last executing test programs: 15m8.9173711s ago: executing program 32 (id=12390): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000f80)={'ip6tnl0\x00', &(0x7f0000000f00)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 13m55.993247569s ago: executing program 33 (id=13629): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCSETSW2(r0, 0x8910, 0x0) 13m51.840834399s ago: executing program 34 (id=13683): capset(&(0x7f00000001c0)={0x19980330}, &(0x7f0000000340)={0x9, 0xfd9, 0x65, 0x4, 0x9, 0x4}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) 6m41.333651277s ago: executing program 5 (id=21169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000002295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x15, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) 6m41.195854437s ago: executing program 5 (id=21172): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 6m41.052609743s ago: executing program 5 (id=21176): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008000000000006001f"], 0x7c}}, 0x0) 6m40.821398911s ago: executing program 5 (id=21180): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f0000001200)='./file0/file0\x00', 0x0, 0x84000, 0x0) 6m40.633371601s ago: executing program 5 (id=21185): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x3, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) 6m40.342906118s ago: executing program 5 (id=21192): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x500, 0x10000}}}, 0x90) 6m40.115679649s ago: executing program 35 (id=21192): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x500, 0x10000}}}, 0x90) 6m10.38005256s ago: executing program 0 (id=21685): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x24000000, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r0, 0x8871b000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x937, @ipv4={'\x00', '\xff\xff', @local}, 0x7f}, 0x1c) 6m10.133411629s ago: executing program 0 (id=21689): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103}) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) 6m9.982458796s ago: executing program 0 (id=21694): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6m9.816049368s ago: executing program 0 (id=21699): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f0000001200)='./file0/file0\x00', 0x0, 0x84000, 0x0) 6m9.698845274s ago: executing program 0 (id=21702): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0xff80) 6m9.360551784s ago: executing program 0 (id=21706): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x1e, 0x0, [{0xeeee8000, 0xc8, &(0x7f0000000380)=""/223}, {0x8080000, 0x100f, &(0x7f0000002780)=""/4111}, {0x2, 0x8e, &(0x7f00000000c0)=""/142}, {0x1, 0xff4, &(0x7f0000001780)=""/4084}]}) close(r0) 6m9.173500354s ago: executing program 36 (id=21706): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x1e, 0x0, [{0xeeee8000, 0xc8, &(0x7f0000000380)=""/223}, {0x8080000, 0x100f, &(0x7f0000002780)=""/4111}, {0x2, 0x8e, &(0x7f00000000c0)=""/142}, {0x1, 0xff4, &(0x7f0000001780)=""/4084}]}) close(r0) 5m49.224661666s ago: executing program 6 (id=22022): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000280)="975a0bc5") 5m49.053917461s ago: executing program 6 (id=22023): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x34}}, 0x0) 5m47.833931351s ago: executing program 6 (id=22026): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x335, 0x20001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 5m47.46015993s ago: executing program 6 (id=22034): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f0000001200)='./file0/file0\x00', 0x0, 0x84000, 0x0) 5m47.331342852s ago: executing program 6 (id=22039): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x200000000000003b, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 5m47.032601339s ago: executing program 6 (id=22042): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000940)={0x4, 0x800002, 0x0, 0xbb, 0x1, "00120dd608f500003b2a000080c90a008000"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) 5m46.735149305s ago: executing program 37 (id=22042): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000940)={0x4, 0x800002, 0x0, 0xbb, 0x1, "00120dd608f500003b2a000080c90a008000"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) 5m14.295269896s ago: executing program 8 (id=22475): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1}) 5m14.175019793s ago: executing program 8 (id=22476): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000002140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf252100000008000300", @ANYRES32=r1, @ANYBLOB="24002d800500040001000000050004000100000005000100"], 0x40}, 0x1, 0x0, 0x0, 0x95}, 0x4804) 5m13.926480566s ago: executing program 8 (id=22479): setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) mlock(&(0x7f0000625000/0x4000)=nil, 0x4000) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040)) mlock(&(0x7f0000625000/0x4000)=nil, 0x4000) 5m13.808433506s ago: executing program 8 (id=22480): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000880)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10"], 0x10}, 0x0, 0xe3d08660d7cd4e04}) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) 5m13.657731512s ago: executing program 8 (id=22482): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) creat(&(0x7f00000005c0)='./file0\x00', 0xc9028ba210c11f8b) unlink(&(0x7f0000000540)='./file0\x00') 5m13.533141728s ago: executing program 8 (id=22486): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 4m57.248633296s ago: executing program 38 (id=22486): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect$printer(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="fb01"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 4m29.151449892s ago: executing program 1 (id=22973): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x13}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4m28.921614241s ago: executing program 1 (id=22978): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x30) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 4m28.643403851s ago: executing program 1 (id=22983): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18, 0x1, {0x10}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 4m28.337238488s ago: executing program 1 (id=22988): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x4) 4m28.209434225s ago: executing program 1 (id=22991): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000940)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000c00)={{}, {0x1, 0x2}, [], {0x4, 0x3}, [], {0x10, 0x2}, {0x20, 0x4}}, 0x24, 0x1) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4m27.771966439s ago: executing program 1 (id=22999): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000003b40)=ANY=[], 0xb34}, 0x1, 0x0, 0x0, 0x40010}, 0x20048000) 4m27.404772665s ago: executing program 39 (id=22999): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000003b40)=ANY=[], 0xb34}, 0x1, 0x0, 0x0, 0x40010}, 0x20048000) 3.899616932s ago: executing program 4 (id=26725): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}}, 0x0) 3.705987547s ago: executing program 4 (id=26727): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000000c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 2.586322291s ago: executing program 2 (id=26742): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) nanosleep(&(0x7f0000000340), 0x0) 2.516438539s ago: executing program 4 (id=26745): openat$random(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) io_setup(0x81, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000002340)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 2.405103985s ago: executing program 2 (id=26747): sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@delchain={0xb8, 0x65, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0xe, 0xa}, {0x6, 0x1}}, [@f_rsvp={{0x9}, {0x88, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @empty}, @TCA_RSVP_DST={0x8, 0x2, @empty}, @TCA_RSVP_ACT={0x74, 0x6, [@m_ife={0x70, 0x18, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x3, 0xfff, 0x7}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffff7, 0x80000001, 0x8, 0x7, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4824}, 0x400c050) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="38030f"], 0xffdd) 2.347996193s ago: executing program 4 (id=26749): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000055200010402038b1420104000001090238000100000000090400000371055900090582eb100000000102000905"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000001c0)=ANY=[]) 2.16027965s ago: executing program 2 (id=26753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000040)=@attr_other={0x0, 0x1, 0x80002, 0x0}) 1.901952946s ago: executing program 2 (id=26758): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = userfaultfd(0x1) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x10}) 1.692151283s ago: executing program 2 (id=26761): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x3, 0x8000000001, 0x3, 0x0, 0x0, 0x400, 0x0, 0x3b9ac9ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x5}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) 1.659963398s ago: executing program 9 (id=26762): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "402b100cfb480ae0ef70f1e513459a7a"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x5c}}, 0x0) 1.582441699s ago: executing program 7 (id=26763): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r0, &(0x7f0000001400)=""/4076, 0xfffffeea) 1.461106446s ago: executing program 2 (id=26764): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff08020301090212"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0xfffe, 0xa, 0x0, 0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x44dbb61b}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@private}}, 0xe4) sendto$inet6(r0, &(0x7f0000000080)="e9", 0x1, 0x40841, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.374984359s ago: executing program 9 (id=26765): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r0, 0x0, 0x4d) 1.245191343s ago: executing program 9 (id=26767): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) mmap(&(0x7f0000006000/0x4000)=nil, 0x4000, 0x680000f, 0x12, r1, 0x2000) 1.173111282s ago: executing program 3 (id=26768): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) 1.027117096s ago: executing program 3 (id=26769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) 1.002271759s ago: executing program 9 (id=26770): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000200)={0x60, 0x3, &(0x7f0000245000/0x2000)=nil, &(0x7f0000994000/0x2000)=nil, 0x100000000000004, 0x0, 0x0, 0x0, 0xc}) 859.053762ms ago: executing program 3 (id=26771): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0)={0x5, 0x0, [{0xf000, 0xee, &(0x7f0000000540)=""/238}, {0x100000, 0x9b, &(0x7f0000000640)=""/155}, {0x4, 0x8d, &(0x7f0000000700)=""/141}, {0x0, 0xfffffffffffffe3b, &(0x7f0000000240)}, {0xffff1000, 0xfd, &(0x7f00000008c0)=""/253}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000003c0)=0x1) 788.187697ms ago: executing program 9 (id=26772): io_setup(0x1, 0x0) r0 = openat$pidfd(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffb}, 0x0) 676.699383ms ago: executing program 3 (id=26773): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) 658.473124ms ago: executing program 9 (id=26774): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) 516.639987ms ago: executing program 7 (id=26775): ioperm(0x0, 0x4, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) keyctl$chown(0x4, 0x0, r1, r2) 478.444407ms ago: executing program 3 (id=26776): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x10000000000000, 0x800000000000, 0x0, 0x0, 0x0, 0xc, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x5]}}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x10, 0x8, "c25f7e0d775e40aee623452107249fe0bdbfce2fe240da8dce81a69b0edc7a60ad337212006a3e508b8040c7bc6e583cc41170a13349e2cfcc4b64bd4fbf41ee", "a5526c3b6a46c15c42022ee6cc29fd6294b85056a50f5fdd31c4e8602a620ddbe9c5e3eba358cda906ddec304859946ea27fb0b97bb826884c3d749834ad1e6c", "412d226bd7dc8ce5783126ae76e309616391f73ea9c19b4a27828e2d00195a1f", [0x10000, 0x1ff]}) 384.948577ms ago: executing program 7 (id=26777): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x2c, r1, 0x1, 0xffffffff, 0xa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='\x00'}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac01]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 271.792692ms ago: executing program 3 (id=26778): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000840)={0x0, 0x0, 0x6, "4f982237ba41"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 270.115881ms ago: executing program 7 (id=26779): r0 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, 0x0, 0x4}, 0x90) 180.355543ms ago: executing program 7 (id=26780): r0 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000080)=0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000810000029ffffff000000", 0x20000238}]) 140.499069ms ago: executing program 4 (id=26781): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x20010, r2, 0x5e394000) 53.363159ms ago: executing program 7 (id=26782): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 4 (id=26783): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000004c0)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) kernel console output (not intermixed with test programs): .216386][T13374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24723'. [ 1449.380640][T12804] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1449.508094][T12804] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1449.595438][T12804] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1449.884072][T12804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.980046][T12804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.994225][ T29] audit: type=1400 audit(2000005059.181:11446): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=13397 comm="syz.3.24732" daddr=fc00:: [ 1450.035022][T13402] sctp: [Deprecated]: syz.3.24732 (pid 13402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1450.035022][T13402] Use struct sctp_sack_info instead [ 1450.103531][T13400] wlan0 speed is unknown, defaulting to 1000 [ 1450.111383][T13400] wg1 speed is unknown, defaulting to 1000 [ 1450.159357][T11417] bridge0: port 1(bridge_slave_0) entered blocking state [ 