] usb 3-1: config 0 has no interface number 0 [ 229.126981][ T52] usb 3-1: config 0 interface 184 has no altsetting 0 [ 229.137326][ T52] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 229.163918][ T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.174123][ T52] usb 3-1: Product: syz [ 229.181734][ T52] usb 3-1: Manufacturer: syz [ 229.186573][ T52] usb 3-1: SerialNumber: syz [ 229.196385][ T52] usb 3-1: config 0 descriptor?? [ 229.206692][ T52] smsc75xx v1.0.0 [ 229.388672][ T9335] veth0_to_bond: entered allmulticast mode [ 229.834669][ T52] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 229.850551][ T9345] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1528'. [ 229.886680][ T52] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 229.917773][ T52] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 229.934934][ T52] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 229.975091][ T52] usb 3-1: USB disconnect, device number 17 [ 230.993703][ T9374] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1541'. [ 231.693062][ T9395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1552'. [ 231.934886][ T30] audit: type=1326 audit(1744541131.199:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9401 comm="syz.0.1554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff2658d169 code=0x0 [ 231.956729][ C0] vkms_vblank_simulate: vblank timer overrun [ 232.597003][ T9431] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1566'. [ 232.934393][ T9441] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 232.958127][ T9441] syzkaller0: linktype set to 65534 [ 233.195863][ T9453] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 233.221135][ T9453] usb usb1: Process 9453 (syz.1.1578) called USBDEVFS_CLEAR_HALT for active endpoint 0x81 [ 233.314177][ T9459] openvswitch: netlink: IP tunnel dst address not specified [ 234.735391][ T9504] tun0: tun_chr_ioctl cmd 2147767517 [ 235.111719][ T5904] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 235.185960][ T9515] syz.0.1606 (9515): drop_caches: 2 [ 235.188095][ T5838] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 235.266881][ T9519] netlink: 'syz.3.1608': attribute type 29 has an invalid length. [ 235.280025][ T5904] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 235.283943][ T9519] netlink: 'syz.3.1608': attribute type 29 has an invalid length. [ 235.306379][ T9519] netlink: 'syz.3.1608': attribute type 29 has an invalid length. [ 235.314463][ T5904] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 235.342297][ T5904] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 235.378626][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.381551][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 235.412973][ T5838] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.413991][ T9509] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.443828][ T5838] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 235.477791][ T5904] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.515359][ T5838] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.57 [ 235.537533][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 235.569590][ T5838] usb 3-1: SerialNumber: syz [ 235.654145][ T5838] cdc_ether 3-1:1.0: skipping garbage [ 235.689329][ T5838] usb 3-1: bad CDC descriptors [ 235.810135][ T5838] usb 2-1: USB disconnect, device number 17 [ 235.929223][ T52] usb 3-1: USB disconnect, device number 18 [ 235.942441][ T30] audit: type=1326 audit(1744541135.209:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9532 comm="syz.3.1615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19aff8d169 code=0x0 [ 236.567959][ T5904] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 236.728186][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 236.748631][ T5904] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 236.765894][ T5904] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 236.804945][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.823527][ T5904] usb 5-1: Product: syz [ 236.833643][ T5904] usb 5-1: Manufacturer: syz [ 236.838777][ T5904] usb 5-1: SerialNumber: syz [ 236.860064][ T5904] usb 5-1: config 0 descriptor?? [ 236.874506][ T5904] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 236.899562][ T5904] usb 5-1: Detected FT232R [ 237.084955][ T5904] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 237.304412][ T5904] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 237.407943][ T5895] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 237.515036][ T5904] usb 5-1: USB disconnect, device number 17 [ 237.539204][ T5904] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 237.554570][ T5904] ftdi_sio 5-1:0.0: device disconnected [ 237.608996][ T5895] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 237.621478][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.642101][ T5895] usb 4-1: Product: syz [ 237.646316][ T5895] usb 4-1: Manufacturer: syz [ 237.662176][ T5895] usb 4-1: SerialNumber: syz [ 237.677603][ T5895] usb 4-1: config 0 descriptor?? [ 237.926918][ T5895] usb 4-1: USB disconnect, device number 16 [ 238.398010][ T5888] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 238.570299][ T5888] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 238.608195][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.629296][ T5888] usb 2-1: config 0 descriptor?? [ 238.642894][ T5888] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 238.972045][ T30] audit: type=1326 audit(1744541138.239:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9619 comm="syz.2.1653" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f164498d169 code=0x0 [ 239.028108][ T5904] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 239.198005][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 239.211450][ T5904] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.222238][ T5904] usb 4-1: config 0 has no interface number 0 [ 239.232822][ T5904] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.244089][ T5904] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.254712][ T5904] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 239.265264][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.277013][ T5904] usb 4-1: config 0 descriptor?? [ 239.456502][ T5888] gspca_sunplus: reg_w_riv err -71 [ 239.471194][ T5888] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 239.489763][ T5888] usb 2-1: USB disconnect, device number 18 [ 239.914405][ T5904] uclogic 0003:28BD:0094.0012: pen parameters not found [ 239.938043][ T5904] uclogic 0003:28BD:0094.0012: interface is invalid, ignoring [ 240.136392][ T5904] usb 4-1: USB disconnect, device number 17 [ 240.511082][ T9660] netlink: 'syz.0.1671': attribute type 3 has an invalid length. [ 240.583963][ T9665] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 240.796777][ T9669] loop8: detected capacity change from 0 to 1 [ 240.807678][ T9669] Dev loop8: unable to read RDB block 1 [ 240.813633][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 240.847598][ T9669] loop8: unable to read partition table [ 240.861919][ T9669] loop8: partition table beyond EOD, truncated [ 240.869553][ T9669] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 240.959207][ T9675] bond0: entered promiscuous mode [ 240.964777][ T9675] bond_slave_0: entered promiscuous mode [ 241.000043][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 241.006899][ T9675] bond_slave_1: entered promiscuous mode [ 241.016752][ T9] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.042351][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 241.043513][ T9674] bond0: left promiscuous mode [ 241.058125][ T9] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 241.067321][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.086689][ T9674] bond_slave_0: left promiscuous mode [ 241.096988][ T9674] bond_slave_1: left promiscuous mode [ 241.127947][ T9] usb 3-1: config 0 descriptor?? [ 241.558263][ T9] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 241.573484][ T30] audit: type=1326 audit(1744541140.839:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9697 comm="syz.1.1685" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8db838d169 code=0x0 [ 241.600376][ T9] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 241.607829][ T9] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 241.636418][ T9] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 241.652186][ T9] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 241.684727][ T9] steelseries 0003:1038:12B6.0013: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 242.008270][ T5904] usb 3-1: USB disconnect, device number 19 [ 242.433864][ T9721] kvm: user requested TSC rate below hardware speed [ 242.853466][ T5888] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 243.028167][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 243.049057][ T5888] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.079004][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.108506][ T5888] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 243.128522][ T5888] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.162665][ T5888] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 243.205001][ C1] hrtimer: interrupt took 16216 ns [ 243.210879][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.351041][ T9744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 243.454200][ T5888] usb 2-1: GET_CAPABILITIES returned 0 [ 243.478194][ T5888] usbtmc 2-1:16.0: can't read capabilities [ 243.693886][ T9] usb 2-1: USB disconnect, device number 19 [ 244.328704][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1715'. [ 244.842440][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1720'. [ 244.882380][ T9782] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 244.916819][ T9782] macsec1: entered allmulticast mode [ 244.946303][ T9782] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 244.986824][ T9782] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 245.018047][ T9782] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 245.569850][ T5904] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 245.769324][ T5904] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 245.797935][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.816877][ T5904] usb 5-1: config 0 descriptor?? [ 245.832674][ T5904] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 246.305426][ T52] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 246.443981][ T5904] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 246.458125][ T52] usb 2-1: Using ep0 maxpacket: 8 [ 246.465573][ T5904] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 246.477017][ T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.491384][ T52] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 246.500689][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.522202][ T52] usb 2-1: config 0 descriptor?? [ 246.655871][ T5904] usb 5-1: USB disconnect, device number 18 [ 247.007644][ T52] holtek 0003:1241:5015.0014: unknown main item tag 0x0 [ 247.014740][ T52] holtek 0003:1241:5015.0014: unknown main item tag 0x0 [ 247.022213][ T52] holtek 0003:1241:5015.0014: item fetching failed at offset 2/5 [ 247.031304][ T52] holtek 0003:1241:5015.0014: parse failed [ 247.037219][ T52] holtek 0003:1241:5015.0014: probe with driver holtek failed with error -22 [ 247.217640][ T52] usb 2-1: USB disconnect, device number 20 [ 247.588284][ T919] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 247.751288][ T919] usb 5-1: Using ep0 maxpacket: 8 [ 247.771659][ T919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.796894][ T919] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 247.828878][ T919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.851347][ T919] usb 5-1: config 0 descriptor?? [ 247.866164][ T919] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 248.383407][ T5904] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 248.608179][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 248.620538][ T5904] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 248.632099][ T5904] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 248.661671][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 248.679730][ T5904] usb 3-1: config 1 has no interface number 0 [ 248.699758][ T5904] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.725479][ T5904] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 248.739166][ T919] gspca_vc032x: reg_w err -71 [ 248.744245][ T919] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 248.764903][ T919] usb 5-1: USB disconnect, device number 19 [ 248.781546][ T5904] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 248.807736][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.841773][ T5904] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 248.868132][ T52] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 249.048002][ T5904] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 249.048069][ T52] usb 2-1: Using ep0 maxpacket: 32 [ 249.080548][ T52] usb 2-1: unable to get BOS descriptor or descriptor too short [ 249.100315][ T52] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 249.127956][ T52] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.155859][ T52] usb 2-1: config 1 interface 0 has no altsetting 0 [ 249.170671][ T52] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 249.187279][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.206208][ T52] usb 2-1: Product: syz [ 249.216586][ T52] usb 2-1: Manufacturer: syz [ 249.221579][ T52] usb 2-1: SerialNumber: syz [ 249.240187][ T9860] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 249.425802][ T9876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1762'. [ 249.459328][ T9876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1762'. [ 249.503422][ T5904] usb 3-1: USB disconnect, device number 20 [ 249.506675][ T52] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input34 [ 249.516047][ T5904] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 249.537225][ T9876] erspan0: entered promiscuous mode [ 249.546745][ T9876] erspan0: left promiscuous mode [ 249.586783][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1763'. [ 249.613622][ T9878] batadv0: entered promiscuous mode [ 249.624728][ T9878] macvtap1: entered promiscuous mode [ 249.632998][ T9878] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 249.658742][ T9878] batadv0: left promiscuous mode [ 250.096877][ T5196] bcm5974 2-1:1.0: could not read from device [ 250.103638][ T52] usb 2-1: USB disconnect, device number 21 [ 250.141930][ T5906] bcm5974 2-1:1.0: could not read from device [ 250.226275][ T9890] vivid-000: disconnect [ 250.250765][ T9885] vivid-000: reconnect [ 250.607980][ T5895] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 250.814147][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 250.844031][ T5895] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 250.873898][ T5895] usb 5-1: can't read configurations, error -71 [ 251.371292][ T9914] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1777'. [ 251.815291][ T9797] Set syz1 is full, maxelem 65536 reached [ 252.916119][ T9965] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1802'. [ 252.966921][ T9965] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1802'. [ 254.099361][T10008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1822'. [ 254.143703][T10008] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 254.821466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 254.898330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 254.906851][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 255.559854][T10058] ipvlan2: entered promiscuous mode [ 255.565138][T10058] ipvlan2: entered allmulticast mode [ 255.583783][T10058] bridge0: entered allmulticast mode [ 255.596243][T10058] bridge0: port 3(ipvlan2) entered blocking state [ 255.618654][T10058] bridge0: port 3(ipvlan2) entered disabled state [ 255.714594][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.721917][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.858129][ T5904] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 256.056932][ T5904] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 256.081190][ T5904] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.111367][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 256.126121][ T5904] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 256.172098][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.212601][ T5904] usb 3-1: config 0 descriptor?? [ 256.884213][ T5904] usb 3-1: USB disconnect, device number 21 [ 258.451910][ T30] audit: type=1326 audit(1744541157.719:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10126 comm="syz.4.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13a58d169 code=0x7fc00000 [ 258.782108][T10165] ptrace attach of "./syz-executor exec"[10167] was attempted by "./syz-executor exec"[10165] [ 258.958491][ T52] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 259.135022][ T52] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 259.150934][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.171643][ T52] usb 2-1: config 0 descriptor?? [ 259.197426][ T52] gspca_main: spca508-2.14.0 probing 8086:0110 [ 259.401862][ T52] gspca_spca508: reg_read err -32 [ 259.419353][ T52] gspca_spca508: reg_read err -32 [ 259.428106][ T5904] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 259.451269][ T919] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 259.608646][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 259.626829][ T52] gspca_spca508: reg_read err -71 [ 259.635646][ T919] usb 4-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 259.638134][ T52] gspca_spca508: reg_read err -71 [ 259.646990][ T5904] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.658254][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 259.672960][ T919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.679673][ T52] gspca_spca508: reg write: error -71 [ 259.686540][ T52] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 259.696568][ T5904] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 259.707200][ T919] usb 4-1: Product: syz [ 259.716124][ T919] usb 4-1: Manufacturer: syz [ 259.722078][ T919] usb 4-1: SerialNumber: syz [ 259.732099][ T52] usb 2-1: USB disconnect, device number 22 [ 259.737171][ T5904] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.762028][ T919] usb 4-1: config 0 descriptor?? [ 259.777296][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.797789][ T919] gspca_main: touptek-2.14.0 probing 0547:6801 [ 259.815702][ T5904] usb 5-1: Product: syz [ 259.821800][ T5904] usb 5-1: Manufacturer: syz [ 259.826442][ T5904] usb 5-1: SerialNumber: syz [ 259.999540][ T919] usb 4-1: USB disconnect, device number 18 [ 260.069617][ T5904] cdc_ncm 5-1:1.0: bind() failure [ 260.081618][ T5904] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 260.090821][ T5904] cdc_ncm 5-1:1.1: bind() failure [ 260.120927][ T5904] usb 5-1: USB disconnect, device number 22 [ 260.285801][T10204] macvlan0: entered promiscuous mode [ 260.303810][T10204] netlink: 'syz.0.1908': attribute type 1 has an invalid length. [ 260.327300][T10204] netlink: 'syz.0.1908': attribute type 2 has an invalid length. [ 260.768207][ T919] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 260.953756][ T919] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 260.988099][ T919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.018744][ T919] usb 3-1: Product: syz [ 261.022972][ T919] usb 3-1: Manufacturer: syz [ 261.040959][ T919] usb 3-1: SerialNumber: syz [ 261.071447][ T919] usb 3-1: config 0 descriptor?? [ 261.093183][ T919] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 022 [ 261.504244][ T919] (null): failure reading functionality [ 261.547341][ T919] i2c i2c-1: connected i2c-tiny-usb device [ 261.645237][ T30] audit: type=1326 audit(1744541160.909:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aff8d169 code=0x7ffc0000 [ 261.726575][ T30] audit: type=1326 audit(1744541160.939:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aff8d169 code=0x7ffc0000 [ 261.782780][ T919] usb 3-1: USB disconnect, device number 22 [ 261.842574][ T30] audit: type=1326 audit(1744541160.959:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19aff8d169 code=0x7ffc0000 [ 261.891143][ T30] audit: type=1326 audit(1744541160.959:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aff8d169 code=0x7ffc0000 [ 261.925109][ T30] audit: type=1326 audit(1744541160.959:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aff8d169 code=0x7ffc0000 [ 262.028002][ T30] audit: type=1326 audit(1744541160.959:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19aff8d169 code=0x7ffc0000 [ 262.072202][ T30] audit: type=1326 audit(1744541160.959:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aff8d169 code=0x7ffc0000 [ 262.170135][ T30] audit: type=1326 audit(1744541160.959:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19aff8d169 code=0x7ffc0000 [ 262.227075][ T30] audit: type=1326 audit(1744541160.959:2361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.3.1928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f19aff8d169 code=0x7ffc0000 [ 263.238172][T10298] tipc: Started in network mode [ 263.243818][T10298] tipc: Node identity ac14140f, cluster identity 4711 [ 263.264016][T10298] tipc: New replicast peer: 255.255.255.255 [ 263.285262][T10298] tipc: Enabled bearer , priority 10 [ 263.308194][ T52] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 263.348262][T10300] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 263.365075][T10300] netlink: 'syz.4.1953': attribute type 2 has an invalid length. [ 263.386088][T10300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1953'. [ 263.415395][T10300] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 263.434170][T10300] netlink: 'syz.4.1953': attribute type 2 has an invalid length. [ 263.443343][T10300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1953'. [ 263.468573][ T52] usb 3-1: Using ep0 maxpacket: 8 [ 263.487647][ T52] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 263.504472][ T52] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.517803][ T52] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.534870][ T52] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.552455][ T52] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.596275][ T52] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 263.636073][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.896102][ T52] usb 3-1: GET_CAPABILITIES returned 0 [ 263.914323][ T52] usbtmc 3-1:16.0: can't read capabilities [ 264.103813][T10292] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 264.130044][ T52] usb 3-1: USB disconnect, device number 23 [ 264.399836][ T5838] tipc: Node number set to 2886997007 [ 266.081535][ T5905] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 266.250395][ T5905] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.272523][ T5905] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.306379][ T5905] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.321424][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.344387][ T5905] usb 5-1: SerialNumber: syz [ 266.573338][ T5905] usb 5-1: 0:2 : does not exist [ 266.605938][ T5905] usb 5-1: USB disconnect, device number 23 [ 266.709198][ T919] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 266.806022][ T5893] udevd[5893]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.868037][ T919] usb 3-1: Using ep0 maxpacket: 8 [ 266.876319][ T919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.887204][ T919] usb 3-1: config 0 has no interfaces? [ 266.896299][ T919] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 266.906586][ T919] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 266.916118][ T919] usb 3-1: Product: syz [ 266.923870][ T919] usb 3-1: Manufacturer: syz [ 266.932430][ T919] usb 3-1: SerialNumber: syz [ 266.946133][ T919] usb 3-1: config 0 descriptor?? [ 267.213720][ T52] usb 3-1: USB disconnect, device number 24 [ 267.957763][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 268.311062][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'. [ 271.059658][T10498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2041'. [ 271.089926][T10498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2041'. [ 272.111572][T10521] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2052'. [ 