last executing test programs: 9.236840474s ago: executing program 0 (id=2686): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc7, 0x3d, 0x8a, 0x8, 0x2770, 0x9120, 0x6c77, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x91, 0xb0, 0xe2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000180)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.059676055s ago: executing program 0 (id=2713): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6.870363099s ago: executing program 0 (id=2716): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000014c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={r3, @in={{0x2, 0x4e21, @empty}}}, &(0x7f0000000200)=0x90) 4.96523865s ago: executing program 0 (id=2732): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x40400) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf}, 0x20) fchmod(r0, 0x129) 4.860494304s ago: executing program 0 (id=2726): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x9, 0x5, 0x9d}) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800009d02"]) 3.527801352s ago: executing program 1 (id=2736): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.480478412s ago: executing program 0 (id=2737): r0 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 2.995854566s ago: executing program 1 (id=2739): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xe0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 2.885998685s ago: executing program 1 (id=2742): r0 = epoll_create1(0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)={0x40000011}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)) 2.748477008s ago: executing program 1 (id=2743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.491743485s ago: executing program 1 (id=2746): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)={0x40, 0x11, 0x1, '$'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000ac0)={0x0, 0x1b, 0x3, "03f3b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.079577045s ago: executing program 2 (id=2750): ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={0x5, 0x7fffffff, 0x2, 0x4, 0x3, 0x0, [{0xbc, 0x803, 0x40, '\x00', 0x4}, {0x800, 0x5, 0xfffffffffffffffe, '\x00', 0x100}, {0xa97, 0xfffffffffffffefe, 0x5e, '\x00', 0x400}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000001"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008704"]) 2.079393198s ago: executing program 4 (id=2751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.0592354s ago: executing program 3 (id=2752): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000093000040"]) 1.792191935s ago: executing program 4 (id=2753): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x6) close(r0) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2021, 0x3, &(0x7f00005c0000/0x2000)=nil) 1.73165623s ago: executing program 2 (id=2754): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 1.595728693s ago: executing program 4 (id=2755): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46ec0800000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.595485497s ago: executing program 3 (id=2756): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1, 0x0, 0x0, 0x8804}, 0x40044) 1.532065506s ago: executing program 3 (id=2757): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000000)={0x6000, 0x80600}) 1.338943907s ago: executing program 3 (id=2758): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x322, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xb, 0x6}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.107950292s ago: executing program 2 (id=2759): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000240)="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", 0x1000}], 0x2}}], 0x1, 0x4000010) splice(r0, 0x0, r3, 0x0, 0x25a5, 0x0) 1.044173225s ago: executing program 4 (id=2760): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="db"]}]}, 0x2c}], 0x1}, 0x0) socket$kcm(0x2, 0x2, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, 0x0, 0x0) 968.419649ms ago: executing program 2 (id=2761): syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[], 0xb5) setxattr$system_posix_acl(0x0, &(0x7f0000000540)='system.posix_acl_default\x00', 0x0, 0x2c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 751.736403ms ago: executing program 4 (id=2762): clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)=@multiplanar_overlay={0x200, 0x0, 0x4, 0x0, 0x0, {r0, r1/1000+60000}, {0x5, 0x8, 0x3, 0x1, 0x40, 0x5, "81b55012"}, 0x5, 0x3, {0x0}, 0x8001}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_setup(0x27e0, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x0, 0x1a4}) 719.887752ms ago: executing program 4 (id=2763): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_clone(0x40000400, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_usb_connect(0x2, 0x47, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000a3233910daa658744d2d010203010902"], 0x0) madvise(&(0x7f0000dd9000/0x4000)=nil, 0x4000, 0x14) 440.542903ms ago: executing program 3 (id=2764): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x11, r1, 0x8000000) 311.962654ms ago: executing program 3 (id=2765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) close(r2) 291.695165ms ago: executing program 2 (id=2766): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000001c0)=0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) 62.414264ms ago: executing program 2 (id=2767): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x1, &(0x7f0000000240)="b9") r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 1 (id=2768): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r1, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) kernel console output (not intermixed with test programs): or while querying for an remote control event. [ 192.481521][ T5828] usb 1-1: USB disconnect, device number 18 [ 192.570458][ T5871] dvb-usb: bulk message failed: -22 (1/0) [ 192.577449][ T5871] dvb-usb: error while querying for an remote control event. [ 192.660493][ T5822] usb 2-1: USB disconnect, device number 16 [ 192.759244][ T5822] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 192.856590][ T9099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1316'. [ 192.901148][ T9099] geneve0: entered promiscuous mode [ 192.909164][ T9099] geneve0: entered allmulticast mode [ 193.623212][ T9158] tipc: Started in network mode [ 193.636972][ T9158] tipc: Node identity ac1414aa, cluster identity 4711 [ 193.644693][ T9158] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.691750][ T9158] tipc: Enabled bearer , priority 10 [ 193.775257][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.891044][ T5822] hid-generic C98F:0005:0000.001C: unknown main item tag 0x0 [ 193.914901][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.929486][ T5822] hid-generic C98F:0005:0000.001C: unknown main item tag 0x0 [ 193.968668][ T5822] hid-generic C98F:0005:0000.001C: hidraw0: HID v0.06 Device [syz0] on syz1 [ 193.989409][ T9176] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1346'. [ 194.054935][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.194932][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.311263][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.318102][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.344947][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.485072][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.624946][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.766854][ T24] tipc: Node number set to 2886997162 [ 194.817565][ T5828] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 194.904962][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 194.989018][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 195.000724][ T5828] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 195.013752][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.015110][ T5822] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 195.034344][ T5828] usb 5-1: config 0 descriptor?? [ 195.049818][ T5828] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 195.175103][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.204265][ T9232] loop2: detected capacity change from 0 to 7 [ 195.215944][ T5822] usb 3-1: Using ep0 maxpacket: 16 [ 195.225088][ T9232] Dev loop2: unable to read RDB block 7 [ 195.230723][ T9232] loop2: AHDI p1 p2 [ 195.240986][ T9232] loop2: partition table partially beyond EOD, truncated [ 195.250800][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.262460][ T9232] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 195.275452][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.291271][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.311243][ T5822] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.334953][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.362807][ T5822] usb 3-1: config 0 descriptor?? [ 195.803311][ T5822] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.001D/input/input29 [ 195.844961][ T5822] microsoft 0003:045E:07DA.001D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 195.858539][ T9253] vlan2: entered promiscuous mode [ 195.863612][ T9253] erspan0: entered promiscuous mode [ 196.064676][ T5828] usb 5-1: USB disconnect, device number 16 [ 196.119393][ T2073] usb 3-1: USB disconnect, device number 21 [ 196.766968][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 196.766990][ T30] audit: type=1400 audit(1746572982.133:581): lsm=SMACK fn=smack_inode_removexattr action=denied subject="w" object="_" requested=w pid=9300 comm="syz.0.1402" name="file1" dev="tmpfs" ino=1257 [ 196.795076][ T5828] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 196.958192][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 196.965869][ T5828] usb 4-1: config index 0 descriptor too short (expected 22656, got 36) [ 196.987498][ T5828] usb 4-1: config 0 has too many interfaces: 36, using maximum allowed: 32 [ 197.007232][ T5828] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.025497][ T5828] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 36 [ 197.051111][ T5828] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 197.060495][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.073005][ T5828] usb 4-1: Product: syz [ 197.084046][ T5828] usb 4-1: Manufacturer: syz [ 197.100259][ T5828] usb 4-1: SerialNumber: syz [ 197.108047][ T9313] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.128032][ T5828] usb 4-1: config 0 descriptor?? [ 197.384338][ T5828] usb 4-1: USB disconnect, device number 12 [ 197.494221][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1409'. [ 197.894983][ T5828] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 198.060089][ T5828] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 198.071101][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.078461][ T9347] sctp: [Deprecated]: syz.0.1418 (pid 9347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.078461][ T9347] Use struct sctp_sack_info instead [ 198.081517][ T5828] usb 2-1: Product: syz [ 198.107768][ T5828] usb 2-1: Manufacturer: syz [ 198.112565][ T5828] usb 2-1: SerialNumber: syz [ 198.122867][ T5828] usb 2-1: config 0 descriptor?? [ 198.306682][ T9352] netlink: 'syz.4.1421': attribute type 11 has an invalid length. [ 198.549927][ T5828] usb 2-1: Firmware: major: 0, minor: 168, hardware type: UNKNOWN (136) [ 198.651820][ T9361] vlan2: entered promiscuous mode [ 198.658641][ T9361] bond0: entered promiscuous mode [ 198.663731][ T9361] bond_slave_0: entered promiscuous mode [ 198.671775][ T9361] bond_slave_1: entered promiscuous mode [ 198.706931][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 198.722771][ T9362] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 198.730772][ T9362] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1424'. [ 198.741472][ T9362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1424'. [ 198.758533][ T30] audit: type=1326 audit(1746572984.113:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9341 comm="syz.2.1415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eab8e969 code=0x7fc00000 [ 198.806240][ T5828] usb 2-1: failed to fetch extended address, random address set [ 198.818436][ T5828] usb 2-1: atusb_probe: initialization failed, error = -524 [ 198.837034][ T5828] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 198.864950][ C1] net_ratelimit: 4 callbacks suppressed [ 198.864969][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 198.864985][ T5828] usb 2-1: USB disconnect, device number 17 [ 198.911508][ T9372] vcan0: tx drop: invalid sa for name 0x0000400000000000 [ 198.919232][ T9371] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1428'. [ 199.742471][ T24] hid-generic 0000:0004:0009.001E: unknown main item tag 0x0 [ 199.763601][ T24] hid-generic 0000:0004:0009.001E: unknown main item tag 0x0 [ 199.789412][ T24] hid-generic 0000:0004:0009.001E: unknown main item tag 0x0 [ 199.812451][ T24] hid-generic 0000:0004:0009.001E: hidraw0: HID v0.04 Device [syz0] on syz1 [ 199.905043][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.497844][ T5875] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 200.683951][ T5875] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 200.714702][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.729384][ T5875] usb 1-1: config 0 descriptor?? [ 200.748769][ T5875] gspca_main: spca508-2.14.0 probing 8086:0110 [ 200.944905][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.965460][ T5875] gspca_spca508: reg_read err -32 [ 200.980536][ T5875] gspca_spca508: reg_read err -32 [ 200.991236][ T5875] gspca_spca508: reg_read err -32 [ 201.202132][ T5875] gspca_spca508: reg_read err -71 [ 201.212254][ T5875] gspca_spca508: reg write: error -71 [ 201.242624][ T5875] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 201.278894][ T5875] usb 1-1: USB disconnect, device number 19 [ 201.297307][ T2073] hid-generic 0000:0004:0009.001F: unknown main item tag 0x0 [ 201.315904][ T2073] hid-generic 0000:0004:0009.001F: unknown main item tag 0x0 [ 201.323471][ T2073] hid-generic 0000:0004:0009.001F: unknown main item tag 0x0 [ 201.339035][ T2073] hid-generic 0000:0004:0009.001F: hidraw0: HID v0.04 Device [syz0] on syz1 [ 201.556637][ T5822] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 201.740951][ T5822] usb 3-1: config 0 has an invalid interface number: 166 but max is 0 [ 201.761035][ T5822] usb 3-1: config 0 has no interface number 0 [ 201.793368][ T5822] usb 3-1: config 0 interface 166 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.822682][ T5822] usb 3-1: New USB device found, idVendor=0b05, idProduct=18f1, bcdDevice=b5.9b [ 201.852733][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.880969][ T5822] usb 3-1: Product: syz [ 201.897049][ T5822] usb 3-1: Manufacturer: syz [ 201.919301][ T5822] usb 3-1: SerialNumber: syz [ 201.939884][ T5822] usb 3-1: config 0 descriptor?? [ 201.984983][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.146827][ T9499] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1479'. [ 202.164135][ T5875] usb 3-1: USB disconnect, device number 22 [ 202.201827][ T9501] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 202.365062][ T2073] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 202.444941][ T5828] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 202.526840][ T2073] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 202.536241][ T2073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.555049][ T2073] usb 4-1: config 0 descriptor?? [ 202.594963][ T5828] usb 5-1: Using ep0 maxpacket: 32 [ 202.608945][ T5828] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 