1450.167874][T11417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1450.286278][T11417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1450.297603][T11417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.497355][T13410] /dev/nullb0: Can't open blockdev [ 1450.702722][ T5844] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1450.785016][T12804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1450.895458][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 1450.919759][ T5844] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1450.929956][ T5844] usb 4-1: config 0 has no interface number 0 [ 1451.017923][ T5844] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1451.067034][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.128691][ T5844] usb 4-1: Product: syz [ 1451.135965][ T5844] usb 4-1: Manufacturer: syz [ 1451.161795][ T5844] usb 4-1: SerialNumber: syz [ 1451.181065][ T5844] usb 4-1: config 0 descriptor?? [ 1451.207688][ T5844] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1451.426437][ T5844] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1451.447019][T12804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.452339][ T5844] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1451.907080][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1451.908297][ T5824] usb 4-1: USB disconnect, device number 14 [ 1451.957774][ T5824] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1451.993619][ T5824] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1452.009308][ T1059] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1452.028394][ T5824] quatech2 4-1:0.51: device disconnected [ 1452.030632][T12804] veth0_vlan: entered promiscuous mode [ 1452.072961][T12804] veth1_vlan: entered promiscuous mode [ 1452.157265][T12804] veth0_macvtap: entered promiscuous mode [ 1452.176899][ T1059] usb 3-1: Using ep0 maxpacket: 32 [ 1452.194539][T12804] veth1_macvtap: entered promiscuous mode [ 1452.214860][ T1059] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1452.249513][ T1059] usb 3-1: config 0 has no interface number 0 [ 1452.275658][ T1059] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1452.309429][T12804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.324163][ T1059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.334604][ T1059] usb 3-1: Product: syz [ 1452.341321][T12804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.352453][ T1059] usb 3-1: Manufacturer: syz [ 1452.359342][ T1059] usb 3-1: SerialNumber: syz [ 1452.364933][T12804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.379891][ T1059] usb 3-1: config 0 descriptor?? [ 1452.385072][T12804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.398177][ T1059] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1452.408634][T12804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.420346][T12804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.434400][T12804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1452.446890][T12804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.466022][T12804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1452.489818][T12804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.537552][T12804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.560962][T12804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.575540][T12804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.587689][T12804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.601858][T12804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.614826][T12804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1452.630635][T12804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1452.637100][ T1059] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1452.644287][T12804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1452.697325][ T29] audit: type=1326 audit(2000005061.706:11447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13480 comm="syz.9.24747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f0d8cde9 code=0x7fc00000 [ 1452.728787][ T1059] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1452.735297][T12804] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.771925][T12804] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.781987][T12804] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.792862][T12804] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.053737][ T9438] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.063721][ T9438] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.106383][ T5844] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1453.154436][ T9449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.162981][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1453.172939][ T9449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.173789][ T1059] usb 3-1: USB disconnect, device number 34 [ 1453.211910][ T1059] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1453.267966][ T1059] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1453.288854][ T5844] usb 10-1: Using ep0 maxpacket: 8 [ 1453.294891][ T1059] quatech2 3-1:0.51: device disconnected [ 1453.337259][ T5844] usb 10-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1453.369293][ T5844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.387147][ T5844] usb 10-1: Product: syz [ 1453.391465][ T5844] usb 10-1: Manufacturer: syz [ 1453.415456][ T5844] usb 10-1: SerialNumber: syz [ 1453.436106][ T5844] usb 10-1: config 0 descriptor?? [ 1453.675325][ T5844] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1454.104839][ T5844] gspca_sunplus: reg_w_riv err -71 [ 1454.117938][ T5844] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1454.142643][ T5844] usb 10-1: USB disconnect, device number 19 [ 1455.091673][ T29] audit: type=1400 audit(2000005063.951:11448): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=13618 comm="syz.9.24777" daddr=::ffff:172.20.20.0 [ 1455.343285][T29659] Bluetooth: hci5: sending frame failed (-49) [ 1455.361129][ T403] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1455.909200][T13657] Bluetooth: hci5: Frame reassembly failed (-84) [ 1455.933370][T11417] Bluetooth: hci5: Frame reassembly failed (-84) [ 1456.188996][T13674] vlan2: entered allmulticast mode [ 1456.207479][T13674] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1456.223288][T13674] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1456.533926][T13694] bridge0: port 3(vlan3) entered blocking state [ 1456.543642][T13694] bridge0: port 3(vlan3) entered disabled state [ 1456.554675][T13694] vlan3: entered allmulticast mode [ 1456.574313][T13694] vlan3: left allmulticast mode [ 1456.602515][ T5844] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1456.731038][T13703] overlay: filesystem on ./file1 is read-only [ 1456.785559][ T5844] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1456.814444][ T5844] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1456.837277][ T5844] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1456.850472][ T5844] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.877071][T13683] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1456.892224][ T5844] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1457.113239][T13726] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 1457.163306][T13726] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 1457.178866][T13726] overlayfs: conflicting lowerdir path [ 1457.199076][ T1059] usb 10-1: USB disconnect, device number 20 [ 1457.633893][ T29] audit: type=1400 audit(2000005066.336:11449): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=13767 comm="syz.7.24819" daddr=2001::1 [ 1458.099347][T29659] Bluetooth: hci5: command 0x1003 tx timeout [ 1458.110931][ T403] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1458.152878][ T5844] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1458.358626][ T5844] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.388741][ T5844] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.419997][ T5844] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1458.466306][ T5844] usb 10-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1458.495277][ T5844] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.527925][ T5844] usb 10-1: config 0 descriptor?? [ 1458.532624][T13795] block device autoloading is deprecated and will be removed. [ 1458.922480][ T5916] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1458.993288][ T5844] dragonrise 0003:0079:0011.0083: unknown main item tag 0x3 [ 1459.022033][ T5844] dragonrise 0003:0079:0011.0083: unknown main item tag 0x0 [ 1459.041282][ T5844] dragonrise 0003:0079:0011.0083: item fetching failed at offset 4/5 [ 1459.054844][ T5844] dragonrise 0003:0079:0011.0083: parse failed [ 1459.069902][ T5844] dragonrise 0003:0079:0011.0083: probe with driver dragonrise failed with error -22 [ 1459.106269][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.136715][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.166997][ T5916] usb 5-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00 [ 1459.211247][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.219593][ T4587] usb 10-1: USB disconnect, device number 21 [ 1459.254163][ T5916] usb 5-1: config 0 descriptor?? [ 1459.472314][T13844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24842'. [ 1459.712771][T13804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.739842][T13804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.776048][ T5916] wacom 0003:056A:0065.0084: unknown main item tag 0x7 [ 1459.786465][ T5916] wacom 0003:056A:0065.0084: unknown main item tag 0x4 [ 1459.796697][T13855] ALSA: mixer_oss: invalid OSS volume 'DIGTAL1' [ 1459.829777][ T5916] wacom 0003:056A:0065.0084: Unknown device_type for 'HID 056a:0065'. Assuming pen. [ 1459.874822][ T5916] wacom 0003:056A:0065.0084: hidraw0: USB HID v0.00 Device [HID 056a:0065] on usb-dummy_hcd.4-1/input0 [ 1459.925491][ T5916] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0065.0084/input/input209 [ 1460.019823][ T5916] usb 5-1: USB disconnect, device number 53 [ 1460.253822][T13890] netlink: 'syz.2.24851': attribute type 10 has an invalid length. [ 1460.288916][T13890] netlink: 55 bytes leftover after parsing attributes in process `syz.2.24851'. [ 1460.357745][ C1] vkms_vblank_simulate: vblank timer overrun [ 1460.696871][ T5916] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1460.900229][ T5916] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1460.910181][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.947005][ T5916] usb 4-1: config 0 descriptor?? [ 1460.959426][ T5916] cp210x 4-1:0.0: cp210x converter detected [ 1461.405630][ T5916] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1461.615628][T13947] wlan0 speed is unknown, defaulting to 1000 [ 1461.628324][ T5844] usb 4-1: USB disconnect, device number 15 [ 1461.651353][T13947] wg1 speed is unknown, defaulting to 1000 [ 1461.662892][ T5844] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1461.663443][T13955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1461.693666][ C1] vkms_vblank_simulate: vblank timer overrun [ 1461.694740][ T5844] cp210x 4-1:0.0: device disconnected [ 1462.627567][T14014] netlink: 'syz.9.24883': attribute type 10 has an invalid length. [ 1462.642913][ T5875] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1462.727319][T14014] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1462.862826][ T5875] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1462.898725][ T5875] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1462.976215][ T5875] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1463.027314][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.061469][T14000] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1463.158261][ T5875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1463.349259][ T4587] usb 4-1: USB disconnect, device number 16 [ 1463.562298][T14076] netlink: 6 bytes leftover after parsing attributes in process `syz.7.24896'. [ 1463.562934][ T29] audit: type=1326 audit(2000005071.883:11450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14077 comm="syz.9.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f0d8cde9 code=0x7ffc0000 [ 1463.574052][ T5875] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1463.599981][ C1] vkms_vblank_simulate: vblank timer overrun [ 1463.610881][ T29] audit: type=1326 audit(2000005071.883:11451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14077 comm="syz.9.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f0d8cde9 code=0x7ffc0000 [ 1463.646714][ T5824] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1463.659109][ T29] audit: type=1326 audit(2000005071.939:11452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14077 comm="syz.9.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9f0d8cde9 code=0x7ffc0000 [ 1463.684886][ T29] audit: type=1326 audit(2000005071.939:11453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14077 comm="syz.9.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f0d8cde9 code=0x7ffc0000 [ 1463.709752][ C1] vkms_vblank_simulate: vblank timer overrun [ 1463.776465][ T29] audit: type=1326 audit(2000005071.939:11454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14077 comm="syz.9.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f0d8cde9 code=0x7ffc0000 [ 1463.810204][ T29] audit: type=1326 audit(2000005071.967:11455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14077 comm="syz.9.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9f0d8cde9 code=0x7ffc0000 [ 1463.833985][T14082] ALSA: mixer_oss: invalid OSS volume 'P7{*;+$p' [ 1463.834122][ C1] vkms_vblank_simulate: vblank timer overrun [ 1463.841472][T14082] ALSA: mixer_oss: invalid OSS volume '' [ 1463.852327][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 1463.873090][ T5875] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1463.884623][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.893762][T14082] ALSA: mixer_oss: invalid OSS volume 'b$Kf7?]3sX' [ 1463.905139][ T5875] usb 3-1: config 0 descriptor?? [ 1463.913606][T14082] ALSA: mixer_oss: invalid OSS volume 'K׍?Fg' [ 1463.914140][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.936268][T14082] ALSA: mixer_oss: invalid OSS volume '.L!t8yW+$NJs' [ 1463.947202][ T29] audit: type=1326 audit(2000005072.024:11456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14077 comm="syz.9.