272.254182][T10525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2054'. [ 274.310909][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2082'. [ 274.998044][ T52] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 275.181756][ T52] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 275.198053][ T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.216723][ T52] usb 4-1: Product: syz [ 275.221604][ T52] usb 4-1: Manufacturer: syz [ 275.226247][ T52] usb 4-1: SerialNumber: syz [ 275.242711][ T52] usb 4-1: config 0 descriptor?? [ 276.073445][ T52] usb 4-1: Firmware version (0.0) predates our first public release. [ 276.115101][ T52] usb 4-1: Please update to version 0.2 or newer [ 276.187062][ T52] usb 4-1: USB disconnect, device number 19 [ 276.463702][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2109'. [ 276.949329][T10675] netlink: 'syz.2.2121': attribute type 8 has an invalid length. [ 276.995873][T10675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2121'. [ 277.873277][T10708] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2135'. [ 277.949522][T10710] tap0: tun_chr_ioctl cmd 1074025677 [ 277.955195][T10710] tap0: linktype set to 6 [ 278.288014][ T919] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 278.478063][ T919] usb 3-1: Using ep0 maxpacket: 16 [ 278.495623][ T919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.527918][ T919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.537725][ T919] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 278.571248][ T919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.593633][ T919] usb 3-1: config 0 descriptor?? [ 279.025040][T10753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.072864][ T919] corsair 0003:1B1C:1B02.0016: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 279.121657][T10755] tap0: tun_chr_ioctl cmd 2147767520 [ 279.361849][ T919] corsair 0003:1B1C:1B02.0016: Failed to get K90 initial state (error -71). [ 279.406546][ T919] usb 3-1: USB disconnect, device number 25 [ 280.634270][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 280.634291][ T30] audit: type=1326 audit(1744541179.899:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db838d169 code=0x7ffc0000 [ 280.708106][ T30] audit: type=1326 audit(1744541179.899:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db838d169 code=0x7ffc0000 [ 280.808525][ T30] audit: type=1326 audit(1744541179.949:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8db838d169 code=0x7ffc0000 [ 280.850353][ T30] audit: type=1326 audit(1744541179.949:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db838d169 code=0x7ffc0000 [ 280.874024][ T30] audit: type=1326 audit(1744541179.949:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db838d169 code=0x7ffc0000 [ 280.912326][ T30] audit: type=1326 audit(1744541179.959:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8db838d169 code=0x7ffc0000 [ 280.959669][ T30] audit: type=1326 audit(1744541179.959:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db838d169 code=0x7ffc0000 [ 281.031192][ T30] audit: type=1326 audit(1744541179.959:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f8db838d169 code=0x7ffc0000 [ 281.073827][ T30] audit: type=1326 audit(1744541179.959:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10818 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8db838d169 code=0x7ffc0000 [ 281.165103][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.288080][ T5838] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 281.307476][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.430343][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.457964][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 281.466799][ T5838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 281.491249][ T5838] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 281.509105][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 281.524359][ T5838] usb 4-1: Product: syz [ 281.541357][ T5838] usb 4-1: Manufacturer: syz [ 281.546014][ T5838] usb 4-1: SerialNumber: syz [ 281.578045][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.598265][ T5838] usb 4-1: config 0 descriptor?? [ 281.605616][T10832] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.620586][ T5838] hub 4-1:0.0: bad descriptor, ignoring hub [ 281.627337][ T5838] hub 4-1:0.0: probe with driver hub failed with error -5 [ 281.989123][ T5888] usb 4-1: USB disconnect, device number 20 [ 282.087079][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.106059][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.118518][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.128892][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.137389][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.016647][T10884] VFS: Mount too revealing [ 283.160857][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.192483][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.258586][ T36] bond0 (unregistering): Released all slaves [ 284.188349][ T5839] Bluetooth: hci3: command tx timeout [ 284.680657][ T36] hsr_slave_0: left promiscuous mode [ 284.708343][ T36] hsr_slave_1: left promiscuous mode [ 284.738537][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.746038][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.819125][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.852713][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.980234][ T36] veth1_macvtap: left promiscuous mode [ 284.986247][ T36] veth0_macvtap: left promiscuous mode [ 285.016015][ T36] veth1_vlan: left promiscuous mode [ 285.021643][ T36] veth0_vlan: left promiscuous mode [ 285.801709][ T36] team0 (unregistering): Port device team_slave_1 removed [ 285.893136][ T36] team0 (unregistering): Port device team_slave_0 removed [ 286.268258][ T5839] Bluetooth: hci3: command tx timeout [ 286.329587][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2243'. [ 286.378385][T10856] chnl_net:caif_netlink_parms(): no params data found [ 286.799937][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.829429][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.846986][T10856] bridge_slave_0: entered allmulticast mode [ 286.879874][T10856] bridge_slave_0: entered promiscuous mode [ 286.913842][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.938442][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.960872][T10856] bridge_slave_1: entered allmulticast mode [ 286.973137][T10856] bridge_slave_1: entered promiscuous mode [ 287.107209][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.146927][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.281566][T10856] team0: Port device team_slave_0 added [ 287.304912][T10856] team0: Port device team_slave_1 added [ 287.427576][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.451014][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.507425][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.541889][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.557966][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.585679][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.770510][T10856] hsr_slave_0: entered promiscuous mode [ 287.776965][T10856] hsr_slave_1: entered promiscuous mode [ 287.785126][T10856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.814370][T10856] Cannot create hsr debugfs directory [ 288.319357][T11042] [ 288.321739][T11042] ====================================================== [ 288.328786][T11042] WARNING: possible circular locking dependency detected [ 288.335836][T11042] 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 Not tainted [ 288.342973][T11042] ------------------------------------------------------ [ 288.350098][T11042] syz.3.2263/11042 is trying to acquire lock: [ 288.356194][T11042] ffff88805cab4d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: xsk_bind+0x2fd/0xfb0 [ 288.365699][T11042] [ 288.365699][T11042] but task is already holding lock: [ 288.373085][T11042] ffff888059c396f0 (&xs->mutex){+.+.}-{4:4}, at: xsk_bind+0x166/0xfb0 [ 288.381324][T11042] [ 288.381324][T11042] which lock already depends on the new lock. [ 288.381324][T11042] [ 288.391817][T11042] [ 288.391817][T11042] the existing dependency chain (in reverse order) is: [ 288.400829][T11042] [ 288.400829][T11042] -> #3 (&xs->mutex){+.+.}-{4:4}: [ 288.408179][T11042] lock_acquire+0x116/0x2f0 [ 288.413234][T11042] __mutex_lock+0x1a5/0x10c0 [ 288.418363][T11042] xsk_diag_dump+0x5be/0x19d0 [ 288.423660][T11042] netlink_dump+0x678/0xeb0 [ 288.428699][T11042] __netlink_dump_start+0x5a2/0x790 [ 288.434431][T11042] xsk_diag_handler_dump+0x1de/0x270 [ 288.440266][T11042] sock_diag_rcv_msg+0x3dc/0x5f0 [ 288.445738][T11042] netlink_rcv_skb+0x208/0x480 [ 288.451036][T11042] netlink_unicast+0x7f8/0x9a0 [ 288.456327][T11042] netlink_sendmsg+0x8c3/0xcd0 [ 288.461619][T11042] __sock_sendmsg+0x221/0x270 [ 288.466822][T11042] sock_write_iter+0x2d9/0x3f0 [ 288.472118][T11042] do_iter_readv_writev+0x71f/0x9d0 [ 288.477848][T11042] vfs_writev+0x38d/0xbc0 [ 288.482714][T11042] do_writev+0x1b8/0x360 [ 288.487484][T11042] do_syscall_64+0xf3/0x230 [ 288.492513][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.498930][T11042] [ 288.498930][T11042] -> #2 (&net->xdp.lock){+.+.