202.626289][ T5828] usb 5-1: config 0 has no interface number 0 [ 202.632555][ T5828] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 202.644404][ T5828] usb 5-1: config 0 interface 85 has no altsetting 0 [ 202.654778][ T5828] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 202.664166][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.692962][ T5828] usb 5-1: Product: syz [ 202.697324][ T5828] usb 5-1: Manufacturer: syz [ 202.701997][ T5828] usb 5-1: SerialNumber: syz [ 202.728903][ T5828] usb 5-1: config 0 descriptor?? [ 202.980109][ T2073] [drm:udl_init] *ERROR* Selecting channel failed [ 203.024901][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.036302][ T2073] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 203.043106][ T2073] [drm] Initialized udl on minor 2 [ 203.068996][ T2073] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 203.078671][ T2073] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 203.096493][ T9525] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.106866][ T5874] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 203.127027][ T2073] usb 4-1: USB disconnect, device number 13 [ 203.134062][ T5874] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 203.235261][ T9531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 203.241755][ T9531] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 203.368848][ T5828] appletouch 5-1:0.85: Geyser mode initialized. [ 203.378550][ T5828] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input30 [ 203.602487][ T2073] usb 5-1: USB disconnect, device number 17 [ 203.646766][ T2073] appletouch 5-1:0.85: input: appletouch disconnected [ 204.074896][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 204.747625][ T5822] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 204.764932][ T5875] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 204.927030][ T5822] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 204.945030][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.957644][ T5875] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.969550][ T5822] usb 1-1: config 0 descriptor?? [ 204.978069][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.997619][ T5875] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.008502][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.016701][ T5875] usb 4-1: SerialNumber: syz [ 205.114912][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 205.135575][ T5828] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 205.237996][ T5875] usb 4-1: 0:2 : does not exist [ 205.259593][ T5875] usb 4-1: USB disconnect, device number 14 [ 205.296796][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.308589][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.320053][ T5828] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 205.334093][ T5828] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 205.346605][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.365889][ T5828] usb 2-1: config 0 descriptor?? [ 205.390621][ T5822] [drm:udl_init] *ERROR* Selecting channel failed [ 205.408540][ T5822] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 205.415987][ T5822] [drm] Initialized udl on minor 2 [ 205.423262][ T5822] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 205.432149][ T5822] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 205.440142][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 205.450210][ T5822] usb 1-1: USB disconnect, device number 20 [ 205.458011][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 205.790035][ T5828] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 205.818945][ T5828] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 206.063676][ T5828] usb 2-1: USB disconnect, device number 18 [ 206.144902][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 206.178990][ T9647] vlan2: entered promiscuous mode [ 206.184179][ T9647] macvtap0: entered promiscuous mode [ 206.383043][ T9653] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.454635][ T9653] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.184908][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 207.245032][ T5828] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 207.396991][ T5828] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 207.410287][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.478692][ T5828] usb 4-1: config 0 descriptor?? [ 207.498455][ T5828] cp210x 4-1:0.0: cp210x converter detected [ 207.696530][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'. [ 208.066838][ T5828] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 208.104292][ T5828] usb 4-1: cp210x converter now attached to ttyUSB0 [ 208.224895][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.310462][ T5828] usb 4-1: USB disconnect, device number 15 [ 208.325067][ T2073] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 208.341362][ T5828] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 208.346564][ T9710] loop2: detected capacity change from 0 to 7 [ 208.361164][ T5828] cp210x 4-1:0.0: device disconnected [ 208.387909][ T9710] Dev loop2: unable to read RDB block 7 [ 208.402951][ T9710] loop2: AHDI p2 p3 [ 208.407787][ T9710] loop2: partition table partially beyond EOD, truncated [ 208.423963][ T9710] loop2: p3 start 335544320 is beyond EOD, truncated [ 208.494436][ T2073] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 208.507275][ T2073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.546648][ T2073] usb 2-1: config 0 descriptor?? [ 208.968985][ T2073] [drm:udl_init] *ERROR* Selecting channel failed [ 209.027442][ T2073] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 209.068208][ T2073] [drm] Initialized udl on minor 2 [ 209.088667][ T2073] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 209.121260][ T2073] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 209.130387][ T5874] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 209.160012][ T5874] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 209.182751][ T2073] usb 2-1: USB disconnect, device number 19 [ 209.197058][ T5874] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 209.274912][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.305036][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 210.367080][ T9760] bridge0: entered promiscuous mode [ 210.372671][ T9760] macvlan2: entered promiscuous mode [ 210.486029][ T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 210.500687][ T9763] macvlan3: entered promiscuous mode [ 210.648899][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 210.663336][ T24] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.692697][ T24] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.707860][ T5822] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 210.719492][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 210.727627][ T24] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 210.737458][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.752306][ T24] usb 1-1: config 0 descriptor?? [ 210.885134][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 210.892846][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.903883][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.913689][ T5822] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 210.922755][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.933121][ T5822] usb 2-1: config 0 descriptor?? [ 210.969505][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 210.975977][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 210.985936][ T24] usb 1-1: USB disconnect, device number 21 [ 211.004939][ T5875] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 211.157410][ T5875] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 211.166776][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.178317][ T5875] usb 5-1: config 0 descriptor?? [ 211.344894][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 211.568219][ T5822] usb 2-1: string descriptor 0 read error: -71 [ 211.594010][ T5875] [drm:udl_init] *ERROR* Selecting channel failed [ 211.600949][ T5822] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 211.620928][ T5822] letsketch 0003:6161:4D15.0021: probe with driver letsketch failed with error -32 [ 211.637918][ T5875] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 211.648368][ T5822] usb 2-1: USB disconnect, device number 20 [ 211.655001][ T5875] [drm] Initialized udl on minor 2 [ 211.664774][ T5875] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.675675][ T5875] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 211.684418][ T24] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 211.695416][ T5875] usb 5-1: USB disconnect, device number 18 [ 211.702347][ T24] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 211.822620][ T9786] program syz.0.1601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.899166][ T9791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 211.994969][ T2073] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 212.161485][ T2073] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 212.173743][ T2073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.182724][ T2073] usb 4-1: Product: syz [ 212.187153][ T2073] usb 4-1: Manufacturer: syz [ 212.191782][ T2073] usb 4-1: SerialNumber: syz [ 212.199455][ T2073] usb 4-1: config 0 descriptor?? [ 212.225320][ T5875] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 212.252029][ T9805] syzkaller1: entered promiscuous mode [ 212.265105][ T9805] syzkaller1: entered allmulticast mode [ 212.282676][ T9805] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 212.384912][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 212.419197][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 212.441328][ T5875] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 212.441713][ T2073] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 212.469347][ T5875] usb 1-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 212.478476][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.484308][ T2073] airspy 4-1:0.0: Could not detect board [ 212.497588][ T5875] usb 1-1: config 0 descriptor?? [ 212.504630][ T2073] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 212.505533][ T9796] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 212.536318][ T2073] usb 4-1: USB disconnect, device number 16 [ 212.564152][ T9816] sctp: [Deprecated]: syz.4.1615 (pid 9816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 212.564152][ T9816] Use struct sctp_sack_info instead [ 212.766480][ T5875] usbhid 1-1:0.0: can't add hid device: -71 [ 212.778203][ T5875] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 212.786299][ T30] audit: type=1800 audit(1746572998.143:583): pid=9821 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1618" name="bus" dev="tmpfs" ino=1636 res=0 errno=0 [ 212.800930][ T5875] usb 1-1: USB disconnect, device number 22 [ 212.935769][ T9825] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 213.214084][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1626'. [ 213.234928][ T5822] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 213.413006][ T5822] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 213.424893][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 213.453109][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.474520][ T5822] usb 5-1: config 0 descriptor?? [ 213.906397][ T5822] [drm:udl_init] *ERROR* Selecting channel failed [ 213.921783][ T5822] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 213.928726][ T5822] [drm] Initialized udl on minor 2 [ 213.934607][ T5822] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 213.943205][ T5822] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 213.951241][ T24] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 213.961144][ T5822] usb 5-1: USB disconnect, device number 19 [ 213.975117][ T24] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 214.443390][ T9885] vivid-003: disconnect [ 214.453738][ T9879] vivid-003: reconnect [ 214.465006][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 214.869274][ T30] audit: type=1400 audit(1746573000.233:584): lsm=SMACK fn=smack_file_ioctl action=denied subject="y" object="_" requested=w pid=9903 comm="syz.1.1654" path="/proc/763/task/764/net/ptype" dev="proc" ino=4026533030 [ 215.327311][ T2073] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 215.490030][ T2073] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 215.504896][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 215.511171][ T2073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.533735][ T2073] usb 3-1: config 0 descriptor?? [ 215.826468][ T5822] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 215.955741][ T2073] [drm:udl_init] *ERROR* Selecting channel failed [ 215.987366][ T2073] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 215.994118][ T2073] [drm] Initialized udl on minor 2 [ 215.995276][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 216.028756][ T2073] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 216.028957][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.042792][ T2073] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 216.071771][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.080732][ T5828] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 216.089786][ T2073] usb 3-1: USB disconnect, device number 23 [ 216.095999][ T5828] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 216.154916][ T5822] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 216.218871][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.250517][ T5822] usb 2-1: config 0 descriptor?? [ 216.544284][ T30] audit: type=1326 audit(1746573001.903:585): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=9982 comm="syz.4.1689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x0 [ 216.565765][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 216.672135][ T5822] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 216.870420][ T5822] ft260 0003:0403:6030.0022: chip code: 0000 0000 [ 217.281229][ T2073] usb 2-1: USB disconnect, device number 21 [ 217.584902][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 217.619973][ T30] audit: type=1326 audit(1746573002.983:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 217.652725][ T30] audit: type=1326 audit(1746573002.983:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 217.683384][ T30] audit: type=1326 audit(1746573002.983:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 217.722591][T10016] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1703'. [ 217.747438][ T30] audit: type=1326 audit(1746573002.983:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 217.812234][ T30] audit: type=1326 audit(1746573002.983:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 217.845439][ T2073] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.890260][ T30] audit: type=1326 audit(1746573002.983:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 217.986985][ T30] audit: type=1326 audit(1746573002.983:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 218.008338][ T2073] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 218.023171][ T2073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.050956][ T2073] usb 4-1: config 0 descriptor?? [ 218.065995][ T30] audit: type=1326 audit(1746573002.983:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 218.135181][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 218.298618][ T30] audit: type=1326 audit(1746573002.983:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 