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f0d8cde9 code=0x7ffc0000 [ 1463.989937][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1464.004051][ T5824] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1464.015187][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.024347][ T29] audit: type=1326 audit(2000005072.024:11457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14077 comm="syz.9.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f0d8cde9 code=0x7ffc0000 [ 1464.047125][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.056127][ T29] audit: type=1326 audit(2000005072.042:11458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14077 comm="syz.9.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fc9f0d8cde9 code=0x7ffc0000 [ 1464.078866][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.097883][ T5824] usb 5-1: config 0 descriptor?? [ 1464.184813][ T29] audit: type=1326 audit(2000005072.042:11459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14077 comm="syz.9.24897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9f0d8cde9 code=0x7ffc0000 [ 1464.209863][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.377278][ T5875] hid-led 0003:04D8:F372.0085: unknown main item tag 0x0 [ 1464.395970][ T5875] hid-led 0003:04D8:F372.0085: unknown main item tag 0x0 [ 1464.416469][ T5875] hid-led 0003:04D8:F372.0085: unknown main item tag 0x0 [ 1464.426748][ T5875] hid-led 0003:04D8:F372.0085: unknown main item tag 0x0 [ 1464.434157][ T5875] hid-led 0003:04D8:F372.0085: unknown main item tag 0x0 [ 1464.443558][ T5875] hid-led 0003:04D8:F372.0085: hidraw0: USB HID v1.01 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 1464.522493][ T5875] hid-led 0003:04D8:F372.0085: Greynut Luxafor initialized [ 1464.558631][T14124] netlink: 'syz.3.24907': attribute type 10 has an invalid length. [ 1464.572980][ T5824] elan 0003:04F3:0755.0086: failed to start in urb: -90 [ 1464.584303][ T5824] elan 0003:04F3:0755.0086: hidraw1: USB HID v0.00 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1464.691479][ T5824] usb 3-1: USB disconnect, device number 35 [ 1464.702764][ T9449] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 1464.722115][T11418] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 1464.736177][T11418] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 1464.759832][T11418] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 1464.779292][T11417] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 1464.824394][T11418] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 1464.854849][ T9449] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 1464.856869][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24911'. [ 1464.874302][ T1059] usb 5-1: USB disconnect, device number 54 [ 1464.897146][ T9449] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 1464.916498][T11418] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 1464.937654][ T9438] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 1464.959116][T11418] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 1464.985016][ T9449] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 1464.996315][ T9449] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 1465.017113][ T9473] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 1465.046252][ T9473] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 1465.072720][T11417] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 1465.082482][ T9449] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 1465.093495][T11417] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 1465.177085][T14190] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1465.183971][T14190] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1465.194627][T14190] vhci_hcd vhci_hcd.0: Device attached [ 1465.241745][T14191] vhci_hcd: connection closed [ 1465.243099][ T9449] vhci_hcd: stop threads [ 1465.262018][ T9449] vhci_hcd: release socket [ 1465.266858][ T9449] vhci_hcd: disconnect device [ 1465.369122][ T9122] wlan1: Trigger new scan to find an IBSS to join [ 1465.715767][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.24925'. [ 1466.125383][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24933'. [ 1466.141854][T14230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24933'. [ 1466.189414][T14231] mkiss: ax0: crc mode is auto. [ 1466.677109][T14258] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1467.475534][ T4587] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1467.485867][ T5875] kernel read not supported for file /dsp (pid: 5875 comm: kworker/0:3) [ 1467.497732][ T5824] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1467.659394][ T4587] usb 10-1: Using ep0 maxpacket: 16 [ 1467.667484][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 1467.674731][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24957'. [ 1467.685502][ T4587] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 18273, setting to 1024 [ 1467.685538][ T4587] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1467.685567][ T4587] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1467.685589][ T4587] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1467.699958][ T4587] usb 10-1: config 0 descriptor?? [ 1467.734784][T14290] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1467.749975][ T5824] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1467.775313][ T5824] usb 5-1: config 0 has no interface number 0 [ 1467.781948][ T5824] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1467.823690][ T5824] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1467.851119][ T5824] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1467.870627][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.881176][ T5824] usb 5-1: Product: syz [ 1467.885523][ T5824] usb 5-1: Manufacturer: syz [ 1467.902436][ T5824] usb 5-1: SerialNumber: syz [ 1467.929210][ T5824] usb 5-1: config 0 descriptor?? [ 1467.977658][T14295] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1467.985871][T14295] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1468.166583][T14328] netlink: 32 bytes leftover after parsing attributes in process `syz.2.24962'. [ 1468.245383][ T4587] cougar 0003:060B:500A.0087: usage count exceeds max: fixing up report descriptor [ 1468.245442][T14295] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1468.278245][ T4587] cougar 0003:060B:500A.0087: unexpected long global item [ 1468.296136][T14295] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1468.297893][ T4587] cougar 0003:060B:500A.0087: parse failed [ 1468.340735][ T4587] cougar 0003:060B:500A.0087: probe with driver cougar failed with error -22 [ 1468.498195][ T1059] usb 10-1: USB disconnect, device number 22 [ 1468.554461][T11417] wlan1: Trigger new scan to find an IBSS to join [ 1469.013426][ T5824] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1469.026184][ T5824] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1469.037829][ T5824] asix 5-1:0.251: probe with driver asix failed with error -71 [ 1469.058482][ T5824] usb 5-1: USB disconnect, device number 55 [ 1469.171379][T14378] netlink: 'syz.3.24976': attribute type 1 has an invalid length. [ 1470.287434][T14427] input: syz1 as /devices/virtual/input/input212 [ 1470.297049][ T4587] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1470.495495][ T4587] usb 5-1: config 0 interface 0 altsetting 190 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.525232][ T4587] usb 5-1: config 0 interface 0 altsetting 190 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1470.559104][T14441] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 1470.569329][ T4587] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1470.586050][ T4587] usb 5-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 1470.595446][T14441] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 1470.616993][ T4587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.644671][ T4587] usb 5-1: config 0 descriptor?? [ 1471.056311][ T5879] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1471.121413][ T4587] wacom 0003:056A:00E3.0088: item fetching failed at offset 4/7 [ 1471.163990][ T4587] wacom 0003:056A:00E3.0088: parse failed [ 1471.169995][ T4587] wacom 0003:056A:00E3.0088: probe with driver wacom failed with error -22 [ 1471.248260][ T5879] usb 10-1: Using ep0 maxpacket: 32 [ 1471.260960][ T5879] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1471.271422][ T5879] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1471.294189][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.312332][ T5879] usb 10-1: Product: syz [ 1471.328584][ T5879] usb 10-1: Manufacturer: syz [ 1471.333368][ T5879] usb 10-1: SerialNumber: syz [ 1471.348960][ T5824] usb 5-1: USB disconnect, device number 56 [ 1471.362651][ T5879] usb 10-1: config 0 descriptor?? [ 1471.795403][T11417] wlan1: Trigger new scan to find an IBSS to join [ 1471.827665][ T5879] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 1472.258757][ T5879] gs_usb 10-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1472.273789][ T5879] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -71 [ 1472.305002][ T5879] usb 10-1: USB disconnect, device number 23 [ 1472.783087][T14547] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.25031'. [ 1472.818569][ T9122] wlan1: Creating new IBSS network, BSSID 7e:3b:82:ee:97:3c [ 1472.953396][T14552] netlink: 24 bytes leftover after parsing attributes in process `syz.9.25036'. [ 1473.288250][ T5879] kernel write not supported for file /sequencer (pid: 5879 comm: kworker/0:6) [ 1474.257406][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1474.257426][ T29] audit: type=1400 audit(2000005337.874:11463): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=14608 comm="syz.9.25057" daddr=::ffff:172.20.20.170 [ 1475.229481][ T29] audit: type=1400 audit(2000005338.791:11464): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=14651 comm="syz.3.25075" daddr=fc01:: [ 1475.567531][ T1059] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1475.600449][ T5824] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1475.728141][ T1059] usb 10-1: Using ep0 maxpacket: 16 [ 1475.753186][ T1059] usb 10-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1475.764476][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 1475.776671][ T5824] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1475.792262][ T1059] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.802950][ T5824] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1475.811361][ T5824] usb 3-1: config 0 has no interface number 0 [ 1475.824229][ T1059] usb 10-1: Product: syz [ 1475.828555][ T1059] usb 10-1: Manufacturer: syz [ 1475.845713][ T1059] usb 10-1: SerialNumber: syz [ 1475.851798][ T5824] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1475.878203][ T1059] usb 10-1: config 0 descriptor?? [ 1475.885769][ T1059] ssu100 10-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1475.906956][ T5824] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1475.931292][ T5824] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1475.963396][ T5824] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1475.984757][ T1204] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1475.993728][ T5824] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1476.015206][ T5824] usb 3-1: Product: syz [ 1476.039002][ T5824] usb 3-1: config 0 descriptor?? [ 1476.046695][T14661] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1476.145605][ T1204] usb 5-1: Using ep0 maxpacket: 8 [ 1476.160035][ T1204] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1476.188236][ T1204] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.197250][ T1204] usb 5-1: Product: syz [ 1476.220299][ T1204] usb 5-1: Manufacturer: syz [ 1476.230718][ T1204] usb 5-1: SerialNumber: syz [ 1476.243894][ T1204] usb 5-1: config 0 descriptor?? [ 1476.265008][ T1204] gspca_main: se401-2.14.0 probing 047d:5003 [ 1476.734448][ T5824] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input213 [ 1476.759431][ T1059] ssu100 10-1:0.0: probe with driver ssu100 failed with error -71 [ 1476.797933][ T1059] usb 10-1: USB disconnect, device number 24 [ 1476.919934][ T1204] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input214 [ 1476.976279][ T5879] usb 3-1: USB disconnect, device number 36 [ 1476.976358][ C1] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1477.150007][ T4587] usb 5-1: USB disconnect, device number 57 [ 1477.768214][T14760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25103'. [ 1478.079729][ T5879] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1478.250752][ T5879] usb 5-1: Using ep0 maxpacket: 16 [ 1478.268211][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1478.304532][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1478.316731][T14784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25109'. [ 1478.331534][ T5879] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1478.364444][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.393421][ T5879] usb 5-1: config 0 descriptor?? [ 1478.439176][T14792] netlink: 'syz.9.25111': attribute type 1 has an invalid length. [ 1478.858503][ T5879] playstation 0003:054C:05C4.0089: unknown main item tag 0x0 [ 1478.873200][ T5879] playstation 0003:054C:05C4.0089: unknown main item tag 0x0 [ 1478.891320][ T5879] playstation 0003:054C:05C4.0089: unknown main item tag 0x0 [ 1478.903702][ T5879] playstation 0003:054C:05C4.0089: unknown main item tag 0x0 [ 1478.918528][ T5879] playstation 0003:054C:05C4.0089: unknown main item tag 0x0 [ 1478.934386][ T5879] playstation 0003:054C:05C4.0089: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 1479.078331][ T5879] playstation 0003:054C:05C4.0089: Invalid byte count transferred, expected 16 got 0 [ 1479.105833][ T5879] playstation 0003:054C:05C4.0089: Failed to retrieve DualShock4 pairing info: -22 [ 1479.119142][ T5879] playstation 0003:054C:05C4.0089: Failed to get MAC address from DualShock4 [ 1479.148913][ T5879] playstation 0003:054C:05C4.0089: Failed to create dualshock4. [ 1479.176677][ T5879] playstation 0003:054C:05C4.0089: probe with driver playstation failed with error -22 [ 1479.329533][ T5824] usb 5-1: USB disconnect, device number 58 [ 1479.397443][ T1059] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1479.588710][ T1059] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1479.618193][ T1059] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1479.635274][ T1059] usb 10-1: can't read configurations, error -71 [ 1480.076660][T14873] netlink: 'syz.3.25136': attribute type 12 has an invalid length. [ 1480.261734][T14876] wlan0 speed is unknown, defaulting to 1000 [ 1480.287933][T14876] wg1 speed is unknown, defaulting to 1000 [ 1480.347566][T14890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.25142'. [ 1481.012511][ T5824] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1481.201732][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 1481.226886][ T5824] usb 5-1: config 0 has no interfaces? [ 1481.266134][ T5824] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 7.06 [ 1481.275264][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1481.309470][ T5824] usb 5-1: Product: syz [ 1481.313712][ T5824] usb 5-1: SerialNumber: syz [ 1481.341835][ T5824] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1481.348426][ T5824] r8152-cfgselector 5-1: config 0 descriptor?? [ 1481.583569][T14961] ALSA: mixer_oss: invalid OSS volume 'P7{*;+$p' [ 1481.603855][T14961] ALSA: mixer_oss: invalid OSS volume '' [ 1481.618882][T14961] ALSA: mixer_oss: invalid OSS volume 'b$Kf7?]3sX' [ 1481.637257][T14961] ALSA: mixer_oss: invalid OSS volume 'K׍?Fg' [ 1481.641263][T14924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1481.672040][T14961] ALSA: mixer_oss: invalid OSS volume '.L!t8yW+$NJs' [ 1481.683375][T14924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1481.726298][ T5824] r8152-cfgselector 5-1: USB disconnect, device number 59 [ 1482.142262][T29659] Bluetooth: hci4: command tx timeout [ 1484.367135][T29659] Bluetooth: hci4: command 0x0405 tx timeout [ 1484.957035][ T5824] kernel write not supported for file /snd/seq (pid: 5824 comm: kworker/1:3) [ 1485.118241][ T29] audit: type=1400 audit(2000005348.042:11465): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=15086 comm="syz.4.25210" dest=2 [ 1485.123807][T15089] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25212'. [ 1485.413729][ T5875] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1485.584729][ T5875] usb 10-1: Using ep0 maxpacket: 32 [ 1485.596306][ T5875] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1485.612896][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.624157][ T5875] usb 10-1: config 0 descriptor?? [ 1485.632757][ T5875] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1486.146790][ T5824] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1486.335858][ T5824] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.347402][ T5824] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1486.371062][ T5824] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1486.386656][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1486.406176][ T5824] usb 4-1: SerialNumber: syz [ 1486.513395][ T5875] gspca_nw80x: reg_r err -71 [ 1486.527806][ T5875] nw80x 10-1:0.0: probe with driver nw80x failed with error -71 [ 1486.549235][ T5875] usb 10-1: USB disconnect, device number 27 [ 1486.675293][ T5824] usb 4-1: 0:2 : does not exist [ 1486.718389][ T5824] usb 4-1: USB disconnect, device number 17 [ 1486.836186][ T403] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 1487.385266][ T5879] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1487.586939][ T5879] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1487.605366][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.625565][ T5879] usb 3-1: Product: syz [ 1487.633808][ T5879] usb 3-1: Manufacturer: syz [ 1487.655481][ T5879] usb 3-1: SerialNumber: syz [ 1487.672361][ T5879] usb 3-1: config 0 descriptor?? [ 1487.943254][ T5824] usb 3-1: USB disconnect, device number 37 [ 1488.086715][ T1059] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1488.248342][ T1059] usb 4-1: Using ep0 maxpacket: 16 [ 1488.259540][ T1059] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1488.273196][ T1059] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1488.290926][ T1059] usb 4-1: New USB device found, idVendor=05ac, idProduct=0304, bcdDevice= 0.00 [ 1488.322028][ T1059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.334454][ T1059] usb 4-1: config 0 descriptor?? [ 1488.609163][T15252] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.630850][T15252] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.641916][T15252] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.655338][T15252] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.666979][T15252] geneve2: entered promiscuous mode [ 1488.672883][T15252] geneve2: entered allmulticast mode [ 1488.696945][T15252] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.715188][T15252] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.735145][T15252] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.755326][T15252] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.798693][ T1059] apple 0003:05AC:0304.008A: unexpected long global item [ 1488.813976][ T1059] apple 0003:05AC:0304.008A: parse failed [ 1488.830339][ T1059] apple 0003:05AC:0304.008A: probe with driver apple failed with error -22 [ 1488.877111][ T29] audit: type=1400 audit(2000005351.559:11466): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=15260 comm="syz.2.25258" daddr=2001:: dest=20001 [ 1488.906128][ T29] audit: type=1400 audit(2000005351.559:11467): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=15260 comm="syz.2.25258" daddr=2001:: [ 1489.022686][ T5879] usb 4-1: USB disconnect, device number 18 [ 1489.232722][T15288] netlink: 28 bytes leftover after parsing attributes in process `syz.2.25265'. [ 1489.594505][ T5875] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1489.763055][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25276'. [ 1489.775667][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 1489.782858][T15314] vlan0: entered promiscuous mode [ 1489.790453][T15314] vlan0: entered allmulticast mode [ 1489.799366][ T5875] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.824973][ T5875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1489.855525][ T5875] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1489.867586][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.877095][ T5875] usb 3-1: Product: syz [ 1489.881608][ T5875] usb 3-1: Manufacturer: syz [ 1489.886892][ T5875] usb 3-1: SerialNumber: syz [ 1490.136042][ T5875] usb 3-1: 0:2 : does not exist [ 1490.151176][T15325] nbd: nbd4 already in use [ 1490.162221][ T5875] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1490.210299][ T5875] usb 3-1: USB disconnect, device number 38 [ 1490.443750][ T5844] hid-generic 0000:0003:0000.008B: unknown main item tag 0x0 [ 1490.458614][ T5844] hid-generic 0000:0003:0000.008B: unknown main item tag 0x0 [ 1490.492786][ T5844] hid-generic 0000:0003:0000.008B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1491.484783][T15393] wlan0 speed is unknown, defaulting to 1000 [ 1491.511713][T15393] wg1 speed is unknown, defaulting to 1000 [ 1491.938483][ T29] audit: type=1400 audit(2000005354.422:11468): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=15424 comm="syz.3.25308" daddr=fc01::1 dest=20004 [ 1492.318449][ T29] audit: type=1400 audit(2000005354.777:11469): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=15450 comm="syz.4.25313" daddr=fc02::1 [ 1492.591305][T15458] kAFS: unable to lookup cell '(,/M' [ 1492.609356][T15459] netlink: 160 bytes leftover after parsing attributes in process `syz.2.25316'. [ 1492.736328][ C1] vkms_vblank_simulate: vblank timer overrun [ 1494.511622][ T5824] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1494.543785][ T5844] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1494.683943][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1494.697604][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.709424][ T5824] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1494.719564][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.727455][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1494.740655][ T5824] usb 10-1: config 0 descriptor?? [ 1494.749601][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1494.772333][ T5844] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1494.789581][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.814948][ T5844] usb 3-1: config 0 descriptor?? [ 1495.269167][ T5844] megaworld 0003:07B5:0312.008D: item fetching failed at offset 0/5 [ 1495.292830][ T5844] megaworld 0003:07B5:0312.008D: parse failed [ 1495.300512][ T5844] megaworld 0003:07B5:0312.008D: probe with driver megaworld failed with error -22 [ 1495.400438][ T5824] hid-led 0003:27B8:01ED.008C: probe with driver hid-led failed with error -71 [ 1495.441967][ T5824] usb 10-1: USB disconnect, device number 28 [ 1495.499232][ T5879] usb 3-1: USB disconnect, device number 39 [ 1495.655248][ T5844] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1495.839805][ T5844] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1495.854305][ T5844] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1495.862419][ T5844] usb 5-1: can't read configurations, error -71 [ 1496.332632][ T29] audit: type=1400 audit(2000005358.537:11470): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=15592 comm="syz.9.25357" daddr=fc01:: [ 1497.323885][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.9.25379'. [ 1497.362509][T15648] netlink: 47 bytes leftover after parsing attributes in process `syz.3.25381'. [ 1497.913116][ T5844] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1498.138496][ T5844] usb 5-1: Using ep0 maxpacket: 8 [ 1498.169548][ T5844] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1498.188797][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.223199][ T5844] usb 5-1: Product: syz [ 1498.227503][ T5844] usb 5-1: Manufacturer: syz [ 1498.256407][ T5844] usb 5-1: SerialNumber: syz [ 1498.275593][ T5844] usb 5-1: config 0 descriptor?? [ 1498.310113][ T5844] gspca_main: se401-2.14.0 probing 047d:5003 [ 1498.724167][ T5844] gspca_se401: ExtraFeatures: 255 [ 1498.729266][ T5844] gspca_se401: Too many frame sizes [ 1498.954391][ T5844] usb 5-1: USB disconnect, device number 62 [ 1499.771389][ T29] audit: type=1326 audit(2000005361.746:11471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.3.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1499.846236][ T29] audit: type=1326 audit(2000005361.755:11472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.3.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1499.921429][ T29] audit: type=1326 audit(2000005361.755:11473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.3.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1500.014938][ T29] audit: type=1326 audit(2000005361.755:11474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.3.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1500.092853][ T29] audit: type=1326 audit(2000005361.755:11475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.3.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1500.178203][ T29] audit: type=1326 audit(2000005361.802:11476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.3.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1500.225335][ T29] audit: type=1326 audit(2000005361.849:11477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.3.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1500.284915][ T29] audit: type=1326 audit(2000005361.849:11478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.3.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69c3583da7 code=0x7ffc0000 [ 1500.376762][ T29] audit: type=1326 audit(2000005361.849:11479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.3.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f69c3528fb9 code=0x7ffc0000 [ 1500.456074][ T29] audit: type=1326 audit(2000005361.849:11480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15728 comm="syz.3.25409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69c3583da7 code=0x7ffc0000 [ 1500.645857][T15762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25423'. [ 1501.338184][T15799] netlink: 'syz.3.25438': attribute type 18 has an invalid length. [ 1501.902609][ T5844] kernel write not supported for file /sg0 (pid: 5844 comm: kworker/0:2) [ 1501.996666][T15820] syz.7.25447 (15820): drop_caches: 2 [ 1502.525081][T15838] input: syz0 as /devices/virtual/input/input216 [ 1504.034236][ T5875] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1504.208046][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 1504.236942][ T5875] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1504.268108][ T5875] usb 5-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1504.301096][T15916] loop6: detected capacity change from 0 to 524287999 [ 1504.329647][ T5875] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1504.362103][ T5875] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1504.396247][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1504.423935][ T5875] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1504.474778][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.507000][ T5875] usb 5-1: Product: syz [ 1504.512764][ T5875] usb 5-1: Manufacturer: syz [ 1504.526259][ T5875] usb 5-1: SerialNumber: syz [ 1504.544025][ T5875] usb 5-1: config 0 descriptor?? [ 1504.551730][T15894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1504.797092][T15894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1504.821137][ T5875] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input217 [ 1505.076399][ T5824] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1505.087072][ T1204] usb 5-1: USB disconnect, device number 63 [ 1505.117155][ T1059] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1505.132507][T15967] netlink: 20 bytes leftover after parsing attributes in process `syz.7.25504'. [ 1505.246930][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.276948][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.289110][ T1059] usb 4-1: Using ep0 maxpacket: 32 [ 1505.312689][ T5824] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1505.328937][ T1059] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.343233][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.353060][ T1059] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.365322][ T1059] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1505.376699][ T5824] usb 10-1: config 0 descriptor?? [ 1505.382491][ T1059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.401864][ T1059] hub 4-1:4.0: USB hub found [ 1505.489469][T15982] input: syz0 as /devices/virtual/input/input218 [ 1505.624489][ T1059] hub 4-1:4.0: 8 ports detected [ 1505.634334][ T1059] hub 4-1:4.0: insufficient power available to use all downstream ports [ 1505.653218][T15992] tmpfs: Unexpected value for 'usrquota' [ 1505.849137][ T1059] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 1505.857583][ T1059] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 1505.898780][ T1059] usb 4-1: USB disconnect, device number 19 [ 1506.261099][ T5824] hid-led 0003:0FC5:B080.008E: probe with driver hid-led failed with error -71 [ 1506.289715][ T5824] usb 10-1: USB disconnect, device number 29 [ 1506.298080][ T1204] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1506.463563][ T1204] usb 3-1: Using ep0 maxpacket: 16 [ 1506.472254][ T1204] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1506.486624][ T1204] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1506.502396][ T1204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1506.516227][ T1204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1506.530825][ T1204] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1506.567515][ T1204] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1506.577646][ T1204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.586083][ T1204] usb 3-1: Product: syz [ 1506.590523][ T1204] usb 3-1: Manufacturer: syz [ 1506.599895][ T1204] usb 3-1: SerialNumber: syz [ 1506.609162][ T1204] usb 3-1: config 0 descriptor?? [ 1506.905920][ T1204] appledisplay 3-1:0.0: Error while getting initial brightness: -71 [ 1506.945629][ T1204] appledisplay 3-1:0.0: probe with driver appledisplay failed with error -71 [ 1506.967480][ T1204] usb 3-1: USB disconnect, device number 40 [ 1507.361210][T16074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.25531'. [ 1507.896817][T16099] netlink: 10 bytes leftover after parsing attributes in process `syz.4.25542'. [ 1508.968907][T16143] wlan0 speed is unknown, defaulting to 1000 [ 1508.980154][T16143] wg1 speed is unknown, defaulting to 1000 [ 1509.804118][T16201] netlink: 128 bytes leftover after parsing attributes in process `syz.9.25571'. [ 1509.865371][ T5875] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1510.046978][ T5875] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1510.068631][ T5875] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1510.108564][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.166918][ T5875] usb 5-1: config 0 descriptor?? [ 1511.082506][ T5875] video4linux radio48: keene_cmd_main failed (-71) [ 1511.116477][ T5875] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 1511.174329][ T5875] usb 5-1: USB disconnect, device number 64 [ 1511.289748][T16253] ip6tnl1: entered promiscuous mode [ 1511.319108][T16253] ip6tnl1: entered allmulticast mode [ 1511.756819][ T1204] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1511.952006][ T1204] usb 3-1: Using ep0 maxpacket: 16 [ 1511.969921][ T1204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.991327][ T1204] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.005332][T16275] misc userio: Begin command sent, but we're already running [ 1512.046158][ T1204] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1512.068535][T16280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25596'. [ 1512.108490][ T1204] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1512.142439][ T1204] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.195117][ T1204] usb 3-1: config 0 descriptor?? [ 1512.645556][ T1204] microsoft 0003:045E:07DA.008F: ignoring exceeding usage max [ 1512.710652][ T1204] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.008F/input/input221 [ 1512.766399][ T1204] microsoft 0003:045E:07DA.008F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1512.822488][T16300] UBIFS error (pid: 16300): cannot open "/dev/loop4", error -22 [ 1512.885601][ T2801] usb 3-1: USB disconnect, device number 41 [ 1513.570146][T16335] netlink: 'syz.2.25610': attribute type 13 has an invalid length. [ 1513.706311][T16335] gretap0: refused to change device tx_queue_len [ 1513.736277][T16335] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1514.120809][T16342] tap0: tun_chr_ioctl cmd 2148553947 [ 1514.995354][ T1204] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1515.001533][T16386] wlan0 speed is unknown, defaulting to 1000 [ 1515.048814][T16386] wg1 speed is unknown, defaulting to 1000 [ 1515.155888][ T1204] usb 10-1: Using ep0 maxpacket: 32 [ 1515.168245][ T1204] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.187687][ T1204] usb 10-1: config 0 has no interfaces? [ 1515.204431][ T1204] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1515.226147][ T1204] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.253606][ T1204] usb 10-1: config 0 descriptor?? [ 1515.305515][ T2801] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1515.476375][ T2801] usb 4-1: Using ep0 maxpacket: 32 [ 1515.485361][ T2801] usb 4-1: New USB device found, idVendor=0cde, idProduct=0023, bcdDevice=21.32 [ 1515.508541][ T2801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.516656][ T2801] usb 4-1: Product: syz [ 1515.530163][ T2801] usb 4-1: Manufacturer: syz [ 1515.535039][ T2801] usb 4-1: SerialNumber: syz [ 1515.547805][ T2801] usb 4-1: config 0 descriptor?? [ 1515.585682][ T1204] usb 10-1: USB disconnect, device number 30 [ 1516.149842][ T1059] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1516.320798][ T1059] usb 5-1: Using ep0 maxpacket: 16 [ 1516.332917][ T1059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1516.353767][T16463] netlink: 'syz.7.25644': attribute type 13 has an invalid length. [ 1516.361841][ T1059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1516.380407][ T1059] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1516.406743][ T1059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.423075][T16463] gretap0: refused to change device tx_queue_len [ 1516.432393][T16463] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1516.449792][ T1059] usb 5-1: config 0 descriptor?? [ 1516.460074][ T2801] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 1516.468853][ T2801] usb 4-1: device reset changed ep0 maxpacket size! [ 1516.487062][ T2801] usb 4-1: USB disconnect, device number 20 [ 1516.585219][T16478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1516.640740][ T5844] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1516.642074][ T2801] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1516.801821][ T5844] usb 10-1: Using ep0 maxpacket: 16 [ 1516.813044][ T5844] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1516.835546][ T5844] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1516.840165][ T2801] usb 4-1: Using ep0 maxpacket: 8 [ 1516.858230][ T5844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.864587][ T2801] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1516.887336][ T2801] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1516.889465][ T5844] usb 10-1: Product: syz [ 1516.912249][ T1059] playstation 0003:054C:05C4.0090: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 1516.918352][ T5844] usb 10-1: Manufacturer: syz [ 1516.937492][ T2801] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1516.944499][ T5844] usb 10-1: SerialNumber: syz [ 1516.956732][ T5844] usb 10-1: config 0 descriptor?? [ 1516.963310][T16497] bridge_slave_0: default FDB implementation only supports local addresses [ 1516.973085][ T2801] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.975068][ T5844] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1516.991370][ T2801] usb 4-1: Product: syz [ 1517.003238][ T5844] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1517.003664][ T2801] usb 4-1: Manufacturer: syz [ 1517.037206][ T2801] usb 4-1: SerialNumber: syz [ 1517.144709][ T1059] playstation 0003:054C:05C4.0090: Invalid reportID received, expected 18 got 10 [ 1517.176263][ T1059] playstation 0003:054C:05C4.0090: Failed to retrieve DualShock4 pairing info: -22 [ 1517.193126][ T1059] playstation 0003:054C:05C4.0090: Failed to get MAC address from DualShock4 [ 1517.236541][ T1059] playstation 0003:054C:05C4.0090: Failed to create dualshock4. [ 1517.275469][ T1059] playstation 0003:054C:05C4.0090: probe with driver playstation failed with error -22 [ 1517.306526][ T2801] cdc_ncm 4-1:1.0: bind() failure [ 1517.329939][ T2801] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1517.347238][ T2801] cdc_ncm 4-1:1.1: bind() failure [ 1517.368538][ T2801] usb 4-1: USB disconnect, device number 21 [ 1517.412177][ T1059] usb 5-1: USB disconnect, device number 65 [ 1517.643506][ T5844] em28xx 10-1:0.0: chip ID is em2710/2820 [ 1517.936894][ T5844] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1517.947424][ T5844] em28xx 10-1:0.0: board has no eeprom [ 1518.021401][ T5844] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1518.029371][ T5844] em28xx 10-1:0.0: dvb set to bulk mode. [ 1518.054919][T16545] vivid-004: ================= START STATUS ================= [ 1518.057937][ T5875] em28xx 10-1:0.0: Binding DVB extension [ 1518.079845][T16545] vivid-004: Radio HW Seek Mode: Bounded [ 1518.088212][ T5844] usb 10-1: USB disconnect, device number 31 [ 1518.101552][T16545] vivid-004: Radio Programmable HW Seek: false [ 1518.116782][ T5844] em28xx 10-1:0.0: Disconnecting em28xx [ 1518.117424][T16545] vivid-004: RDS Rx I/O Mode: Block I/O [ 1518.146387][T16545] vivid-004: Generate RBDS Instead of RDS: false [ 1518.157683][ T5875] em28xx 10-1:0.0: Registering input extension [ 1518.164309][T16545] vivid-004: RDS Reception: true [ 1518.164344][T16545] vivid-004: RDS Program Type: 0 inactive [ 1518.164378][T16545] vivid-004: RDS PS Name: inactive [ 1518.164476][T16545] vivid-004: RDS Radio Text: [ 1518.187565][ T5844] em28xx 10-1:0.0: Closing input extension [ 1518.199325][T16545] inactive [ 1518.220495][T16545] vivid-004: RDS Traffic Announcement: false inactive [ 1518.229219][ T5844] em28xx 10-1:0.0: Freeing device [ 1518.266558][T16545] vivid-004: RDS Traffic Program: false inactive [ 1518.280389][T16545] vivid-004: RDS Music: false inactive [ 1518.286032][T16545] vivid-004: ================== END STATUS ================== [ 1518.308397][ T4587] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1518.493138][ T4587] usb 4-1: Using ep0 maxpacket: 16 [ 1518.532027][ T4587] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.555237][ T4587] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1518.564350][ T4587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.623701][ T4587] usb 4-1: config 0 descriptor?? [ 1519.082565][ T4587] mcp2221 0003:04D8:00DD.0091: unbalanced delimiter at end of report description [ 1519.117212][ T4587] mcp2221 0003:04D8:00DD.0091: can't parse reports [ 1519.138278][ T4587] mcp2221 0003:04D8:00DD.0091: probe with driver mcp2221 failed with error -22 [ 1519.318820][ T4587] usb 4-1: USB disconnect, device number 22 [ 1519.850183][T16623] wlan0 speed is unknown, defaulting to 1000 [ 1519.860063][T16623] wg1 speed is unknown, defaulting to 1000 [ 1521.345615][ T1059] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1521.507721][ T1059] usb 10-1: Using ep0 maxpacket: 32 [ 1521.528722][ T1059] usb 10-1: config 0 has an invalid interface number: 219 but max is 0 [ 1521.557735][ T1059] usb 10-1: config 0 has no interface number 0 [ 1521.568545][ T1059] usb 10-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1521.623485][ T1059] usb 10-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1521.654816][ T1059] usb 10-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1521.687573][ T1059] usb 10-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1521.719837][ T1059] usb 10-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1521.742314][ T1059] usb 10-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1521.776468][ T1059] usb 10-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1521.792432][ T1059] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.838743][ T1059] usb 10-1: Product: syz [ 1521.847869][ T1059] usb 10-1: Manufacturer: syz [ 1521.852637][ T1059] usb 10-1: SerialNumber: syz [ 1521.871804][ T1059] usb 10-1: config 0 descriptor?? [ 1521.878087][T16689] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1521.886732][T16689] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1522.145171][ T1059] etas_es58x 10-1:0.219: Starting syz syz (Serial Number syz) [ 1522.232457][T16716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.25704'. [ 1522.373164][ T1059] etas_es58x 10-1:0.219: could not parse product info: '424242424242' [ 1522.619695][ T4587] usb 10-1: USB disconnect, device number 32 [ 1522.627655][ T4587] etas_es58x 10-1:0.219: Disconnecting syz syz [ 1523.082036][T16767] syz.2.25718 (16767): drop_caches: 2 [ 1523.526647][ T403] Bluetooth: hci2: command 0x0405 tx timeout [ 1524.482339][T16840] netlink: 280 bytes leftover after parsing attributes in process `syz.4.25751'. [ 1524.701671][ T4587] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1524.883127][ T4587] usb 10-1: Using ep0 maxpacket: 32 [ 1524.905786][ T4587] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1524.927483][ T4587] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1524.955918][ T4587] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1524.977748][ T4587] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.024007][ T4587] usb 10-1: Product: syz [ 1525.034221][ T4587] usb 10-1: Manufacturer: syz [ 1525.038959][ T4587] usb 10-1: SerialNumber: syz [ 1525.302954][ T4587] cdc_ncm 10-1:1.0: CDC Union missing and no IAD found [ 1525.311058][ T4587] cdc_ncm 10-1:1.0: bind() failure [ 1525.334107][ T4587] usb 10-1: USB disconnect, device number 33 [ 1525.409068][ T9438] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1525.481428][T16888] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 1525.491053][T16888] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1525.835009][ T4587] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1525.995142][ T4587] usb 3-1: Using ep0 maxpacket: 32 [ 1526.007419][ T4587] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 1526.022652][ T4587] usb 3-1: config 0 has no interface number 0 [ 1526.036450][ T4587] usb 3-1: config 0 interface 101 has no altsetting 0 [ 1526.062221][ T4587] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 1526.087481][ T4587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.092657][ T403] Bluetooth: hci4: command 0x0405 tx timeout [ 1526.134941][ T4587] usb 3-1: config 