}-{4:4}: [ 288.506502][T11042] lock_acquire+0x116/0x2f0 [ 288.511539][T11042] __mutex_lock+0x1a5/0x10c0 [ 288.516661][T11042] xsk_notifier+0x8b/0x230 [ 288.521630][T11042] notifier_call_chain+0x1a5/0x3f0 [ 288.527271][T11042] unregister_netdevice_many_notify+0x1572/0x2510 [ 288.534213][T11042] unregister_netdevice_queue+0x383/0x400 [ 288.540458][T11042] _cfg80211_unregister_wdev+0x163/0x590 [ 288.546641][T11042] ieee80211_remove_interfaces+0x4f1/0x700 [ 288.552985][T11042] ieee80211_unregister_hw+0x5d/0x2c0 [ 288.558880][T11042] mac80211_hwsim_del_radio+0x2c6/0x4c0 [ 288.564946][T11042] hwsim_exit_net+0x5c3/0x670 [ 288.570148][T11042] cleanup_net+0x814/0xd60 [ 288.575183][T11042] process_scheduled_works+0xac3/0x18e0 [ 288.581255][T11042] worker_thread+0x870/0xd50 [ 288.586368][T11042] kthread+0x7b7/0x940 [ 288.590969][T11042] ret_from_fork+0x4b/0x80 [ 288.595914][T11042] ret_from_fork_asm+0x1a/0x30 [ 288.601225][T11042] [ 288.601225][T11042] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 288.608999][T11042] lock_acquire+0x116/0x2f0 [ 288.614056][T11042] __mutex_lock+0x1a5/0x10c0 [ 288.619189][T11042] cfg80211_netdev_notifier_call+0x1b3/0x1430 [ 288.625782][T11042] notifier_call_chain+0x1a5/0x3f0 [ 288.631427][T11042] __dev_close_many+0x15d/0x760 [ 288.636809][T11042] dev_close_many+0x250/0x4c0 [ 288.642027][T11042] unregister_netdevice_many_notify+0x628/0x2510 [ 288.648890][T11042] default_device_exit_batch+0x7ff/0x880 [ 288.655056][T11042] cleanup_net+0x8af/0xd60 [ 288.660092][T11042] process_scheduled_works+0xac3/0x18e0 [ 288.666270][T11042] worker_thread+0x870/0xd50 [ 288.671389][T11042] kthread+0x7b7/0x940 [ 288.675986][T11042] ret_from_fork+0x4b/0x80 [ 288.680950][T11042] ret_from_fork_asm+0x1a/0x30 [ 288.686242][T11042] [ 288.686242][T11042] -> #0 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 288.694695][T11042] validate_chain+0xa69/0x24e0 [ 288.699992][T11042] __lock_acquire+0xad5/0xd80 [ 288.705207][T11042] lock_acquire+0x116/0x2f0 [ 288.710242][T11042] __mutex_lock+0x1a5/0x10c0 [ 288.715451][T11042] xsk_bind+0x2fd/0xfb0 [ 288.720139][T11042] __sys_bind+0x1de/0x290 [ 288.725008][T11042] __x64_sys_bind+0x7a/0x90 [ 288.730047][T11042] do_syscall_64+0xf3/0x230 [ 288.735078][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.741585][T11042] [ 288.741585][T11042] other info that might help us debug this: [ 288.741585][T11042] [ 288.751812][T11042] Chain exists of: [ 288.751812][T11042] &dev_instance_lock_key#3 --> &net->xdp.lock --> &xs->mutex [ 288.751812][T11042] [ 288.765132][T11042] Possible unsafe locking scenario: [ 288.765132][T11042] [ 288.772577][T11042] CPU0 CPU1 [ 288.777939][T11042] ---- ---- [ 288.783383][T11042] lock(&xs->mutex); [ 288.787374][T11042] lock(&net->xdp.lock); [ 288.794227][T11042] lock(&xs->mutex); [ 288.800732][T11042] lock(&dev_instance_lock_key#3); [ 288.805939][T11042] [ 288.805939][T11042] *** DEADLOCK *** [ 288.805939][T11042] [ 288.814076][T11042] 2 locks held by syz.3.2263/11042: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 288.819279][T11042] #0: ffffffff900fd448 (rtnl_mutex){+.+.}-{4:4}, at: xsk_bind+0x153/0xfb0 [ 288.827918][T11042] #1: ffff888059c396f0 (&xs->mutex){+.+.}-{4:4}, at: xsk_bind+0x166/0xfb0 [ 288.836557][T11042] [ 288.836557][T11042] stack backtrace: [ 288.842460][T11042] CPU: 1 UID: 0 PID: 11042 Comm: syz.3.2263 Not tainted 6.15.0-rc1-syzkaller-00325-g7cdabafc0012 #0 PREEMPT(full) [ 288.842482][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.842496][T11042] Call Trace: [ 288.842503][T11042] [ 288.842510][T11042] dump_stack_lvl+0x241/0x360 [ 288.842537][T11042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.842561][T11042] ? __pfx__printk+0x10/0x10 [ 288.842584][T11042] ? print_lock+0x171/0x1a0 [ 288.842606][T11042] print_circular_bug+0x2e1/0x300 [ 288.842629][T11042] check_noncircular+0x142/0x160 [ 288.842653][T11042] validate_chain+0xa69/0x24e0 [ 288.842684][T11042] __lock_acquire+0xad5/0xd80 [ 288.842704][T11042] lock_acquire+0x116/0x2f0 [ 288.842719][T11042] ? xsk_bind+0x2fd/0xfb0 [ 288.842739][T11042] __mutex_lock+0x1a5/0x10c0 [ 288.842759][T11042] ? xsk_bind+0x2fd/0xfb0 [ 288.842774][T11042] ? ref_tracker_alloc+0x316/0x4c0 [ 288.842793][T11042] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 288.842813][T11042] ? xsk_bind+0x2fd/0xfb0 [ 288.842827][T11042] ? __pfx___mutex_lock+0x10/0x10 [ 288.842852][T11042] ? dev_get_by_index+0x23/0x2d0 [ 288.842873][T11042] ? dev_get_by_index+0x23/0x2d0 [ 288.842895][T11042] xsk_bind+0x2fd/0xfb0 [ 288.842913][T11042] __sys_bind+0x1de/0x290 [ 288.842938][T11042] ? __pfx___sys_bind+0x10/0x10 [ 288.842970][T11042] __x64_sys_bind+0x7a/0x90 [ 288.842994][T11042] do_syscall_64+0xf3/0x230 [ 288.843015][T11042] ? clear_bhb_loop+0x45/0xa0 [ 288.843033][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.843053][T11042] RIP: 0033:0x7f19aff8d169 [ 288.843071][T11042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.843086][T11042] RSP: 002b:00007f19b0e95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 288.843108][T11042] RAX: ffffffffffffffda RBX: 00007f19b01a5fa0 RCX: 00007f19aff8d169 [ 288.843120][T11042] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 288.843130][T11042] RBP: 00007f19b000e990 R08: 0000000000000000 R09: 0000000000000000 [ 288.843141][T11042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.843151][T11042] R13: 0000000000000000 R14: 00007f19b01a5fa0 R15: 00007f19b02cfa28 [ 288.843168][T11042] [ 289.098208][ T5839] Bluetooth: hci3: command tx timeout