218.319688][ T9] usb 1-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 218.339764][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.365174][ T30] audit: type=1326 audit(1746573002.983:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 218.368944][ T9] usb 1-1: config 0 descriptor?? [ 218.424926][ T30] audit: type=1326 audit(1746573002.983:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 218.459737][ T30] audit: type=1326 audit(1746573002.983:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 218.481851][ T30] audit: type=1326 audit(1746573002.983:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 218.506074][ T30] audit: type=1326 audit(1746573002.983:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10013 comm="syz.4.1701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x7ffc0000 [ 218.511179][ T2073] [drm:udl_init] *ERROR* Selecting channel failed [ 218.614541][ T2073] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 218.625041][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 218.638297][ T2073] [drm] Initialized udl on minor 2 [ 218.646041][ T2073] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 218.668608][ T2073] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 218.683737][ T5874] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 218.722146][ T5874] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 218.778080][ T2073] usb 4-1: USB disconnect, device number 17 [ 218.795426][ T5874] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 219.290538][T10060] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1722'. [ 219.452812][ T9] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 219.484730][ T9] asix 1-1:0.0: probe with driver asix failed with error -71 [ 219.508370][ T9] usb 1-1: USB disconnect, device number 23 [ 219.634004][T10069] syzkaller1: entered promiscuous mode [ 219.643031][T10069] syzkaller1: entered allmulticast mode [ 219.675004][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 220.339126][T10090] can0: slcan on ptm0. [ 220.455046][ T2073] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 220.457296][T10089] can0 (unregistered): slcan off ptm0. [ 220.620796][ T2073] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 220.645946][ T2073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.672561][ T2073] usb 4-1: config 0 descriptor?? [ 220.705078][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.113245][ T2073] [drm:udl_init] *ERROR* Selecting channel failed [ 221.164441][ T2073] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 221.201086][ T2073] [drm] Initialized udl on minor 2 [ 221.214661][ T2073] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 221.229433][ T2073] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 221.237215][ T5874] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 221.254515][ T2073] usb 4-1: USB disconnect, device number 18 [ 221.260764][ T5874] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 221.276464][ T5874] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 221.584938][ T5887] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 221.745115][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 221.757017][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.790260][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 221.822679][ T5887] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 221.835634][ T5887] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.848624][ T5887] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.857739][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.873271][ T5887] usb 5-1: config 0 descriptor?? [ 221.888567][T10119] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 222.313872][ T5887] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 222.322985][ T5887] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 222.331651][ T5887] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 222.355420][ T5887] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 222.537883][ T5822] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 222.600980][ T5874] usb 5-1: USB disconnect, device number 20 [ 222.696985][ T5822] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 222.709688][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.735628][ T5822] usb 3-1: config 0 descriptor?? [ 222.795054][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 222.855859][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 222.855878][ T30] audit: type=1326 audit(1746573007.220:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb18e969 code=0x7ffc0000 [ 222.914845][ T30] audit: type=1326 audit(1746573007.220:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb18e969 code=0x7ffc0000 [ 222.938438][ T30] audit: type=1326 audit(1746573007.220:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ddb18e969 code=0x7ffc0000 [ 222.961490][ T30] audit: type=1326 audit(1746573007.220:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb18e969 code=0x7ffc0000 [ 222.987956][ T30] audit: type=1326 audit(1746573007.220:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb18e969 code=0x7ffc0000 [ 223.014861][ T30] audit: type=1326 audit(1746573007.220:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ddb18e969 code=0x7ffc0000 [ 223.037542][ T30] audit: type=1326 audit(1746573007.220:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb18e969 code=0x7ffc0000 [ 223.059817][ T30] audit: type=1326 audit(1746573007.220:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb18e969 code=0x7ffc0000 [ 223.083326][ T30] audit: type=1326 audit(1746573007.220:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f4ddb18e969 code=0x7ffc0000 [ 223.106360][ T30] audit: type=1326 audit(1746573007.220:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10181 comm="syz.0.1779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ddb18e969 code=0x7ffc0000 [ 223.161637][ T5822] [drm:udl_init] *ERROR* Selecting channel failed [ 223.193715][ T5822] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 223.210402][ T5822] [drm] Initialized udl on minor 2 [ 223.234657][ T5822] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 223.249736][ T5822] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 223.262609][ T5887] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 223.272089][ T5887] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 223.282302][ T5822] usb 3-1: USB disconnect, device number 24 [ 223.295106][T10194] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.824687][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.934408][ T2073] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 224.094182][ T2073] usb 1-1: Using ep0 maxpacket: 16 [ 224.106382][ T2073] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 224.114689][ T2073] usb 1-1: config 0 has no interface number 0 [ 224.121430][ T2073] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 224.132424][ T2073] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 224.143101][ T2073] usb 1-1: config 0 interface 41 has no altsetting 0 [ 224.152530][ T2073] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 224.161908][ T2073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.182211][ T2073] usb 1-1: Product: syz [ 224.187294][ T2073] usb 1-1: Manufacturer: syz [ 224.191928][ T2073] usb 1-1: SerialNumber: syz [ 224.199863][ T2073] usb 1-1: config 0 descriptor?? [ 224.214831][T10213] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.222392][T10213] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.314423][ T5874] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 224.462054][T10213] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.470489][ T5834] Bluetooth: hci5: command 0x1003 tx timeout [ 224.477027][ T5130] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 224.485524][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.507584][T10213] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 224.559342][ T5874] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 224.604727][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.624924][ T5874] usb 3-1: config 0 descriptor?? [ 224.834096][ T5871] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 224.864113][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 224.996536][ T5871] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 225.006322][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.016862][ T5871] usb 5-1: config 0 descriptor?? [ 225.041581][ T5871] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 225.050155][ T5874] keytouch 0003:0926:3333.0024: fixing up Keytouch IEC report descriptor [ 225.080638][ T5874] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0024/input/input32 [ 225.172762][ T5874] keytouch 0003:0926:3333.0024: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 225.361573][ T2073] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 225.373342][ T2073] usb 1-1: USB disconnect, device number 24 [ 225.430299][ T5871] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 225.836933][ T5871] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 225.903636][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 226.057665][ T5871] usb 5-1: USB disconnect, device number 21 [ 226.162599][T10279] netlink: 'syz.1.1822': attribute type 5 has an invalid length. [ 226.171236][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1822'. [ 226.773920][T10293] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 226.945068][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.123470][ T5875] usb 3-1: USB disconnect, device number 25 [ 227.361948][T10303] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 227.381286][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1833'. [ 227.812676][ T2073] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 227.982559][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 227.992465][ T2073] usb 1-1: Using ep0 maxpacket: 32 [ 228.003752][ T2073] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 228.022395][ T2073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.041795][ T2073] usb 1-1: config 0 descriptor?? [ 228.054621][ T2073] gspca_main: sq930x-2.14.0 probing 041e:403c [ 229.021995][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 229.076192][ T2073] gspca_sq930x: ucbus_write failed -71 [ 229.082084][ T2073] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 229.092003][ T2073] usb 1-1: USB disconnect, device number 25 [ 229.380912][T10384] netem: incorrect ge model size [ 229.388992][T10384] netem: change failed [ 229.399127][T10386] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1869'. [ 229.536324][T10392] binder: 10391:10392 ioctl 4018620d 0 returned -22 [ 230.061624][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 230.403321][ T5887] kernel write not supported for file /audio (pid: 5887 comm: kworker/1:6) [ 230.846414][T10454] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 p12 [ 230.865003][T10454] nullb0: p1 start 1714368869 is beyond EOD, truncated [ 230.878735][T10454] nullb0: p2 start 1840217545 is beyond EOD, truncated [ 230.893415][T10454] nullb0: p3 start 2781609279 is beyond EOD, truncated [ 230.916208][T10454] nullb0: p4 start 2763479866 is beyond EOD, truncated [ 230.939522][T10454] nullb0: p5 size 1576935424 extends beyond EOD, truncated [ 230.968114][T10454] nullb0: p6 start 4255409061 is beyond EOD, truncated [ 230.988339][T10454] nullb0: p7 start 1354594978 is beyond EOD, truncated [ 231.006927][T10423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1884'. [ 231.011459][T10454] nullb0: p8 start 2203294751 is beyond EOD, truncated [ 231.033106][T10423] geneve0: entered promiscuous mode [ 231.050997][T10423] geneve0: entered allmulticast mode [ 231.051650][T10454] nullb0: p9 size 3667873493 extends beyond EOD, truncated [ 231.100918][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 231.115773][T10454] nullb0: p10 start 2534445966 is beyond EOD, truncated [ 231.161266][T10454] nullb0: p11 start 1318227915 is beyond EOD, truncated [ 231.168298][T10454] nullb0: p12 size 3013114410 extends beyond EOD, truncated [ 231.389641][T10471] input input33: cannot allocate more than FF_MAX_EFFECTS effects [ 232.140435][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.385151][T10518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.400353][ T2073] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 232.429417][T10518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.564737][ T2073] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.579998][ T2073] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.594906][ T2073] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 232.607084][ T2073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 232.618636][ T2073] usb 2-1: SerialNumber: syz [ 232.850233][ T2073] usb 2-1: 0:2 : does not exist [ 232.890652][ T2073] usb 2-1: USB disconnect, device number 22 [ 233.167768][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 233.167787][ T30] audit: type=1326 audit(1746573017.535:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10514 comm="syz.4.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x7fc00000 [ 233.180071][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 233.195541][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.219503][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 234.315152][ T2073] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 234.390333][T10583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.500155][ T2073] usb 5-1: Using ep0 maxpacket: 32 [ 234.519443][ T2073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.540196][ T2073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.571772][T10590] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 234.597922][ C0] vkms_vblank_simulate: vblank timer overrun [ 234.619229][ T2073] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 234.659414][T10590] CIFS mount error: No usable UNC path provided in device string! [ 234.659414][T10590] [ 234.662865][ T2073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.701509][ T2073] usb 5-1: config 0 descriptor?? [ 234.719254][T10590] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 235.090835][ T5871] kernel write not supported for file /850/attr/exec (pid: 5871 comm: kworker/0:4) [ 235.134427][ T2073] savu 0003:1E7D:2D5A.0025: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 235.264001][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 235.393203][ T2073] usb 5-1: USB disconnect, device number 22 [ 236.001902][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1977'. [ 236.048651][T10629] netlink: 'syz.0.1977': attribute type 7 has an invalid length. [ 236.056457][T10629] netlink: 'syz.0.1977': attribute type 8 has an invalid length. [ 236.076446][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1977'. [ 236.125689][T10629] erspan0: entered promiscuous mode [ 236.152035][T10629] gretap0: entered promiscuous mode [ 236.188277][T10629] erspan0: left promiscuous mode [ 236.213330][T10629] gretap0: left promiscuous mode [ 236.298287][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.279799][T10672] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1996'. [ 237.337853][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 237.355207][T10674] loop2: detected capacity change from 0 to 7 [ 237.383457][T10674] Dev loop2: unable to read RDB block 7 [ 237.405253][T10674] loop2: AHDI p1 p2 [ 237.411541][T10674] loop2: partition table partially beyond EOD, truncated [ 237.422489][T10674] loop2: p1 size 4227858431 extends beyond EOD, truncated [ 237.938944][T10691] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2005'. [ 237.943390][T10690] vlan3: entered promiscuous mode [ 237.956944][T10690] macvtap0: entered promiscuous mode [ 238.182708][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'. [ 238.377455][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 238.866589][T10722] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x1 [ 239.136786][ T5871] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 239.155687][T10732] syz.2.2018: attempt to access beyond end of device [ 239.155687][T10732] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 239.310446][ T5871] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 239.326520][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.334564][ T5871] usb 5-1: Product: syz [ 239.356490][ T5871] usb 5-1: Manufacturer: syz [ 239.361147][ T5871] usb 5-1: SerialNumber: syz [ 239.378792][ T5871] usb 5-1: config 0 descriptor?? [ 239.416744][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 239.651914][T10748] input: syz0 as /devices/virtual/input/input34 [ 239.801601][ T5871] usb 5-1: Firmware: major: 0, minor: 168, hardware type: UNKNOWN (136) [ 240.015380][ T2073] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 240.023855][ T5871] usb 5-1: failed to fetch extended address, random address set [ 240.042156][ T5871] usb 5-1: atusb_probe: initialization failed, error = -524 [ 240.056658][ T5871] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 240.085020][ T5871] usb 5-1: USB disconnect, device number 23 [ 240.196161][ T2073] usb 2-1: Using ep0 maxpacket: 8 [ 240.205517][ T2073] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 240.214930][ T2073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.224365][ T2073] usb 2-1: Product: syz [ 240.236094][ T2073] usb 2-1: Manufacturer: syz [ 240.240779][ T2073] usb 2-1: SerialNumber: syz [ 240.248760][ T2073] usb 2-1: config 0 descriptor?? [ 240.258784][ T2073] gspca_main: sq905-2.14.0 probing 2770:9120 [ 240.346127][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 240.377015][ T5874] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 240.456307][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.508418][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 240.523315][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.532694][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 240.538071][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 240.546445][ T9] usb 4-1: SerialNumber: syz [ 240.552974][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.571290][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.581593][ T5874] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 240.590811][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.606448][ T5874] usb 3-1: config 0 descriptor?? [ 240.669286][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2046'. [ 240.696041][ T5822] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 240.741124][ T30] audit: type=1400 audit(1746573025.109:616): lsm=SMACK fn=smack_task_kill action=denied subject="w" object="_" requested=w pid=10782 comm="syz.4.2047" opid=10782 ocomm="syz.4.2047" [ 240.856069][ T5822] usb 1-1: Using ep0 maxpacket: 8 [ 240.877261][ T5822] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 240.886800][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.894839][ T5822] usb 1-1: Product: syz [ 240.899253][ T5822] usb 1-1: Manufacturer: syz [ 240.903896][ T5822] usb 1-1: SerialNumber: syz [ 240.914327][ T5822] usb 1-1: config 0 descriptor?? [ 240.923149][ T5822] gspca_main: se401-2.14.0 probing 047d:5003 [ 241.027993][ T5874] playstation 0003:054C:05C4.0026: unknown main item tag 0x0 [ 241.041532][ T5874] playstation 0003:054C:05C4.0026: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0 [ 241.199179][ T9] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 241.270404][ T2073] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 241.278601][ T2073] sq905 2-1:0.0: probe with driver sq905 failed with error -71 [ 241.289028][ T2073] usb 2-1: USB disconnect, device number 23 [ 241.333019][ T5822] gspca_se401: Frame size: 0x2 1/4th janggu [ 241.339262][ T5822] gspca_se401: Frame size: 0x127 bayer [ 241.345159][ T5822] gspca_se401: Frame size: 256x0 bayer [ 241.357129][ T5822] gspca_se401: Frame size: 0x0 1/16th janggu [ 241.363174][ T5822] gspca_se401: Frame size: 0x4 bayer [ 241.423368][ T5874] playstation 0003:054C:05C4.0026: Failed to retrieve feature with reportID 163: -32 [ 241.433443][ T5874] playstation 0003:054C:05C4.0026: Failed to retrieve DualShock4 firmware info: -32 [ 241.443013][ T5874] playstation 0003:054C:05C4.0026: Failed to get firmware info from DualShock4 [ 241.453129][ T5874] playstation 0003:054C:05C4.0026: HW/FW version data in sysfs will be invalid. [ 241.470767][ T5874] input: HID 054c:05c4 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0026/input/input35 [ 241.505682][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.508795][ T5874] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0026/input/input36 [ 241.550537][ T5822] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37 [ 241.554437][ T5874] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:054C:05C4.0026/input/input38 [ 241.585607][ T5875] usb 4-1: USB disconnect, device number 19 [ 241.594330][ T5875] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 241.612308][ T5822] usb 1-1: USB disconnect, device number 26 [ 241.648246][ T5874] playstation 0003:054C:05C4.0026: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 241.690678][ T24] usb 3-1: USB disconnect, device number 26 [ 242.155658][T10812] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x1 [ 242.385103][ T5874] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 242.415337][ T24] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 242.499457][T10829] tipc: Started in network mode [ 242.504486][T10829] tipc: Node identity ac141425, cluster identity 4711 [ 242.505033][ T5875] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 242.511927][T10829] tipc: New replicast peer: 0.0.0.0 [ 242.527732][T10829] tipc: Enabled bearer , priority 10 [ 242.535080][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.548773][T10829] tipc: New replicast peer: 172.20.20.170 [ 242.557842][ T5874] usb 2-1: Using ep0 maxpacket: 32 [ 242.566786][ T5874] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.583439][ T24] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 242.584884][ T5874] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.593750][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.612354][ T24] usb 1-1: Product: syz [ 242.613535][ T5874] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 242.616641][ T24] usb 1-1: Manufacturer: syz [ 242.616659][ T24] usb 1-1: SerialNumber: syz [ 242.630544][ T5874] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 242.643866][ T5874] usb 2-1: Product: syz [ 242.652775][ T5874] usb 2-1: Manufacturer: syz [ 242.655439][ T24] usb 1-1: config 0 descriptor?? [ 242.669921][ T5874] hub 2-1:4.0: USB hub found [ 242.672311][ T5875] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.689673][ T5875] usb 3-1: config 0 interface 0 has no altsetting 0 [ 242.702027][ T5875] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 242.716803][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.728356][ T5875] usb 3-1: Product: syz [ 242.732610][ T5875] usb 3-1: Manufacturer: syz [ 242.738694][ T5875] usb 3-1: SerialNumber: syz [ 242.751071][ T5875] usb 3-1: config 0 descriptor?? [ 242.761590][ T5875] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 242.782074][ T5875] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.796977][ T5875] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 242.808681][ T5875] usb 3-1: media controller created [ 242.847998][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 242.884532][ T5874] hub 2-1:4.0: 2 ports detected [ 242.923756][ T5875] DVB: Unable to find symbol tda10046_attach() [ 242.930922][ T5875] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 242.943277][ T5875] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 243.106055][ T24] usb 1-1: Firmware: major: 0, minor: 168, hardware type: UNKNOWN (136) [ 243.289978][ T5874] hub 2-1:4.0: set hub depth failed [ 243.317259][ T24] usb 1-1: failed to fetch extended address, random address set [ 243.319334][ T5874] usb 2-1: USB disconnect, device number 24 [ 243.336810][ T24] usb 1-1: atusb_probe: initialization failed, error = -524 [ 243.344414][ T24] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 243.362916][ T24] usb 1-1: USB disconnect, device number 27 [ 243.574665][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.585866][ T5875] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 243.606740][ T5875] usb 3-1: USB disconnect, device number 27 [ 243.636119][T10854] loop6: detected capacity change from 0 to 7 [ 243.643526][T10854] Dev loop6: unable to read RDB block 7 [ 243.645135][ T2073] tipc: Node number set to 2886997029 [ 243.651971][T10854] loop6: AHDI p3 p4 [ 243.662374][T10854] loop6: partition table partially beyond EOD, truncated [ 243.673922][T10854] loop6: p3 start 1886353253 is beyond EOD, truncated [ 244.224552][T10869] dlm: non-version read from control device 211 [ 244.243092][T10869] dlm: non-version read from control device 211 [ 244.251711][T10869] dlm: non-version read from control device 211 [ 244.268012][T10849] syz.3.2075 (10849): drop_caches: 2 [ 244.274351][T10869] dlm: non-version read from control device 211 [ 244.295998][T10869] dlm: non-version read from control device 211 [ 244.518634][T10879] netlink: 'syz.4.2088': attribute type 1 has an invalid length. [ 244.586198][T10879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.614396][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.727599][T10884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 244.748048][T10884] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 244.799092][T10884] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 245.296995][ T5875] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 245.342975][T10904] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 245.353053][T10907] netlink: 'syz.3.2099': attribute type 1 has an invalid length. [ 245.405896][T10907] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 245.417523][T10907] bond1: (slave ip6tnl1): Setting fail_over_mac to active for active-backup mode [ 245.431115][T10907] bond1: (slave ip6tnl1): making interface the new active one [ 245.440046][T10907] bond1: (slave ip6tnl1): Enslaving as an active interface with an up link [ 245.455548][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 201, changing to 11 [ 245.468222][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33536, setting to 1024 [ 245.499719][ T5875] usb 3-1: New USB device found, idVendor=d86d, idProduct=c222, bcdDevice= 0.00 [ 245.515123][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.527307][ T5875] usb 3-1: config 0 descriptor?? [ 245.653760][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.958879][ T5875] hid (null): usage index exceeded [ 245.967467][ T5875] hid-generic 0003:D86D:C222.0027: ignoring exceeding usage max [ 245.999189][ T5875] hid-generic 0003:D86D:C222.0027: ignoring exceeding usage max [ 246.007403][ T5875] hid-generic 0003:D86D:C222.0027: usage index exceeded [ 246.015685][ T5875] hid-generic 0003:D86D:C222.0027: item 0 0 2 2 parsing failed [ 246.026673][ T5875] hid-generic 0003:D86D:C222.0027: probe with driver hid-generic failed with error -22 [ 246.114411][ T30] audit: type=1326 audit(1746573030.491:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10901 comm="syz.1.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6e18e969 code=0x7fc00000 [ 246.163802][ T5875] usb 3-1: USB disconnect, device number 28 [ 246.693132][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.717804][T10960] sctp: [Deprecated]: syz.0.2122 (pid 10960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.717804][T10960] Use struct sctp_sack_info instead [ 247.732652][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.022860][ T5871] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 248.032468][T11005] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.042223][T11005] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.202329][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 248.226810][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.267269][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.281793][ T5871] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 248.303518][T11005] batadv_slave_0: left promiscuous mode [ 248.317760][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.327303][T11005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.346585][ T5871] usb 1-1: config 0 descriptor?? [ 248.759759][ T5871] gt683r_led 0003:1770:FF00.0028: collection stack underflow [ 248.767373][ T5871] gt683r_led 0003:1770:FF00.0028: item 0 1 0 12 parsing failed [ 248.772120][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.783141][ T5871] gt683r_led 0003:1770:FF00.0028: hid parsing failed [ 248.798985][ T5871] gt683r_led 0003:1770:FF00.0028: probe with driver gt683r_led failed with error -22 [ 248.959445][ T5871] usb 1-1: USB disconnect, device number 28 [ 249.341405][T11005] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.356226][T11005] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.366023][T11005] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.375460][T11005] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.665468][T11050] bridge0: port 3(erspan0) entered blocking state [ 249.679952][T11050] bridge0: port 3(erspan0) entered disabled state [ 249.698635][T11050] erspan0: entered allmulticast mode [ 249.706701][T11050] erspan0: entered promiscuous mode [ 249.715365][T11050] bridge0: port 3(erspan0) entered blocking state [ 249.723193][T11050] bridge0: port 3(erspan0) entered forwarding state [ 249.746074][T11057] erspan0: left allmulticast mode [ 249.767474][T11057] erspan0: left promiscuous mode [ 249.812127][T11057] bridge0: port 3(erspan0) entered disabled state [ 249.812313][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.141313][T11072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2168'. [ 250.159861][T11072] netlink: 'syz.2.2168': attribute type 1 has an invalid length. [ 250.168039][T11072] netlink: 'syz.2.2168': attribute type 2 has an invalid length. [ 250.851191][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.390579][ T5822] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 251.542538][ T5822] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.566102][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 251.585508][ T5822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 251.604040][ T5822] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 251.619523][ T5822] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 251.629081][ T5822] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 251.637305][ T5822] usb 3-1: Manufacturer: syz [ 251.645043][ T5822] usb 3-1: config 0 descriptor?? [ 251.856853][T11124] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 251.890575][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.965562][ T5822] rc_core: IR keymap rc-hauppauge not found [ 251.991067][ T5822] Registered IR keymap rc-empty [ 252.010311][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 252.040917][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 