0 descriptor?? [ 1526.374826][ T4587] usb 3-1: string descriptor 0 read error: -71 [ 1526.417456][ T4587] usb 3-1: USB disconnect, device number 42 [ 1526.551232][ T1059] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1526.722757][ T1059] usb 5-1: Using ep0 maxpacket: 16 [ 1526.745252][ T1059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.787187][ T1059] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1526.796292][ T1059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.835059][ T1059] usb 5-1: config 0 descriptor?? [ 1526.992725][ T4587] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1527.140280][ T5844] IPVS: starting estimator thread 0... [ 1527.192418][ T4587] usb 10-1: Using ep0 maxpacket: 16 [ 1527.204127][ T4587] usb 10-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=d5.24 [ 1527.235321][T16970] IPVS: using max 20 ests per chain, 48000 per kthread [ 1527.244185][ T4587] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.257907][ T4587] usb 10-1: Product: syz [ 1527.262204][ T4587] usb 10-1: Manufacturer: syz [ 1527.267368][ T4587] usb 10-1: SerialNumber: syz [ 1527.274632][ T4587] usb 10-1: config 0 descriptor?? [ 1527.285919][ T1059] mcp2221 0003:04D8:00DD.0092: unbalanced delimiter at end of report description [ 1527.323185][ T4587] gspca_main: conex-2.14.0 probing 0572:0041 [ 1527.324960][ T1059] mcp2221 0003:04D8:00DD.0092: can't parse reports [ 1527.357907][ T1059] mcp2221 0003:04D8:00DD.0092: probe with driver mcp2221 failed with error -22 [ 1527.567708][ T2801] usb 5-1: USB disconnect, device number 66 [ 1527.650281][T16993] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 0, 8) RGB/YUV Capture:snk:16x16 (0x38414261, 8, 0, 0, 0) [ 1527.657541][ T4587] usb 10-1: USB disconnect, device number 34 [ 1528.037697][T17018] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25797'. [ 1528.764581][ T2801] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1528.925107][ T2801] usb 10-1: Using ep0 maxpacket: 8 [ 1528.931838][ T2801] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 1528.967870][ T2801] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.021367][ T2801] usb 10-1: config 0 has no interface number 0 [ 1529.042633][ T2801] usb 10-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xED, changing to 0x8D [ 1529.066563][ T2801] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1529.101817][ T2801] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1529.138565][ T2801] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1529.175993][ T2801] usb 10-1: config 0 interface 52 has no altsetting 0 [ 1529.199278][ T2801] usb 10-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 1529.224397][ T2801] usb 10-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 1529.246341][ T2801] usb 10-1: Product: syz [ 1529.250659][ T2801] usb 10-1: SerialNumber: syz [ 1529.280340][ T2801] usb 10-1: config 0 descriptor?? [ 1529.544627][ T2801] input: syz (Stick) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.52/input/input224 [ 1529.581580][ T5185] synaptics_usb 10-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1529.652976][ T5185] synaptics_usb 10-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1529.794492][T17041] synaptics_usb 10-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1529.870161][ T5844] usb 10-1: USB disconnect, device number 35 [ 1530.924609][T17131] tun0: tun_chr_ioctl cmd 1074025681 [ 1533.566690][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.7.25870'. [ 1534.116026][T17266] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1534.806943][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 1534.806960][ T29] audit: type=1326 audit(2000005394.522:11568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17295 comm="syz.2.25891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3758cde9 code=0x7ffc0000 [ 1534.857722][ T2801] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1534.879407][ T29] audit: type=1326 audit(2000005394.522:11569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17295 comm="syz.2.25891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3758cde9 code=0x7ffc0000 [ 1534.940962][ T29] audit: type=1326 audit(2000005394.522:11570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17295 comm="syz.2.25891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f8a3758cde9 code=0x7ffc0000 [ 1534.975080][ T5875] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1534.978599][ T29] audit: type=1326 audit(2000005394.522:11571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17295 comm="syz.2.25891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3758cde9 code=0x7ffc0000 [ 1535.011854][ T29] audit: type=1326 audit(2000005394.522:11572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17295 comm="syz.2.25891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3758cde9 code=0x7ffc0000 [ 1535.036574][ T29] audit: type=1326 audit(2000005394.522:11573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17295 comm="syz.2.25891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f8a3758cde9 code=0x7ffc0000 [ 1535.062774][ T2801] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.079618][ T2801] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1535.103456][ T29] audit: type=1326 audit(2000005394.522:11574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17295 comm="syz.2.25891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3758cde9 code=0x7ffc0000 [ 1535.134301][ T2801] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1535.144598][ T2801] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1535.160082][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1535.163077][ T2801] usb 10-1: SerialNumber: syz [ 1535.182362][ T5875] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1535.191283][ T29] audit: type=1326 audit(2000005394.522:11575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17295 comm="syz.2.25891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3758cde9 code=0x7ffc0000 [ 1535.223372][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.247074][ T5875] usb 5-1: config 0 descriptor?? [ 1535.454886][ T2801] usb 10-1: 0:2 : does not exist [ 1535.470809][ T2801] usb 10-1: USB disconnect, device number 36 [ 1535.910862][ T5875] razer 0003:1532:010E.0093: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 1536.111805][ T29] audit: type=1326 audit(2000005395.747:11576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17362 comm="syz.7.25910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a178cde9 code=0x7ffc0000 [ 1536.134188][ T5875] usb 5-1: USB disconnect, device number 67 [ 1536.160146][ T29] audit: type=1326 audit(2000005395.747:11577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17362 comm="syz.7.25910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2a178cde9 code=0x7ffc0000 [ 1536.265629][T17379] netlink: 64 bytes leftover after parsing attributes in process `syz.9.25912'. [ 1537.007181][T17402] netlink: 512 bytes leftover after parsing attributes in process `syz.7.25921'. [ 1537.680715][T17422] Falling back ldisc for ttyS3. [ 1537.832260][T17445] netlink: 'syz.3.25939': attribute type 21 has an invalid length. [ 1537.851275][T17445] netlink: 'syz.3.25939': attribute type 6 has an invalid length. [ 1537.859862][T17445] netlink: 132 bytes leftover after parsing attributes in process `syz.3.25939'. [ 1537.871511][T17448] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1537.927586][T17445] netlink: 'syz.3.25939': attribute type 21 has an invalid length. [ 1537.935609][T17445] netlink: 'syz.3.25939': attribute type 6 has an invalid length. [ 1538.001051][T17445] netlink: 132 bytes leftover after parsing attributes in process `syz.3.25939'. [ 1538.187015][T17462] wireguard: wg1: Could not create IPv4 socket [ 1538.321443][T17470] netlink: zone id is out of range [ 1538.337557][T17470] netlink: zone id is out of range [ 1538.345183][T17470] netlink: zone id is out of range [ 1538.361309][T17470] netlink: zone id is out of range [ 1538.369655][T17470] netlink: zone id is out of range [ 1538.388673][T17475] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1538.424547][T17470] netlink: zone id is out of range [ 1538.436932][T17470] netlink: zone id is out of range [ 1538.449749][T17470] netlink: zone id is out of range [ 1538.564414][T17482] netlink: 830 bytes leftover after parsing attributes in process `syz.7.25956'. [ 1538.855354][T17496] program syz.2.25961 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1539.076912][T17508] loop9: detected capacity change from 0 to 1 [ 1539.105425][T17508] Dev loop9: unable to read RDB block 1 [ 1539.119294][T17508] loop9: unable to read partition table [ 1539.131193][T17508] loop9: partition table beyond EOD, truncated [ 1539.143090][T17508] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1539.350002][T17513] netlink: 'syz.3.25967': attribute type 10 has an invalid length. [ 1539.371085][T17513] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25967'. [ 1539.389758][T17513] team0: entered promiscuous mode [ 1539.403923][T17513] team_slave_0: entered promiscuous mode [ 1539.433199][T17513] team_slave_1: entered promiscuous mode [ 1539.440641][T17513] team0: entered allmulticast mode [ 1539.457782][T17513] team_slave_0: entered allmulticast mode [ 1539.485567][T17513] team_slave_1: entered allmulticast mode [ 1539.506966][T17513] bridge0: port 3(team0) entered blocking state [ 1539.522456][T17513] bridge0: port 3(team0) entered disabled state [ 1539.549191][T17513] bridge0: port 3(team0) entered blocking state [ 1539.555775][T17513] bridge0: port 3(team0) entered forwarding state [ 1539.744937][T17527] bridge0: port 3(team0) entered disabled state [ 1539.772340][T17527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.790236][T17527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.850075][ T5875] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1539.901242][T17530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.908494][T17530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1539.931486][T17530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1539.938816][T17530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1539.975228][T17529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25972'. [ 1539.992169][ T9122] bridge0: port 3(team0) entered blocking state [ 1539.998620][ T9122] bridge0: port 3(team0) entered forwarding state [ 1540.039424][ T5875] usb 10-1: Using ep0 maxpacket: 8 [ 1540.048920][ T5875] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1540.065854][ T5875] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.074016][ T5875] usb 10-1: Product: syz [ 1540.102811][ T5875] usb 10-1: Manufacturer: syz [ 1540.108604][ T5875] usb 10-1: SerialNumber: syz [ 1540.115268][ T5875] usb 10-1: config 0 descriptor?? [ 1540.124928][ T5875] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1540.913109][T17564] net_ratelimit: 1 callbacks suppressed [ 1540.913129][T17564] netlink: zone id is out of range [ 1540.931803][T17564] netlink: zone id is out of range [ 1540.937204][T17564] netlink: zone id is out of range [ 1540.943394][T17564] netlink: zone id is out of range [ 1540.948665][T17564] netlink: zone id is out of range [ 1540.954143][T17564] netlink: zone id is out of range [ 1540.959282][T17564] netlink: zone id is out of range [ 1540.964925][T17564] netlink: zone id is out of range [ 1540.970125][T17564] netlink: set zone limit has 4 unknown bytes [ 1540.979812][T17565] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1540.991327][ T5875] gspca_sq930x: ucbus_write failed -71 [ 1541.002659][ T5875] sq930x 10-1:0.0: probe with driver sq930x failed with error -71 [ 1541.010707][ T4587] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1541.039117][ T5875] usb 10-1: USB disconnect, device number 37 [ 1541.209451][ T4587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1541.219873][ T4587] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1541.229533][ T4587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.239298][ T4587] usb 3-1: config 0 descriptor?? [ 1541.404826][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25987'. [ 1541.553966][T17578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.596944][T17578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.756631][T17581] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.763906][T17581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1541.777284][T17581] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.784481][T17581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1541.915701][ T4587] razer 0003:1532:010E.0094: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 1542.130326][ T5824] usb 3-1: USB disconnect, device number 43 [ 1542.253046][T17616] netlink: 64 bytes leftover after parsing attributes in process `syz.3.25998'. [ 1542.628433][T17638] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.639131][T17638] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.708615][T17639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.715868][T17639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.742085][T17639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.749309][T17639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.105170][ T2801] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1544.297152][ T2801] usb 4-1: Using ep0 maxpacket: 16 [ 1544.304448][ T2801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1544.324947][ T2801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1544.353601][ T2801] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1544.382278][ T2801] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1544.392334][ T2801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.405013][ T2801] usb 4-1: config 0 descriptor?? [ 1544.650065][ T5875] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1544.810490][ T5875] usb 5-1: Using ep0 maxpacket: 16 [ 1544.831219][ T5875] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1544.852493][ T2801] microsoft 0003:045E:07DA.0095: ignoring exceeding usage max [ 1544.855331][ T5875] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1544.883537][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.892341][ T5875] usb 5-1: Product: syz [ 1544.896913][ T5875] usb 5-1: Manufacturer: syz [ 1544.901385][ T2801] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0095/input/input226 [ 1544.901509][ T5875] usb 