252.052200][T11135] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 252.060715][T11135] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 252.081284][ T5822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 252.098451][ T5822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input39 [ 252.115545][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 252.142761][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 252.180233][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 252.218024][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 252.250186][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 252.261352][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2199'. [ 252.270874][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 252.291172][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 252.312772][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 252.340418][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 252.370787][ T5822] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 252.403416][ T5822] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 252.433141][ T5822] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 252.445987][ T5822] usb 3-1: USB disconnect, device number 29 [ 252.929932][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.542680][T11186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.575907][ T30] audit: type=1326 audit(1746573037.955:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eab8e969 code=0x7ffc0000 [ 253.632995][ T30] audit: type=1326 audit(1746573037.975:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eab8e969 code=0x7ffc0000 [ 253.684628][ T30] audit: type=1326 audit(1746573037.985:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98eab8e969 code=0x7ffc0000 [ 253.739392][ T30] audit: type=1326 audit(1746573037.985:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eab8e969 code=0x7ffc0000 [ 253.792233][ T30] audit: type=1326 audit(1746573037.985:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eab8e969 code=0x7ffc0000 [ 253.861713][ T30] audit: type=1326 audit(1746573037.985:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98eab8e969 code=0x7ffc0000 [ 253.914138][ T30] audit: type=1326 audit(1746573037.985:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eab8e969 code=0x7ffc0000 [ 253.956282][ T30] audit: type=1326 audit(1746573037.985:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eab8e969 code=0x7ffc0000 [ 253.978329][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.986064][ T30] audit: type=1326 audit(1746573037.995:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f98eab8e969 code=0x7ffc0000 [ 254.018795][ T30] audit: type=1326 audit(1746573037.995:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eab8e969 code=0x7ffc0000 [ 254.132408][ T5875] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 254.291539][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 254.307094][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.318135][ T5875] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.347511][ T5875] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 254.423467][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.470612][ T5875] usb 3-1: config 0 descriptor?? [ 255.008954][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.104150][ T5875] usb 3-1: string descriptor 0 read error: -71 [ 255.136023][ T5875] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 255.144151][ T5875] letsketch 0003:6161:4D15.0029: probe with driver letsketch failed with error -32 [ 255.156193][ T5875] usb 3-1: USB disconnect, device number 30 [ 255.162357][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 255.324660][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 255.333952][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.346313][ T24] usb 4-1: config 0 descriptor?? [ 255.354002][ T24] gspca_main: spca508-2.14.0 probing 8086:0110 [ 255.561288][ T24] gspca_spca508: reg_read err -32 [ 255.575934][ T24] gspca_spca508: reg_read err -32 [ 255.589530][ T24] gspca_spca508: reg_read err -32 [ 255.732196][ T2073] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 255.734833][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.746194][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.801735][ T24] gspca_spca508: reg_read err -71 [ 255.807186][ T24] gspca_spca508: reg write: error -71 [ 255.818556][ T24] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 255.830924][ T24] usb 4-1: USB disconnect, device number 20 [ 255.895944][ T2073] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.918865][ T2073] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 255.932049][ T2073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.963242][ T2073] usb 5-1: config 0 descriptor?? [ 256.048435][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.086100][T11253] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 256.101318][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 256.393080][ T2073] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 256.414812][ T2073] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.002A/input/input40 [ 256.524737][ T2073] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 256.927844][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 257.079877][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.090418][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.098268][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 257.112705][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 257.122050][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 257.130181][ T24] usb 3-1: SerialNumber: syz [ 257.357244][ T24] usb 3-1: 0:2 : does not exist [ 257.373731][T11285] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2259'. [ 257.393204][ T24] usb 3-1: USB disconnect, device number 31 [ 257.617421][ T5875] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 257.779699][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.799379][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.814190][ T5875] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 257.824052][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.839946][ T5875] usb 4-1: config 0 descriptor?? [ 258.134292][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.272274][ T5875] lenovo 0003:17EF:6047.002B: unknown main item tag 0x0 [ 258.286138][ T5875] lenovo 0003:17EF:6047.002B: unknown main item tag 0x0 [ 258.294465][ T5875] lenovo 0003:17EF:6047.002B: unknown main item tag 0x0 [ 258.302710][ T5875] lenovo 0003:17EF:6047.002B: unknown main item tag 0x0 [ 258.310242][ T5875] lenovo 0003:17EF:6047.002B: unknown main item tag 0x0 [ 258.320122][ T5875] lenovo 0003:17EF:6047.002B: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 258.324953][T11313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2270'. [ 258.347065][T11313] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.356491][T11313] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.502305][ T24] usb 5-1: USB disconnect, device number 24 [ 258.724373][T11330] vlan2: entered promiscuous mode [ 258.737493][T11330] erspan0: entered promiscuous mode [ 258.866058][ T5875] lenovo 0003:17EF:6047.002B: Fn-lock setting failed: -71 [ 258.874010][ T5875] lenovo 0003:17EF:6047.002B: Sensitivity setting failed: -71 [ 258.884132][ T5875] usb 4-1: USB disconnect, device number 21 [ 258.976888][ T2073] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 259.136808][ T2073] usb 5-1: Using ep0 maxpacket: 8 [ 259.146183][ T2073] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.158887][ T2073] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.166256][ T2073] usb 5-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 259.176867][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.183713][ T2073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.196434][ T2073] usb 5-1: config 0 descriptor?? [ 259.501007][T11353] 9pnet: p9_errstr2errno: server reported unknown error í, priority 10 [ 271.737067][T11774] tipc: New replicast peer: 172.20.20.170 [ 271.810432][ T5871] ft260 0003:0403:6030.002E: chip code: 0000 0000 [ 271.822756][T11777] input: syz0 as /devices/virtual/input/input43 [ 271.943608][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2462'. [ 272.215780][ T5874] usb 3-1: USB disconnect, device number 35 [ 272.390093][ T5871] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 272.550395][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 272.565407][ T5871] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 272.586858][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.595610][ T5871] usb 4-1: Product: syz [ 272.599951][ T5871] usb 4-1: Manufacturer: syz [ 272.604601][ T5871] usb 4-1: SerialNumber: syz [ 272.612178][ T5871] usb 4-1: config 0 descriptor?? [ 272.620568][ T5871] gspca_main: se401-2.14.0 probing 047d:5003 [ 272.689938][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 272.699982][ T883] tipc: Node number set to 2886997029 [ 272.849903][ T5822] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 273.021620][ T5822] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 273.025592][ T5871] gspca_se401: Frame size: 0x2 1/4th janggu [ 273.040870][ T5822] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.050064][ T30] audit: type=1326 audit(1746573057.435:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11821 comm="syz.2.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eab8e969 code=0x7fc00000 [ 273.055005][ T5871] gspca_se401: Frame size: 0x127 bayer [ 273.077344][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.077869][ T5871] gspca_se401: Frame size: 256x0 bayer [ 273.086245][ T5822] usb 2-1: SerialNumber: syz [ 273.096198][ T5871] gspca_se401: Frame size: 0x0 1/16th janggu [ 273.103337][ T5871] gspca_se401: Frame size: 0x4 bayer [ 273.252157][ T5871] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44 [ 273.281511][ T30] audit: type=1400 audit(1746573057.665:632): lsm=SMACK fn=smack_task_kill action=denied subject="w" object="_" requested=w pid=11824 comm="syz.0.2480" opid=11824 ocomm="syz.0.2480" [ 273.303359][ T5871] usb 4-1: USB disconnect, device number 24 [ 273.675319][T11829] Bluetooth: hci0: invalid length 0, exp 2 for type 29 [ 273.719421][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 273.722024][ T30] audit: type=1326 audit(1746573058.115:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11821 comm="syz.2.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98eab8e969 code=0x7fc00000 [ 273.770381][ T5822] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 274.172972][ T24] usb 2-1: USB disconnect, device number 26 [ 274.185543][ T24] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 274.379228][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 274.571836][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 274.580167][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.598863][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.608652][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 274.618132][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.641265][ T9] usb 1-1: config 0 descriptor?? [ 274.758974][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 274.808233][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 274.812581][T11861] IPv6: sit1: Disabled Multicast RS [ 274.913631][T11865] netem: change failed [ 274.968767][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 274.991622][ T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.021863][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.038874][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.047131][ T24] usb 3-1: Product: syz [ 275.051418][ T24] usb 3-1: Manufacturer: syz [ 275.056035][ T24] usb 3-1: SerialNumber: syz [ 275.065476][ T9] ft260 0003:0403:6030.002F: unknown main item tag 0x0 [ 275.262352][ T9] ft260 0003:0403:6030.002F: chip code: 0000 0000 [ 275.681012][ T9] usb 1-1: USB disconnect, device number 30 [ 275.808274][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 276.078239][ T24] cdc_ncm 3-1:1.0: failed to get mac address [ 276.283740][ T24] cdc_ncm 3-1:1.0: bind() failure [ 276.310070][ T24] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 276.340655][ T24] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 276.357173][ T24] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 276.388973][ T24] usb 3-1: USB disconnect, device number 36 [ 276.847791][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 277.877238][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.097240][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 278.267311][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 278.280262][ T9] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 278.460642][ T9] usb 2-1: config 0 has no interface number 0 [ 278.466813][ T9] usb 2-1: config 0 interface 6 has no altsetting 0 [ 278.489334][ T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice=84.99 [ 278.517137][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.525222][ T9] usb 2-1: Product: syz [ 278.547054][ T9] usb 2-1: Manufacturer: syz [ 278.551756][ T9] usb 2-1: SerialNumber: syz [ 278.572202][ T9] usb 2-1: config 0 descriptor?? [ 278.591093][ T9] ums-sddr09 2-1:0.6: USB Mass Storage device detected [ 278.624211][ T9] ums-sddr09 2-1:0.6: This device (04e6,0003,8499 S 06 P 2e) has an unneeded SubClass entry in unusual_devs.h (kernel 6.15.0-rc5-syzkaller-00032-g0d8d44db295c) [ 278.624211][ T9] Please send a copy of this message to and [ 278.883286][T11947] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2530'. [ 278.916727][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 278.970756][ T5822] usb 2-1: USB disconnect, device number 27 [ 279.916424][ T5822] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 279.966240][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 280.089759][ T5822] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 280.123465][ T5822] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 280.156362][ T5822] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 280.183280][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.213319][T11967] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 280.230197][ T5822] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 280.438886][ T9] usb 2-1: USB disconnect, device number 28 [ 280.995704][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 281.016579][ T24] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 281.166208][ T5822] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 281.188576][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 281.207801][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.246844][ T24] usb 4-1: config 0 descriptor?? [ 281.371780][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.395690][ T5822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.405776][ T5822] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 281.414966][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.438716][ T5822] usb 1-1: config 0 descriptor?? [ 281.461572][ T24] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 281.470796][ T24] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 281.498480][ T24] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 281.515649][ T24] [drm] Initialized udl on minor 2 [ 281.763013][T12021] KVM: debugfs: duplicate directory 12021-5 [ 281.858821][ T5822] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 281.884657][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 281.917517][ T5822] cp2112 0003:10C4:EA90.0030: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 281.929277][ T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 281.937313][ T883] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 281.957325][ T883] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 281.966263][ T24] usb 4-1: USB disconnect, device number 25 [ 281.983751][ T883] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 282.045166][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 282.055894][ T5822] cp2112 0003:10C4:EA90.0030: Part Number: 0x82 Device Version: 0xFE [ 282.661630][ T5822] cp2112 0003:10C4:EA90.0030: error reading lock byte: -71 [ 282.685191][ T5822] usb 1-1: USB disconnect, device number 31 [ 283.074655][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 283.913288][T12070] 9p: Unknown uid 00000000004294967295 [ 284.114129][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 284.391004][ T30] audit: type=1326 audit(1746573068.781:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12057 comm="syz.4.2578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd028f8e969 code=0x7fc00000 [ 284.506035][ T5822] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 284.744056][ T5822] usb 2-1: Using ep0 maxpacket: 16 [ 284.758787][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.773845][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.783644][ T5822] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 284.833856][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.834087][ T5874] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 284.884349][ T5822] usb 2-1: config 0 descriptor?? [ 285.008887][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 285.030473][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.060477][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.090091][ T5874] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 285.102953][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.125472][ T5874] usb 5-1: config 0 descriptor?? [ 285.153710][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 285.314639][ T5822] gt683r_led 0003:1770:FF00.0031: collection stack underflow [ 285.329138][T12072] syz.0.2594 (12072): drop_caches: 2 [ 285.347428][ T5822] gt683r_led 0003:1770:FF00.0031: item 0 1 0 12 parsing failed [ 285.382669][ T5822] gt683r_led 0003:1770:FF00.0031: hid parsing failed [ 285.412997][ T5822] gt683r_led 0003:1770:FF00.0031: probe with driver gt683r_led failed with error -22 [ 285.541049][ T5822] usb 2-1: USB disconnect, device number 29 [ 285.600067][T12096] syz.3.2595: attempt to access beyond end of device [ 285.600067][T12096] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 285.649368][ T5874] playstation 0003:054C:05C4.0032: unknown main item tag 0x0 [ 285.659910][ T5874] playstation 0003:054C:05C4.0032: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 286.059104][ T5874] playstation 0003:054C:05C4.0032: Failed to retrieve feature with reportID 163: -32 [ 286.073290][ T5874] playstation 0003:054C:05C4.0032: Failed to retrieve DualShock4 firmware info: -32 [ 286.093371][ T5874] playstation 0003:054C:05C4.0032: Failed to get firmware info from DualShock4 [ 286.102456][ T5874] playstation 0003:054C:05C4.0032: HW/FW version data in sysfs will be invalid. [ 286.119516][ T5874] input: HID 054c:05c4 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.0032/input/input45 [ 286.141562][ T5874] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.0032/input/input46 [ 286.161436][ T5874] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:054C:05C4.0032/input/input47 [ 286.193172][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 286.204188][ T5874] playstation 0003:054C:05C4.0032: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 286.291615][T12118] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 286.411226][ T9] usb 5-1: USB disconnect, device number 27 [ 286.423285][T12120] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 286.442795][T12120] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 286.547220][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2607'. [ 286.558757][T12129] netlink: 'syz.3.2607': attribute type 5 has an invalid length. [ 286.588755][T12129] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.598036][T12129] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.606974][T12129] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.615819][T12129] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.633103][T12129] vxlan0: entered promiscuous mode [ 287.232579][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 287.332889][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 287.492636][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 287.499904][ T9] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 287.510502][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 287.519451][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 287.529874][ T9] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 287.538830][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 287.548133][ T9] usb 2-1: config 0 has no interface number 0 [ 287.554494][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 287.573812][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 287.592563][ T9] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 287.613534][ T9] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.631701][ T9] usb 2-1: config 0 interface 125 has no altsetting 0 [ 287.644081][ T9] usb 2-1: config 0 interface 125 has no altsetting 2 [ 287.658971][ T9] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 287.668553][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.676721][ T9] usb 2-1: Product: syz [ 287.689747][T12173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.706653][ T9] usb 2-1: Manufacturer: syz [ 287.711297][ T9] usb 2-1: SerialNumber: syz [ 287.719208][ T9] usb 2-1: config 0 descriptor?? [ 287.736439][ T9] usb 2-1: selecting invalid altsetting 2 [ 287.886058][ T5871] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 288.065603][ T5871] usb 1-1: Using ep0 maxpacket: 16 [ 288.079094][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.105322][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.119904][ T5871] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 288.129188][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.146989][ T5871] usb 1-1: config 0 descriptor?? [ 288.272045][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 288.597599][ T5871] playstation 0003:054C:05C4.0033: unknown main item tag 0x0 [ 288.615493][ T5871] playstation 0003:054C:05C4.0033: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 288.641767][T12197] ipvlan2: entered promiscuous mode [ 288.765981][ T5874] usb 2-1: USB disconnect, device number 30 [ 288.891961][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 288.996176][ T5871] playstation 0003:054C:05C4.0033: Failed to retrieve feature with reportID 163: -32 [ 289.007788][ T5871] playstation 0003:054C:05C4.0033: Failed to retrieve DualShock4 firmware info: -32 [ 289.018408][ T5871] playstation 0003:054C:05C4.0033: Failed to get firmware info from DualShock4 [ 289.027783][ T5871] playstation 0003:054C:05C4.0033: HW/FW version data in sysfs will be invalid. [ 289.044290][ T5871] input: HID 054c:05c4 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.0033/input/input48 [ 289.059039][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.083005][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 289.101525][ T5871] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.0033/input/input49 [ 289.116643][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 289.127762][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 289.143930][ T5871] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:05C4.0033/input/input50 [ 289.156514][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.167087][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.187590][ T5871] playstation 0003:054C:05C4.0033: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 289.201839][ T9] usb 4-1: config 0 descriptor?? [ 289.269143][ T5874] usb 1-1: USB disconnect, device number 32 [ 289.311534][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 289.625157][ T9] plantronics 0003:047F:FFFF.0034: No inputs registered, leaving [ 289.647708][ T9] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 289.848685][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2652'. [ 289.881268][T12229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.910685][T12229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 289.920823][T12229] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 289.933929][T12229] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 290.361049][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 290.467990][ T9] usb 4-1: USB disconnect, device number 26 [ 291.013978][T12267] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2667'. [ 291.040868][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 291.174091][T12274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2669'. [ 291.202810][ T883] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 291.204861][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 291.226051][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.244833][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.256132][ T9] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 291.270148][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.285530][ T9] usb 2-1: config 0 descriptor?? [ 291.363713][ T883] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.381988][ T883] usb 1-1: config 0 interface 0 has no altsetting 0 [ 291.400492][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 291.410868][ T883] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 291.420322][ T883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.429592][ T883] usb 1-1: Product: syz [ 291.433836][ T883] usb 1-1: Manufacturer: syz [ 291.438438][ T883] usb 1-1: SerialNumber: syz [ 291.445831][ T883] usb 1-1: config 0 descriptor?? [ 291.453936][ T883] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 291.464868][ T883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 291.475222][ T883] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 291.483960][ T883] usb 1-1: media controller created [ 291.507526][ T883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.555692][ T883] DVB: Unable to find symbol tda10046_attach() [ 291.566114][ T883] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 291.577153][ T883] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 291.704526][ T9] playstation 0003:054C:05C4.0035: unknown main item tag 0x0 [ 291.714710][ T9] playstation 0003:054C:05C4.0035: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 292.106251][ T9] playstation 0003:054C:05C4.0035: Failed to retrieve feature with reportID 163: -32 [ 292.116096][ T9] playstation 0003:054C:05C4.0035: Failed to retrieve DualShock4 firmware info: -32 [ 292.120189][ T5834] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 292.125543][ T5130] Bluetooth: hci5: command 0x1003 tx timeout [ 292.138579][ T9] playstation 0003:054C:05C4.0035: Failed to get firmware info from DualShock4 [ 292.147630][ T9] playstation 0003:054C:05C4.0035: HW/FW version data in sysfs will be invalid. [ 292.169069][ T9] input: HID 054c:05c4 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:05C4.0035/input/input52 [ 292.206797][ T9] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:05C4.0035/input/input53 [ 292.252377][ T9] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:05C4.0035/input/input54 [ 292.313103][ T9] playstation 0003:054C:05C4.0035: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 292.429996][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 292.436659][ T9] usb 2-1: USB disconnect, device number 31 [ 292.672087][ T883] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 292.692255][ T883] usb 1-1: USB disconnect, device number 33 [ 292.865413][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2679'. [ 293.469531][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 293.509492][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 293.681239][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 293.699203][ T9] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 293.719390][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.737653][ T9] usb 1-1: Product: syz [ 293.746410][ T9] usb 1-1: Manufacturer: syz [ 293.756729][ T9] usb 1-1: SerialNumber: syz [ 293.772394][ T9] usb 1-1: config 0 descriptor?? [ 293.793011][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 294.185688][T12341] netlink: 'syz.1.2697': attribute type 29 has an invalid length. [ 294.197911][T12341] netlink: 'syz.1.2697': attribute type 29 has an invalid length. [ 294.207435][T12341] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2697'. [ 294.379293][ T883] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 294.508926][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 294.529087][ T883] usb 4-1: Using ep0 maxpacket: 16 [ 294.536342][ T883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.551059][ T883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.562747][ T883] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 294.573661][ T883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.585937][ T883] usb 4-1: config 0 descriptor?? [ 294.799059][ T9] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 294.811344][ T9] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 294.831615][ T9] usb 1-1: USB disconnect, device number 34 [ 295.010089][ T883] playstation 0003:054C:05C4.0036: unknown main item tag 0x0 [ 295.045241][ T883] playstation 0003:054C:05C4.0036: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 295.410906][ T883] playstation 0003:054C:05C4.0036: Failed to retrieve feature with reportID 163: -32 [ 295.428508][ T883] playstation 0003:054C:05C4.0036: Failed to retrieve DualShock4 firmware info: -32 [ 295.450494][ T883] playstation 0003:054C:05C4.0036: Failed to get firmware info from DualShock4 [ 295.471100][ T883] playstation 0003:054C:05C4.0036: HW/FW version data in sysfs will be invalid. [ 295.496993][ T883] input: HID 054c:05c4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0036/input/input55 [ 295.547971][ T883] input: HID 054c:05c4 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0036/input/input56 [ 295.560801][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 295.591302][ T883] input: HID 054c:05c4 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:05C4.0036/input/input57 [ 295.604668][T12381] tipc: Enabled bearer , priority 0 [ 295.619734][T12381] tipc: Disabling bearer [ 295.642315][ T883] playstation 0003:054C:05C4.0036: Registered DualShock4 controller hw_version=0x00000000 fw_version=0x00000000 [ 295.654595][ T24] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 295.717608][ T9] usb 4-1: USB disconnect, device number 27 [ 295.820064][ T24] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 295.831807][ T24] usb 2-1: config 0 has no interface number 0 [ 295.837949][ T24] usb 2-1: config 0 interface 41 has no altsetting 0 [ 295.867502][ T24] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 295.888291][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.896478][ T24] usb 2-1: Product: syz [ 295.906599][ T24] usb 2-1: Manufacturer: syz [ 295.911459][ T24] usb 2-1: SerialNumber: syz [ 295.929929][ T24] usb 2-1: config 0 descriptor?? [ 296.361861][T12394] netlink: 'syz.2.2720': attribute type 10 has an invalid length. [ 296.421066][T12394] bond0: (slave wlan1): Opening slave failed [ 296.587958][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 296.746099][ T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 296.960974][ T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 296.972050][ T24] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 296.982323][ T24] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 296.993523][ T24] usb 2-1: USB disconnect, device number 32 [ 297.627445][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 297.702599][T12409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:0c) already exists on: ipvlan2 [ 297.735246][T12409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.756333][T12410] netlink: 'syz.2.2727': attribute type 10 has an invalid length. [ 297.777727][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 297.792908][T12410] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.797669][ T5874] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 297.800784][T12410] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.846130][T12410] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.853511][T12410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.862168][T12410] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.869420][T12410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.884730][T12410] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 297.928216][T12410] syz.2.2727 (12410) used greatest stack depth: 20232 bytes left [ 297.937501][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 297.944448][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.957724][ T5874] usb 4-1: Using ep0 maxpacket: 8 [ 297.969983][ T5874] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 297.987327][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.001606][ T9] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 298.017182][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.025390][ T5874] usb 4-1: Product: syz [ 298.035553][ T5874] usb 4-1: Manufacturer: syz [ 298.040310][ T9] usb 5-1: Product: syz [ 298.044517][ T9] usb 5-1: Manufacturer: syz [ 298.049581][ T5874] usb 4-1: SerialNumber: syz [ 298.069678][ T9] usb 5-1: SerialNumber: syz [ 298.075641][ T5874] usb 4-1: config 0 descriptor?? [ 298.095659][ T9] usb 5-1: config 0 descriptor?? [ 298.104137][ T5874] gspca_main: sq905-2.14.0 probing 2770:9120 [ 298.116682][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 298.127423][ T9] usb 5-1: selecting invalid altsetting 1 [ 298.317657][ T9] gspca_stk014: init reg: 0x00 [ 298.325267][ T9] stk014 5-1:0.0: probe with driver stk014 failed with error -5 [ 298.337327][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 298.530343][ T9] usb 5-1: USB disconnect, device number 28 [ 298.667270][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.133801][ T5874] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 299.151613][ T5874] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 299.175636][ T5874] usb 4-1: USB disconnect, device number 28 [ 299.455192][ T6262] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.590965][ T6262] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.706322][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 299.717749][ T6262] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.880008][ T6262] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.000974][ T5130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.026492][ T5130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.045267][ T5130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.054977][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.063713][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.088836][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 300.107383][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 300.114873][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 300.124089][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 300.131994][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 300.210499][ T6262] bridge_slave_1: left allmulticast mode [ 300.217080][ T6262] bridge_slave_1: left promiscuous mode [ 300.224510][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.229497][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 300.247422][ T6262] bridge_slave_0: left allmulticast mode [ 300.253115][ T6262] bridge_slave_0: left promiscuous mode [ 300.262162][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.426496][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 300.441780][ T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 300.465918][ T9] usb 2-1: config 0 has no interface number 0 [ 300.484509][ T9] usb 2-1: config 0 interface 12 has no altsetting 0 [ 300.527365][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 300.550784][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.570722][ T9] usb 2-1: Product: syz [ 300.575188][ T9] usb 2-1: Manufacturer: syz [ 300.583460][ T9] usb 2-1: SerialNumber: syz [ 300.592814][ T9] usb 2-1: config 0 descriptor?? [ 300.745797][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.098022][ T6262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.113050][ T6262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.125376][ T6262] bond0 (unregistering): Released all slaves [ 301.213339][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2758'. [ 301.251950][ T6262] bond1 (unregistering): Released all slaves [ 301.378921][ T6262] tipc: Disabling bearer [ 301.403707][ T6262] tipc: Left network mode [ 301.539464][T12490] netlink: 'syz.2.2761': attribute type 10 has an invalid length. [ 301.576098][T12490] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 301.588239][T12489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.785634][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.802234][ T6262] hsr_slave_0: left promiscuous mode [ 301.810448][ T6262] hsr_slave_1: left promiscuous mode [ 301.820978][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.828621][ T6262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.839027][ T9] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 301.850073][ T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 301.857705][ T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 301.865927][ T9] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 301.875863][ T6262] veth1_macvtap: left promiscuous mode [ 301.879564][ T9] usb 2-1: USB disconnect, device number 33 [ 301.882228][ T6262] veth0_macvtap: left promiscuous mode [ 301.896623][ T6262] veth1_vlan: left promiscuous mode [ 301.902028][ T6262] veth0_vlan: left promiscuous mode [ 302.055618][ T5822] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 302.185277][ T5130] Bluetooth: hci2: command tx timeout [ 302.240596][ T5822] usb 5-1: config 0 has no interfaces? [ 302.252909][ T5822] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 302.274160][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.299705][ T5822] usb 5-1: Product: syz [ 302.303951][ T5822] usb 5-1: Manufacturer: syz [ 302.315560][ T5822] usb 5-1: SerialNumber: syz [ 302.323768][ T5822] usb 5-1: config 0 descriptor?? [ 302.421618][T12509] [ 302.424018][T12509] ===================================================== [ 302.430974][T12509] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 302.438461][T12509] 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 Not tainted [ 302.445569][T12509] ----------------------------------------------------- [ 302.452501][T12509] syz.2.2767/12509 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 302.460226][T12509] ffff88807f344210 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 302.468948][T12509] [ 302.468948][T12509] and this task is already holding: [ 302.476325][T12509] ffff888040300028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 302.486096][T12509] which would create a new lock dependency: [ 302.491978][T12509] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 302.500085][T12509] [ 302.500085][T12509] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 302.509526][T12509] (&client->buffer_lock){..-.}-{3:3} [ 302.509550][T12509] [ 302.509550][T12509] ... which became SOFTIRQ-irq-safe at: [ 302.522646][T12509] lock_acquire+0x120/0x360 [ 302.527239][T12509] _raw_spin_lock+0x2e/0x40 [ 302.531822][T12509] evdev_pass_values+0xb9/0xbd0 [ 302.536760][T12509] evdev_events+0x1e6/0x340 [ 302.541350][T12509] input_pass_values+0x285/0x890 [ 302.546379][T12509] input_event_dispose+0x3e5/0x6b0 [ 302.551574][T12509] input_event+0x8c/0xc0 [ 302.555902][T12509] hidinput_hid_event+0x132c/0x1c90 [ 302.561189][T12509] hid_process_event+0x4be/0x620 [ 302.566213][T12509] hid_report_raw_event+0xe91/0x16d0 [ 302.571590][T12509] hid_input_report+0x43e/0x520 [ 302.576560][T12509] hid_irq_in+0x47e/0x6d0 [ 302.580973][T12509] __usb_hcd_giveback_urb+0x417/0x690 [ 302.586443][T12509] dummy_timer+0x862/0x4550 [ 302.591041][T12509] __hrtimer_run_queues+0x529/0xc60 [ 302.596341][T12509] hrtimer_run_softirq+0x187/0x2b0 [ 302.601549][T12509] handle_softirqs+0x283/0x870 [ 302.606409][T12509] __irq_exit_rcu+0xca/0x1f0 [ 302.611094][T12509] irq_exit_rcu+0x9/0x30 [ 302.615434][T12509] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 302.621156][T12509] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 302.627239][T12509] __sanitizer_cov_trace_pc+0x5d/0x70 [ 302.632722][T12509] set_pte_range+0xc1/0x5a0 [ 302.637317][T12509] filemap_map_pages+0xf26/0x1740 [ 302.642420][T12509] __handle_mm_fault+0x34d8/0x5380 [ 302.647613][T12509] handle_mm_fault+0x2d5/0x7f0 [ 302.652488][T12509] do_user_addr_fault+0xa81/0x1390 [ 302.657691][T12509] exc_page_fault+0x68/0x110 [ 302.662365][T12509] asm_exc_page_fault+0x26/0x30 [ 302.667318][T12509] [ 302.667318][T12509] to a SOFTIRQ-irq-unsafe lock: [ 302.674330][T12509] (tasklist_lock){.+.+}-{3:3} [ 302.674356][T12509] [ 302.674356][T12509] ... which became SOFTIRQ-irq-unsafe at: [ 302.686981][T12509] ... [ 302.686988][T12509] lock_acquire+0x120/0x360 [ 302.694159][T12509] _raw_read_lock+0x36/0x50 [ 302.698741][T12509] __do_wait+0xde/0x740 [ 302.702982][T12509] do_wait+0x1f8/0x520 [ 302.707133][T12509] kernel_wait+0xab/0x170 [ 302.711544][T12509] call_usermodehelper_exec_work+0xbe/0x230 [ 302.717528][T12509] process_scheduled_works+0xadb/0x17a0 [ 302.723159][T12509] worker_thread+0x8a0/0xda0 [ 302.727837][T12509] kthread+0x70e/0x8a0 [ 302.731988][T12509] ret_from_fork+0x4b/0x80 [ 302.736486][T12509] ret_from_fork_asm+0x1a/0x30 [ 302.741338][T12509] [ 302.741338][T12509] other info that might help us debug this: [ 302.741338][T12509] [ 302.751571][T12509] Chain exists of: [ 302.751571][T12509] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 302.751571][T12509] [ 302.764705][T12509] Possible interrupt unsafe locking scenario: [ 302.764705][T12509] [ 302.773026][T12509] CPU0 CPU1 [ 302.778386][T12509] ---- ---- [ 302.783740][T12509] lock(tasklist_lock); [ 302.787982][T12509] local_irq_disable(); [ 302.794738][T12509] lock(&client->buffer_lock); [ 302.802110][T12509] lock(&new->fa_lock); [ 302.808875][T12509] [ 302.812324][T12509] lock(&client->buffer_lock); [ 302.817351][T12509] [ 302.817351][T12509] *** DEADLOCK *** [ 302.817351][T12509] [ 302.825490][T12509] 7 locks held by syz.2.2767/12509: [ 302.830681][T12509] #0: ffff8880292b6118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 302.839841][T12509] #1: ffff88801d797230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 302.849946][T12509] #2: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 302.859726][T12509] #3: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 302.869334][T12509] #4: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 302.878492][T12509] #5: ffff888040300028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 302.888684][T12509] #6: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 302.897743][T12509] [ 302.897743][T12509] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 302.908159][T12509] -> (&client->buffer_lock){..-.}-{3:3} { [ 302.913942][T12509] IN-SOFTIRQ-W at: [ 302.917958][T12509] lock_acquire+0x120/0x360 [ 302.924126][T12509] _raw_spin_lock+0x2e/0x40 [ 302.930301][T12509] evdev_pass_values+0xb9/0xbd0 [ 302.936812][T12509] evdev_events+0x1e6/0x340 [ 302.942971][T12509] input_pass_values+0x285/0x890 [ 302.949582][T12509] input_event_dispose+0x3e5/0x6b0 [ 302.956345][T12509] input_event+0x8c/0xc0 [ 302.962236][T12509] hidinput_hid_event+0x132c/0x1c90 [ 302.969256][T12509] hid_process_event+0x4be/0x620 [ 302.975846][T12509] hid_report_raw_event+0xe91/0x16d0 [ 302.982773][T12509] hid_input_report+0x43e/0x520 [ 302.989285][T12509] hid_irq_in+0x47e/0x6d0 [ 302.995266][T12509] __usb_hcd_giveback_urb+0x417/0x690 [ 303.002293][T12509] dummy_timer+0x862/0x4550 [ 303.008449][T12509] __hrtimer_run_queues+0x529/0xc60 [ 303.015303][T12509] hrtimer_run_softirq+0x187/0x2b0 [ 303.022071][T12509] handle_softirqs+0x283/0x870 [ 303.028494][T12509] __irq_exit_rcu+0xca/0x1f0 [ 303.034764][T12509] irq_exit_rcu+0x9/0x30 [ 303.040665][T12509] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 303.047949][T12509] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 303.055605][T12509] __sanitizer_cov_trace_pc+0x5d/0x70 [ 303.062624][T12509] set_pte_range+0xc1/0x5a0 [ 303.068789][T12509] filemap_map_pages+0xf26/0x1740 [ 303.075460][T12509] __handle_mm_fault+0x34d8/0x5380 [ 303.082220][T12509] handle_mm_fault+0x2d5/0x7f0 [ 303.088634][T12509] do_user_addr_fault+0xa81/0x1390 [ 303.095404][T12509] exc_page_fault+0x68/0x110 [ 303.101643][T12509] asm_exc_page_fault+0x26/0x30 [ 303.108156][T12509] INITIAL USE at: [ 303.112049][T12509] lock_acquire+0x120/0x360 [ 303.118118][T12509] _raw_spin_lock+0x2e/0x40 [ 303.124178][T12509] evdev_pass_values+0xb9/0xbd0 [ 303.130598][T12509] evdev_events+0x1e6/0x340 [ 303.136672][T12509] input_pass_values+0x285/0x890 [ 303.143183][T12509] input_event_dispose+0x330/0x6b0 [ 303.149853][T12509] input_inject_event+0x1fe/0x320 [ 303.156629][T12509] evdev_write+0x2fc/0x480 [ 303.162612][T12509] vfs_write+0x27b/0xa90 [ 303.168424][T12509] ksys_write+0x145/0x250 [ 303.174321][T12509] do_syscall_64+0xf6/0x210 [ 303.180383][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.187855][T12509] } [ 303.190350][T12509] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 303.198502][T12509] [ 303.198502][T12509] the dependencies between the lock to be acquired [ 303.198513][T12509] and SOFTIRQ-irq-unsafe lock: [ 303.212021][T12509] -> (tasklist_lock){.+.