5-1: SerialNumber: syz [ 1544.947190][ T2801] microsoft 0003:045E:07DA.0095: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1544.947841][ T5875] usb 5-1: config 0 descriptor?? [ 1545.004988][ T5875] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1545.030478][ T5875] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1545.057047][T17742] Falling back ldisc for ttyS3. [ 1545.140248][ T2801] usb 4-1: USB disconnect, device number 23 [ 1545.672512][ T5875] em28xx 5-1:0.0: chip ID is em2710/2820 [ 1545.751618][ T5844] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1545.933612][ T5844] usb 10-1: Using ep0 maxpacket: 16 [ 1545.942223][ T5844] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1545.952140][ T5844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.960624][ T5844] usb 10-1: Product: syz [ 1545.969100][ T5875] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1545.978959][ T5844] usb 10-1: Manufacturer: syz [ 1545.983834][ T5875] em28xx 5-1:0.0: board has no eeprom [ 1545.989418][ T5844] usb 10-1: SerialNumber: syz [ 1546.001985][ T5844] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1546.014947][ T5844] r8152-cfgselector 10-1: config 0 descriptor?? [ 1546.093288][ T5875] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1546.101578][ T5875] em28xx 5-1:0.0: dvb set to bulk mode. [ 1546.107898][ T5879] em28xx 5-1:0.0: Binding DVB extension [ 1546.116479][ T4587] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1546.141039][ T5875] usb 5-1: USB disconnect, device number 68 [ 1546.148430][ T5875] em28xx 5-1:0.0: Disconnecting em28xx [ 1546.165056][ T5879] em28xx 5-1:0.0: Registering input extension [ 1546.173840][ T5875] em28xx 5-1:0.0: Closing input extension [ 1546.193398][ T5875] em28xx 5-1:0.0: Freeing device [ 1546.251765][ T5844] r8152-cfgselector 10-1: Needed 2 retries to read version [ 1546.259808][ T5844] r8152-cfgselector 10-1: Unknown version 0x5cf0 [ 1546.266744][ T5844] r8152-cfgselector 10-1: bad CDC descriptors [ 1546.309598][ T4587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1546.321033][ T4587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1546.331160][ T4587] usb 3-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 1546.340680][ T4587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1546.350525][ T4587] usb 3-1: config 0 descriptor?? [ 1546.485566][ T2801] r8152-cfgselector 10-1: USB disconnect, device number 38 [ 1546.812178][ T4587] hid-generic 0003:05AC:4262.0096: unbalanced delimiter at end of report description [ 1546.841921][ T4587] hid-generic 0003:05AC:4262.0096: probe with driver hid-generic failed with error -22 [ 1547.044767][ T4587] usb 3-1: USB disconnect, device number 44 [ 1547.118753][T17854] wlan0 speed is unknown, defaulting to 1000 [ 1547.140363][T17854] wg1 speed is unknown, defaulting to 1000 [ 1547.418985][ T5875] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1547.440423][ T5844] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1547.605965][ T5875] usb 10-1: Using ep0 maxpacket: 16 [ 1547.611637][ T5844] usb 5-1: Using ep0 maxpacket: 32 [ 1547.628491][ T5875] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.651206][ T5844] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 1547.660325][ T5875] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.675483][ T5844] usb 5-1: config 0 has no interface number 0 [ 1547.681633][ T5844] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1547.714867][ T5875] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1547.739131][ T5844] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1547.751802][ T5875] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1547.793077][ T5844] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1547.804740][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.823314][ T5844] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1547.837169][ T5875] usb 10-1: config 0 descriptor?? [ 1547.861007][ T5844] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 1547.871737][ T5844] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1547.897263][ T5844] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 1547.933845][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.953365][ T5844] usb 5-1: Product: syz [ 1547.957619][ T5844] usb 5-1: Manufacturer: syz [ 1547.962263][ T5844] usb 5-1: SerialNumber: syz [ 1548.004007][ T5844] usb 5-1: config 0 descriptor?? [ 1548.019151][T17873] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1548.026547][T17873] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1548.290115][ T5875] microsoft 0003:045E:07DA.0097: ignoring exceeding usage max [ 1548.318440][ T5844] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 1548.350711][ T5875] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0097/input/input228 [ 1548.394200][ T5875] microsoft 0003:045E:07DA.0097: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1548.532886][ T5844] etas_es58x 5-1:0.219: could not parse product info: '424242424242' [ 1548.576919][ T5824] usb 10-1: USB disconnect, device number 39 [ 1548.605087][T17941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26088'. [ 1548.777862][ T5879] usb 5-1: USB disconnect, device number 69 [ 1548.784901][ T5879] etas_es58x 5-1:0.219: Disconnecting syz syz [ 1548.809119][ T2801] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1548.827832][T17972] program syz.7.26082 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1548.971206][ T2801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.991028][ T2801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.996741][T17990] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1549.008351][ T2801] usb 4-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 1549.029431][ T2801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1549.055890][ T2801] usb 4-1: config 0 descriptor?? [ 1549.183489][ T1059] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1549.343614][ T1059] usb 3-1: Using ep0 maxpacket: 16 [ 1549.358023][ T1059] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1549.419897][ T1059] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1549.439811][ T1059] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.458883][ T1059] usb 3-1: Product: syz [ 1549.469732][ T1059] usb 3-1: Manufacturer: syz [ 1549.479758][ T1059] usb 3-1: SerialNumber: syz [ 1549.505729][ T1059] usb 3-1: config 0 descriptor?? [ 1549.521973][ T2801] hid-generic 0003:05AC:4262.0098: unbalanced delimiter at end of report description [ 1549.533295][ T1059] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1549.554775][ T2801] hid-generic 0003:05AC:4262.0098: probe with driver hid-generic failed with error -22 [ 1549.568100][ T1059] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1549.757502][ T5824] usb 4-1: USB disconnect, device number 24 [ 1550.194255][ T1059] em28xx 3-1:0.0: chip ID is em2710 [ 1550.478985][ T1059] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1550.513600][ T1059] em28xx 3-1:0.0: board has no eeprom [ 1550.584020][ T1059] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1550.604119][ T1059] em28xx 3-1:0.0: dvb set to bulk mode. [ 1550.623598][ T5824] em28xx 3-1:0.0: Binding DVB extension [ 1550.647046][ T1059] usb 3-1: USB disconnect, device number 45 [ 1550.678949][ T1059] em28xx 3-1:0.0: Disconnecting em28xx [ 1550.735252][ T5824] em28xx 3-1:0.0: Registering input extension [ 1550.742304][ T1059] em28xx 3-1:0.0: Closing input extension [ 1550.788241][ T1059] em28xx 3-1:0.0: Freeing device [ 1551.071515][T18067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.422626][T18109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1551.781561][T18127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26128'. [ 1551.790714][T18127] netlink: 36 bytes leftover after parsing attributes in process `syz.2.26128'. [ 1552.017014][T18140] netlink: 4 bytes leftover after parsing attributes in process `syz.9.26134'. [ 1552.212242][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1552.212259][ T29] audit: type=1326 audit(2000005410.807:11612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18147 comm="syz.7.26138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff2a178cde9 code=0x0 [ 1552.324476][T18154] tun0: tun_chr_ioctl cmd 1074025675 [ 1552.336412][T18154] tun0: persist disabled [ 1552.654647][T18171] wlan0 speed is unknown, defaulting to 1000 [ 1552.663185][T18171] wg1 speed is unknown, defaulting to 1000 [ 1552.669681][ T1059] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1552.845790][ T1059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.857728][ T1059] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.870070][ T1059] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1552.880284][ T1059] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.891955][ T1059] usb 4-1: config 0 descriptor?? [ 1553.300657][T18211] netlink: 92 bytes leftover after parsing attributes in process `syz.7.26160'. [ 1553.421699][ T1059] isku 0003:1E7D:319C.0099: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 1553.814039][ T1059] usb 4-1: USB disconnect, device number 25 [ 1553.823901][T18245] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 0, 8) RGB/YUV Capture:snk:16x16 (0x38414261, 8, 0, 0, 0) [ 1555.304120][T18311] tun0: tun_chr_ioctl cmd 1074025675 [ 1555.310315][T18311] tun0: persist disabled [ 1555.470040][ T5844] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1555.661641][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 1555.676618][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1555.690817][ T5844] usb 3-1: New USB device found, idVendor=1110, idProduct=9000, bcdDevice=f4.11 [ 1555.700493][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1555.722091][ T5844] usb 3-1: Product: syz [ 1555.732906][ T5844] usb 3-1: Manufacturer: syz [ 1555.738017][ T5844] usb 3-1: SerialNumber: syz [ 1555.769208][ T5824] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1555.940389][ T5824] usb 10-1: Using ep0 maxpacket: 32 [ 1555.956927][ T5824] usb 10-1: config 0 has an invalid interface number: 101 but max is 0 [ 1555.978487][ T5824] usb 10-1: config 0 has no interface number 0 [ 1555.984123][ T5844] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9000) Rev (0XF411): ADI930 [ 1556.003817][ T5824] usb 10-1: config 0 interface 101 has no altsetting 0 [ 1556.010774][ T5824] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 1556.046936][ T5824] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.059210][ T5824] usb 10-1: config 0 descriptor?? [ 1556.283680][ T5824] usb 10-1: string descriptor 0 read error: -71 [ 1556.329533][ T5824] usb 10-1: USB disconnect, device number 40 [ 1556.667525][ T5844] usb 3-1: reset high-speed USB device number 46 using dummy_hcd [ 1556.853193][ T5844] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1556.890714][ T5844] usb 3-1: device firmware changed [ 1556.903569][ T5844] usb 3-1: [UEAGLE-ATM] interface 1 not found [ 1556.923140][ T5844] ueagle-atm 3-1:127.0: usbatm_usb_probe: bind failed: -19! [ 1556.944436][ T5844] usb 3-1: USB disconnect, device number 46 [ 1557.436573][ T29] audit: type=1400 audit(2000005415.690:11613): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=18424 comm="syz.3.26212" daddr=fc00::fe dest=64 [ 1557.863518][ T5844] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1558.045679][ T5844] usb 3-1: Using ep0 maxpacket: 32 [ 1558.065823][ T5844] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1558.112780][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1558.146063][ T29] audit: type=1400 audit(2000005416.354:11614): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=18453 comm="syz.3.26223" daddr=::ffff:172.30.0.4 [ 1558.173423][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1558.201764][ T5844] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1558.213384][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.232576][ T5844] usb 3-1: config 0 descriptor?? [ 1558.259462][T18433] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1558.281315][ T5844] hub 3-1:0.0: USB hub found [ 1558.511215][ T5844] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 1558.730197][ T5844] usbhid 3-1:0.0: can't add hid device: -71 [ 1558.748699][ T5844] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1558.816472][ T5844] usb 3-1: USB disconnect, device number 47 [ 1558.933298][ T9449] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1559.117156][ T29] audit: type=1400 audit(2000005417.262:11615): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=18504 comm="syz.4.26240" daddr=fc00::fe dest=64 [ 1559.364882][T18509] netlink: 'syz.4.26243': attribute type 1 has an invalid length. [ 1559.386938][T18509] netlink: 'syz.4.26243': attribute type 2 has an invalid length. [ 1559.703347][ T29] audit: type=1326 audit(2000005417.814:11616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.3.26249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1559.780091][ T29] audit: type=1326 audit(2000005417.814:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.3.26249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1559.871234][ T29] audit: type=1326 audit(2000005417.814:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.3.26249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1559.924836][ T29] audit: type=1326 audit(2000005417.954:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.3.26249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1559.973729][ T29] audit: type=1326 audit(2000005417.963:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.3.26249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69c3583da7 code=0x7ffc0000 [ 1560.050938][ T29] audit: type=1326 audit(2000005417.963:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.3.26249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f69c3528fb9 code=0x7ffc0000 [ 1560.112559][ T29] audit: type=1326 audit(2000005417.963:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.3.26249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69c3583da7 code=0x7ffc0000 [ 1560.139885][ T29] audit: type=1326 audit(2000005417.963:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18527 comm="syz.3.26249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f69c3528fb9 code=0x7ffc0000 [ 1560.526099][ T5824] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1560.547712][ T5844] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1560.699666][T18570] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 