+}-{3:3} { [ 303.217326][T12509] HARDIRQ-ON-R at: [ 303.221478][T12509] lock_acquire+0x120/0x360 [ 303.227985][T12509] _raw_read_lock+0x36/0x50 [ 303.234490][T12509] __do_wait+0xde/0x740 [ 303.240644][T12509] do_wait+0x1f8/0x520 [ 303.246714][T12509] kernel_wait+0xab/0x170 [ 303.253131][T12509] call_usermodehelper_exec_work+0xbe/0x230 [ 303.261029][T12509] process_scheduled_works+0xadb/0x17a0 [ 303.268585][T12509] worker_thread+0x8a0/0xda0 [ 303.275187][T12509] kthread+0x70e/0x8a0 [ 303.281265][T12509] ret_from_fork+0x4b/0x80 [ 303.287766][T12509] ret_from_fork_asm+0x1a/0x30 [ 303.294535][T12509] SOFTIRQ-ON-R at: [ 303.298686][T12509] lock_acquire+0x120/0x360 [ 303.305221][T12509] _raw_read_lock+0x36/0x50 [ 303.311724][T12509] __do_wait+0xde/0x740 [ 303.317965][T12509] do_wait+0x1f8/0x520 [ 303.324030][T12509] kernel_wait+0xab/0x170 [ 303.330358][T12509] call_usermodehelper_exec_work+0xbe/0x230 [ 303.338255][T12509] process_scheduled_works+0xadb/0x17a0 [ 303.345816][T12509] worker_thread+0x8a0/0xda0 [ 303.352404][T12509] kthread+0x70e/0x8a0 [ 303.358466][T12509] ret_from_fork+0x4b/0x80 [ 303.364870][T12509] ret_from_fork_asm+0x1a/0x30 [ 303.371636][T12509] INITIAL USE at: [ 303.375735][T12509] lock_acquire+0x120/0x360 [ 303.382155][T12509] _raw_write_lock_irq+0xa2/0xf0 [ 303.388993][T12509] copy_process+0x21d5/0x3b80 [ 303.395589][T12509] kernel_clone+0x224/0x7f0 [ 303.402004][T12509] user_mode_thread+0xdd/0x140 [ 303.408687][T12509] rest_init+0x23/0x300 [ 303.414760][T12509] start_kernel+0x470/0x4f0 [ 303.421188][T12509] x86_64_start_reservations+0x2a/0x30 [ 303.428560][T12509] x86_64_start_kernel+0x66/0x70 [ 303.435412][T12509] common_startup_64+0x13e/0x147 [ 303.442266][T12509] INITIAL READ USE at: [ 303.446800][T12509] lock_acquire+0x120/0x360 [ 303.453651][T12509] _raw_read_lock+0x36/0x50 [ 303.460585][T12509] __do_wait+0xde/0x740 [ 303.467089][T12509] do_wait+0x1f8/0x520 [ 303.473501][T12509] kernel_wait+0xab/0x170 [ 303.480179][T12509] call_usermodehelper_exec_work+0xbe/0x230 [ 303.488435][T12509] process_scheduled_works+0xadb/0x17a0 [ 303.496337][T12509] worker_thread+0x8a0/0xda0 [ 303.503279][T12509] kthread+0x70e/0x8a0 [ 303.509693][T12509] ret_from_fork+0x4b/0x80 [ 303.516450][T12509] ret_from_fork_asm+0x1a/0x30 [ 303.523561][T12509] } [ 303.526234][T12509] ... key at: [] tasklist_lock+0x18/0x40 [ 303.534125][T12509] ... acquired at: [ 303.538115][T12509] lock_acquire+0x120/0x360 [ 303.542796][T12509] _raw_read_lock+0x36/0x50 [ 303.547470][T12509] send_sigurg+0x12b/0x420 [ 303.552060][T12509] sk_send_sigurg+0x6c/0x2e0 [ 303.556839][T12509] queue_oob+0x3d9/0x4e0 [ 303.561252][T12509] unix_stream_sendmsg+0xa41/0xb60 [ 303.566536][T12509] __sock_sendmsg+0x219/0x270 [ 303.571403][T12509] ____sys_sendmsg+0x52d/0x830 [ 303.576342][T12509] ___sys_sendmsg+0x21f/0x2a0 [ 303.581192][T12509] __sys_sendmmsg+0x227/0x430 [ 303.586044][T12509] __x64_sys_sendmmsg+0xa0/0xc0 [ 303.591066][T12509] do_syscall_64+0xf6/0x210 [ 303.595742][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.601810][T12509] [ 303.604130][T12509] -> (&f_owner->lock){....}-{3:3} { [ 303.609451][T12509] INITIAL USE at: [ 303.613427][T12509] lock_acquire+0x120/0x360 [ 303.619666][T12509] _raw_write_lock_irq+0xa2/0xf0 [ 303.626335][T12509] __f_setown+0x67/0x370 [ 303.632310][T12509] generic_setlease+0xd5d/0x1240 [ 303.639000][T12509] fcntl_setlease+0x3a2/0x4c0 [ 303.645417][T12509] do_fcntl+0x6a0/0x1910 [ 303.651405][T12509] __se_sys_fcntl+0xc8/0x150 [ 303.657731][T12509] do_syscall_64+0xf6/0x210 [ 303.663974][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.671602][T12509] INITIAL READ USE at: [ 303.676039][T12509] lock_acquire+0x120/0x360 [ 303.682713][T12509] _raw_read_lock_irqsave+0xaf/0x100 [ 303.690161][T12509] send_sigio+0x38/0x370 [ 303.696583][T12509] kill_fasync+0x24d/0x4d0 [ 303.703193][T12509] lease_break_callback+0x26/0x30 [ 303.710388][T12509] __break_lease+0x6a2/0x1620 [ 303.717268][T12509] do_dentry_open+0xd62/0x1970 [ 303.724199][T12509] vfs_open+0x3b/0x340 [ 303.730436][T12509] path_openat+0x2ee5/0x3830 [ 303.737212][T12509] do_filp_open+0x1fa/0x410 [ 303.743881][T12509] do_sys_openat2+0x121/0x1c0 [ 303.750751][T12509] __x64_sys_open+0x11e/0x150 [ 303.757612][T12509] do_syscall_64+0xf6/0x210 [ 303.764294][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.772367][T12509] } [ 303.774948][T12509] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 303.783882][T12509] ... acquired at: [ 303.787762][T12509] lock_acquire+0x120/0x360 [ 303.792445][T12509] _raw_read_lock_irqsave+0xaf/0x100 [ 303.797901][T12509] send_sigio+0x38/0x370 [ 303.802311][T12509] kill_fasync+0x24d/0x4d0 [ 303.806911][T12509] lease_break_callback+0x26/0x30 [ 303.812109][T12509] __break_lease+0x6a2/0x1620 [ 303.816959][T12509] do_dentry_open+0xd62/0x1970 [ 303.821889][T12509] vfs_open+0x3b/0x340 [ 303.826124][T12509] path_openat+0x2ee5/0x3830 [ 303.830881][T12509] do_filp_open+0x1fa/0x410 [ 303.835555][T12509] do_sys_openat2+0x121/0x1c0 [ 303.840399][T12509] __x64_sys_open+0x11e/0x150 [ 303.845247][T12509] do_syscall_64+0xf6/0x210 [ 303.849929][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.855987][T12509] [ 303.858304][T12509] -> (&new->fa_lock){....}-{3:3} { [ 303.863446][T12509] INITIAL USE at: [ 303.867367][T12509] lock_acquire+0x120/0x360 [ 303.873436][T12509] _raw_write_lock_irq+0xa2/0xf0 [ 303.879935][T12509] fasync_remove_entry+0xf1/0x1c0 [ 303.886523][T12509] sock_fasync+0x85/0xf0 [ 303.892330][T12509] __fput+0x89f/0xa70 [ 303.897873][T12509] task_work_run+0x1d1/0x260 [ 303.904021][T12509] resume_user_mode_work+0x5e/0x80 [ 303.910700][T12509] syscall_exit_to_user_mode+0x9a/0x120 [ 303.917809][T12509] do_syscall_64+0x103/0x210 [ 303.923964][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.931419][T12509] INITIAL READ USE at: [ 303.935743][T12509] lock_acquire+0x120/0x360 [ 303.942256][T12509] _raw_read_lock_irqsave+0xaf/0x100 [ 303.949570][T12509] kill_fasync+0x199/0x4d0 [ 303.956016][T12509] sock_wake_async+0x137/0x160 [ 303.962875][T12509] sock_def_readable+0x3bb/0x550 [ 303.969816][T12509] unix_dgram_sendmsg+0xe3e/0x17c0 [ 303.976955][T12509] __sock_sendmsg+0x219/0x270 [ 303.983629][T12509] ____sys_sendmsg+0x505/0x830 [ 303.990382][T12509] ___sys_sendmsg+0x21f/0x2a0 [ 303.997053][T12509] __x64_sys_sendmsg+0x19b/0x260 [ 304.004000][T12509] do_syscall_64+0xf6/0x210 [ 304.010510][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.018447][T12509] } [ 304.020948][T12509] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 304.029633][T12509] ... acquired at: [ 304.033439][T12509] lock_acquire+0x120/0x360 [ 304.038116][T12509] _raw_read_lock_irqsave+0xaf/0x100 [ 304.043580][T12509] kill_fasync+0x199/0x4d0 [ 304.048164][T12509] evdev_pass_values+0x627/0xbd0 [ 304.053274][T12509] evdev_events+0x1e6/0x340 [ 304.057950][T12509] input_pass_values+0x285/0x890 [ 304.063062][T12509] input_event_dispose+0x330/0x6b0 [ 304.068347][T12509] input_inject_event+0x1fe/0x320 [ 304.073631][T12509] evdev_write+0x2fc/0x480 [ 304.078220][T12509] vfs_write+0x27b/0xa90 [ 304.082627][T12509] ksys_write+0x145/0x250 [ 304.087122][T12509] do_syscall_64+0xf6/0x210 [ 304.091798][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.097866][T12509] [ 304.100183][T12509] [ 304.100183][T12509] stack backtrace: [ 304.106076][T12509] CPU: 1 UID: 0 PID: 12509 Comm: syz.2.2767 Not tainted 6.15.0-rc5-syzkaller-00032-g0d8d44db295c #0 PREEMPT(full) [ 304.106104][T12509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 304.106121][T12509] Call Trace: [ 304.106129][T12509] [ 304.106139][T12509] dump_stack_lvl+0x189/0x250 [ 304.106162][T12509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.106182][T12509] ? __pfx__printk+0x10/0x10 [ 304.106209][T12509] validate_chain+0x1f05/0x2140 [ 304.106242][T12509] __lock_acquire+0xaac/0xd20 [ 304.106262][T12509] ? kill_fasync+0x199/0x4d0 [ 304.106278][T12509] lock_acquire+0x120/0x360 [ 304.106296][T12509] ? kill_fasync+0x199/0x4d0 [ 304.106313][T12509] ? __lock_acquire+0xaac/0xd20 [ 304.106334][T12509] _raw_read_lock_irqsave+0xaf/0x100 [ 304.106349][T12509] ? kill_fasync+0x199/0x4d0 [ 304.106365][T12509] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 304.106378][T12509] ? do_raw_spin_lock+0x121/0x290 [ 304.106397][T12509] kill_fasync+0x199/0x4d0 [ 304.106412][T12509] ? kill_fasync+0x53/0x4d0 [ 304.106429][T12509] evdev_pass_values+0x627/0xbd0 [ 304.106452][T12509] ? evdev_pass_values+0x5e1/0xbd0 [ 304.106475][T12509] evdev_events+0x1e6/0x340 [ 304.106494][T12509] ? evdev_events+0x79/0x340 [ 304.106517][T12509] ? input_pass_values+0x8d/0x890 [ 304.106536][T12509] input_pass_values+0x285/0x890 [ 304.106577][T12509] ? input_handle_event+0x70c/0xf30 [ 304.106595][T12509] input_event_dispose+0x330/0x6b0 [ 304.106614][T12509] input_inject_event+0x1fe/0x320 [ 304.106631][T12509] ? input_inject_event+0xbc/0x320 [ 304.106649][T12509] evdev_write+0x2fc/0x480 [ 304.106674][T12509] ? __pfx_evdev_write+0x10/0x10 [ 304.106696][T12509] ? bpf_lsm_file_permission+0x9/0x20 [ 304.106714][T12509] ? security_file_permission+0x75/0x290 [ 304.106732][T12509] ? rw_verify_area+0x258/0x650 [ 304.106762][T12509] ? __pfx_evdev_write+0x10/0x10 [ 304.106784][T12509] vfs_write+0x27b/0xa90 [ 304.106806][T12509] ? __pfx_vfs_write+0x10/0x10 [ 304.106826][T12509] ? __fget_files+0x2a/0x420 [ 304.106849][T12509] ? __fget_files+0x2a/0x420 [ 304.106870][T12509] ? __fget_files+0x3a0/0x420 [ 304.106891][T12509] ? __fget_files+0x2a/0x420 [ 304.106916][T12509] ksys_write+0x145/0x250 [ 304.106935][T12509] ? rcu_is_watching+0x15/0xb0 [ 304.106956][T12509] ? __pfx_ksys_write+0x10/0x10 [ 304.106977][T12509] ? do_syscall_64+0xba/0x210 [ 304.106995][T12509] do_syscall_64+0xf6/0x210 [ 304.107012][T12509] ? clear_bhb_loop+0x45/0xa0 [ 304.107029][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.107043][T12509] RIP: 0033:0x7f98eab8e969 [ 304.107058][T12509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.107072][T12509] RSP: 002b:00007f98eb953038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 304.107088][T12509] RAX: ffffffffffffffda RBX: 00007f98eadb5fa0 RCX: 00007f98eab8e969 [ 304.107099][T12509] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 304.107109][T12509] RBP: 00007f98eac10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 304.107118][T12509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.107126][T12509] R13: 0000000000000000 R14: 00007f98eadb5fa0 R15: 00007fff23eb4838 [ 304.107144][T12509] [ 304.423343][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.438386][ T5130] Bluetooth: hci2: command tx timeout [ 304.794528][ T6262] team0 (unregistering): Port device team_slave_1 removed [ 304.863588][ T6262] team0 (unregistering): Port device team_slave_0 removed [ 305.463811][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.648687][ T6262] IPVS: stop unused estimator thread 0... [ 305.697306][ T9] usb 5-1: USB disconnect, device number 29 [ 305.985256][ T6262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.996776][ T6262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.046953][ T6262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.057431][ T6262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.107272][ T6262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.117733][ T6262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.172827][ T6262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.183481][ T6262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.243804][ T6262] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.307811][ T6262] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.357548][ T6262] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.432834][ T6262] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.502343][ T6262] bridge_slave_1: left allmulticast mode [ 306.503122][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.511070][ T6262] bridge_slave_1: left promiscuous mode [ 306.520785][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.530074][ T6262] bridge_slave_0: left allmulticast mode [ 306.536163][ T6262] bridge_slave_0: left promiscuous mode [ 306.541884][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.551145][ T6262] bridge_slave_1: left allmulticast mode [ 306.557007][ T6262] bridge_slave_1: left promiscuous mode [ 306.562705][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.571315][ T6262] bridge_slave_0: left allmulticast mode [ 306.577441][ T6262] bridge_slave_0: left promiscuous mode [ 306.583467][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.592263][ T6262] bridge_slave_1: left allmulticast mode [ 306.598222][ T6262] bridge_slave_1: left promiscuous mode [ 306.603991][ T6262] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.612046][ T6262] bridge_slave_0: left allmulticast mode [ 306.617738][ T6262] bridge_slave_0: left promiscuous mode [ 306.624128][ T6262] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.717235][ T6262] bond1 (unregistering): (slave ip6tnl1): Releasing backup interface [ 307.062632][ T6262] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 307.105175][ T6262] bond0 (unregistering): Released all slaves [ 307.190605][ T6262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.199588][ T6262] bond_slave_0: left promiscuous mode [ 307.206243][ T6262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.215200][ T6262] bond_slave_1: left promiscuous mode [ 307.220821][ T6262] bond0 (unregistering): Released all slaves [ 307.307390][ T6262] bond1 (unregistering): Released all slaves [ 307.319699][ T6262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.328547][ T6262] bond_slave_0: left promiscuous mode [ 307.335247][ T6262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.344387][ T6262] bond_slave_1: left promiscuous mode [ 307.350367][ T6262] bond0 (unregistering): Released all slaves [ 307.361052][ T6262] bond1 (unregistering): Released all slaves [ 307.443585][ T6262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.453734][ T6262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.463783][ T6262] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 307.474418][ T6262] bond0 (unregistering): Released all slaves [ 307.487114][ T6262] bond1 (unregistering): (slave bond2): Releasing backup interface [ 307.495364][ T6262] bond2 (unregistering): left promiscuous mode [ 307.501966][ T6262] bond1 (unregistering): Released all slaves [ 307.552809][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.600189][ T6262] bond2 (unregistering): Released all slaves [ 307.680938][ T6262] tipc: Disabling bearer [ 307.687394][ T6262] tipc: Left network mode [ 307.711189][ T6262] tipc: Disabling bearer [ 307.716719][ T6262] tipc: Left network mode [ 308.144202][ T6262] hsr_slave_0: left promiscuous mode [ 308.149817][ T6262] hsr_slave_1: left promiscuous mode [ 308.155656][ T6262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.166210][ T6262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.176153][ T6262] hsr_slave_0: left promiscuous mode [ 308.181783][ T6262] hsr_slave_1: left promiscuous mode [ 308.187507][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.194957][ T6262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.205863][ T6262] hsr_slave_0: left promiscuous mode [ 308.211504][ T6262] hsr_slave_1: left promiscuous mode [ 308.217208][ T6262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.224887][ T6262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.237445][ T6262] veth1_macvtap: left promiscuous mode [ 308.243067][ T6262] veth0_macvtap: left promiscuous mode [ 308.248589][ T6262] veth1_vlan: left promiscuous mode [ 308.253907][ T6262] veth0_vlan: left promiscuous mode [ 308.259702][ T6262] veth1_macvtap: left promiscuous mode [ 308.265356][ T6262] veth0_macvtap: left promiscuous mode [ 308.270972][ T6262] veth1_vlan: left promiscuous mode [ 308.276258][ T6262] veth0_vlan: left promiscuous mode [ 308.582080][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.693617][ T6262] team0 (unregistering): Port device team_slave_1 removed [ 308.725127][ T6262] team0 (unregistering): Port device team_slave_0 removed [ 309.271129][ T6262] team0 (unregistering): Port device team_slave_1 removed [ 309.294253][ T6262] team0 (unregistering): Port device team_slave_0 removed [ 309.621533][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.037324][ T6262] IPVS: stop unused estimator thread 0... [ 310.045074][ T6262] IPVS: stop unused estimator thread 0... [ 310.670989][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.700437][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available