18570 comm: syz.7.26264) [ 1560.715808][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.729733][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.752563][ T5844] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1560.762636][ T5844] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.781243][ T5824] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1560.794848][ T5844] usb 10-1: config 0 descriptor?? [ 1560.804170][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.823332][ T5824] usb 5-1: config 0 descriptor?? [ 1561.036791][ T5844] [drm] vendor descriptor length:7 data:07 5f 4f 0a c3 9a ac 00 00 00 00 [ 1561.059018][ T5844] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1561.264717][ T5844] [drm:udl_init] *ERROR* Selecting channel failed [ 1561.292810][ T5824] isku 0003:1E7D:319C.009A: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 1561.293421][ T5844] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1561.351220][ T5844] [drm] Initialized udl on minor 2 [ 1561.371705][ T5844] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1561.399239][ T5844] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1561.411281][ T5879] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1561.443872][ T5879] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1561.455711][ T5844] usb 10-1: USB disconnect, device number 41 [ 1561.475467][ T5879] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1561.739380][ T1059] usb 5-1: USB disconnect, device number 70 [ 1561.990765][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.9.26287'. [ 1562.011868][T18662] netlink: 4 bytes leftover after parsing attributes in process `syz.9.26287'. [ 1562.618473][T18696] netlink: 'syz.4.26299': attribute type 1 has an invalid length. [ 1562.647894][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26299'. [ 1562.835247][ T5824] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1562.930562][T18716] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1562.938070][T18716] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1563.007999][ T5824] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1563.030359][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.060817][ T5824] usb 4-1: config 0 descriptor?? [ 1563.134421][ T5879] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1563.305250][ T5879] usb 10-1: Using ep0 maxpacket: 16 [ 1563.315475][ T5879] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 1563.326171][ T5824] [drm] vendor descriptor length:7 data:07 5f 4f 0a c3 9a ac 00 00 00 00 [ 1563.335645][ T5879] usb 10-1: config 0 has no interface number 0 [ 1563.350301][ T5879] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1563.352895][ T5824] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1563.361475][T18733] netlink: 'syz.7.26313': attribute type 1 has an invalid length. [ 1563.390209][ T5879] usb 10-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1563.422685][ T5879] usb 10-1: config 0 interface 41 has no altsetting 0 [ 1563.429784][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.26313'. [ 1563.456520][ T5879] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1563.466968][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.490379][ T5879] usb 10-1: Product: syz [ 1563.510199][ T5879] usb 10-1: Manufacturer: syz [ 1563.514940][ T5879] usb 10-1: SerialNumber: syz [ 1563.553804][ T5879] usb 10-1: config 0 descriptor?? [ 1563.557199][ T5824] [drm:udl_init] *ERROR* Selecting channel failed [ 1563.561832][T18709] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1563.595330][T18709] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1563.613751][ T5824] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1563.640448][ T5824] [drm] Initialized udl on minor 2 [ 1563.640974][T18748] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 18748 comm: syz.2.26316) [ 1563.664631][ T5824] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1563.674189][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 1563.674205][ T29] audit: type=1800 audit(2000005421.527:11707): pid=18748 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.26316" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=233860 res=0 errno=0 [ 1563.686135][ T5824] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1563.771106][ T1059] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1563.786910][ T5824] usb 4-1: USB disconnect, device number 26 [ 1563.808145][ T1059] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1563.841614][T18709] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1563.849859][T18709] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1564.298726][ T5879] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 1564.336609][ T5879] usb 10-1: USB disconnect, device number 42 [ 1564.546222][T18798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26330'. [ 1564.555345][T18798] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26330'. [ 1564.800420][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26336'. [ 1564.826862][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26336'. [ 1565.268435][ T403] Bluetooth: hci5: sending frame failed (-49) [ 1565.279254][T29659] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1565.757921][T18855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.26351'. [ 1565.949268][ T5824] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.248480][T18879] bridge_slave_0: invalid flags given to default FDB implementation [ 1566.478809][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz.9.26369'. [ 1566.656421][ T29] audit: type=1800 audit(2000005424.315:11708): pid=18908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.26373" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1566.811199][T18914] netlink: 'syz.2.26375': attribute type 1 has an invalid length. [ 1566.819904][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1567.088193][ T403] Bluetooth: hci5: sending frame failed (-49) [ 1567.097845][T29659] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1567.120172][ T29] audit: type=1400 audit(2000000000.084:11709): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=18929 comm="syz.3.26382" [ 1567.521758][T18946] mkiss: ax0: crc mode is auto. [ 1567.721762][T18968] bridge_slave_0: invalid flags given to default FDB implementation [ 1567.913128][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1568.490730][ T1059] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1568.504196][T19017] netlink: 'syz.7.26412': attribute type 1 has an invalid length. [ 1568.525565][T19017] __nla_validate_parse: 1 callbacks suppressed [ 1568.525583][T19017] netlink: 134744 bytes leftover after parsing attributes in process `syz.7.26412'. [ 1568.655053][ T1059] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1568.669385][ T1059] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1568.712543][ T1059] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1568.732853][ T1059] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.758687][ T1059] usb 10-1: config 0 descriptor?? [ 1569.036102][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.196437][ T2801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.239512][ T1059] isku 0003:1E7D:319C.009B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.9-1/input0 [ 1569.489253][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26428'. [ 1569.694033][ T5879] usb 10-1: USB disconnect, device number 43 [ 1569.999511][ T29] audit: type=1400 audit(2000000002.787:11710): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=19099 comm="syz.7.26435" daddr=fc01:: [ 1570.137082][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.409627][T19123] smc: net device bond0 erased user defined pnetid SYZ0 [ 1570.417113][ T5844] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1570.447890][T19123] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ [ 1570.608433][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1570.624775][ T5844] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1570.645052][ T5844] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1570.698635][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.733016][ T5844] usb 3-1: config 0 descriptor?? [ 1570.871036][T19143] netlink: 4 bytes leftover after parsing attributes in process `syz.7.26450'. [ 1571.203530][ T5844] pyra 0003:1E7D:2CF6.009C: unknown main item tag 0x0 [ 1571.211221][ T5844] pyra 0003:1E7D:2CF6.009C: unknown main item tag 0x0 [ 1571.226812][ T5844] pyra 0003:1E7D:2CF6.009C: unknown main item tag 0x0 [ 1571.233687][ T5844] pyra 0003:1E7D:2CF6.009C: unknown main item tag 0x0 [ 1571.248471][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.256851][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.280429][ T5844] pyra 0003:1E7D:2CF6.009C: unknown main item tag 0x0 [ 1571.287322][ T5844] pyra 0003:1E7D:2CF6.009C: unknown main item tag 0x0 [ 1571.302665][ T5844] pyra 0003:1E7D:2CF6.009C: unknown main item tag 0x0 [ 1571.313067][ T5844] pyra 0003:1E7D:2CF6.009C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 1571.631216][ T5844] pyra 0003:1E7D:2CF6.009C: couldn't init struct pyra_device [ 1571.639477][ T5844] pyra 0003:1E7D:2CF6.009C: couldn't install mouse [ 1571.670571][ T5844] pyra 0003:1E7D:2CF6.009C: probe with driver pyra failed with error -71 [ 1571.712275][ T5844] usb 3-1: USB disconnect, device number 48 [ 1571.890008][ T29] audit: type=1400 audit(2000000004.546:11711): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=19184 comm="syz.7.26463" daddr=fc01::8 [ 1572.285798][ T29] audit: type=1400 audit(2000000004.920:11712): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=19196 comm="syz.9.26470" daddr=fc00:: [ 1572.360702][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.385640][ T29] audit: type=1400 audit(2000000005.013:11713): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=19206 comm="syz.4.26472" name="761" dev="tmpfs" ino=3884 [ 1572.456609][ T1059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.557021][T19214] loop6: detected capacity change from 0 to 524287999 [ 1572.605024][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.9.26477'. [ 1572.660254][T19217] netlink: 24 bytes leftover after parsing attributes in process `syz.9.26477'. [ 1573.098092][ T5879] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1573.269128][ T5879] usb 10-1: Using ep0 maxpacket: 16 [ 1573.285965][ T5879] usb 10-1: config 0 has an invalid interface number: 251 but max is 0 [ 1573.301222][ T5879] usb 10-1: config 0 has no interface number 0 [ 1573.321076][ T5879] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1573.353151][ T5879] usb 10-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1573.389306][ T5879] usb 10-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1573.407818][ T5879] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.427087][ T5879] usb 10-1: Product: syz [ 1573.431599][ T5879] usb 10-1: Manufacturer: syz [ 1573.436312][ T5879] usb 10-1: SerialNumber: syz [ 1573.462201][ T5879] usb 10-1: config 0 descriptor?? [ 1573.468156][T19231] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1573.476006][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.487239][T19231] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1573.777538][ T5879] asix 10-1:0.251: probe with driver asix failed with error -71 [ 1573.803853][ T5879] usb 10-1: USB disconnect, device number 44 [ 1573.986015][ T2801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1573.994645][ T1059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.583954][ T4587] net_ratelimit: 1 callbacks suppressed [ 1574.583974][ T4587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.044350][T19318] tap0: tun_chr_ioctl cmd 1074812118 [ 1575.173630][T19324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26517'. [ 1575.250428][T19330] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.26520'. [ 1575.367772][T19335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.26522'. [ 1575.596041][T19345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.26525'. [ 1575.751964][T19351] tap0: tun_chr_ioctl cmd 1074025677 [ 1575.757578][T19351] tap0: linktype set to 778 [ 1575.803035][T19357] sg_write: process 2018 (syz.3.26529) changed security contexts after opening file descriptor, this is not allowed. [ 1576.068477][T19372] bond0: option resend_igmp: invalid value (18446744073709551612) [ 1576.084341][T19372] bond0: option resend_igmp: allowed values 0 - 255 [ 1576.213071][ T29] audit: type=1400 audit(2000000008.596:11714): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=19376 comm="syz.3.26539" daddr=fc01:: dest=8 [ 1576.522239][ T29] audit: type=1400 audit(2000000008.867:11715): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=":" object="_" requested=w pid=19387 comm="syz.2.26545" saddr=::100:0:0:e1ff:0 daddr=fe80::aa dest=20002 [ 1576.634899][ T29] audit: type=1400 audit(2000000008.989:11716): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=19396 comm="syz.7.26547" daddr=2001:: [ 1576.850512][ T5875] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1577.011716][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 1577.019571][ T5875] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1577.028335][ T5875] usb 5-1: config 0 has no interface number 0 [ 1577.045096][ T5875] usb 5-1: config 0 interface 2 has no altsetting 0 [ 1577.058870][ T5875] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 1577.089960][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.111605][ T5875] usb 5-1: Product: syz [ 1577.124378][ T5875] usb 5-1: Manufacturer: syz [ 1577.139643][ T5875] usb 5-1: SerialNumber: syz [ 1577.158485][ T5875] usb 5-1: config 0 descriptor?? [ 1577.411385][ T5875] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1577.454207][ T5875] usb 5-1: USB disconnect, device number 71 [ 1577.947281][T19478] netlink: 'syz.2.26569': attribute type 21 has an invalid length. [ 1577.982521][T19485] netlink: 'syz.7.26570': attribute type 30 has an invalid length. [ 1577.994974][T19478] netlink: 128 bytes leftover after parsing attributes in process `syz.2.26569'. [ 1578.028623][T19478] netlink: 'syz.2.26569': attribute type 4 has an invalid length. [ 1578.048956][T19478] netlink: 3 bytes leftover after parsing attributes in process `syz.2.26569'. [ 1578.391684][T19509] netlink: 312 bytes leftover after parsing attributes in process `syz.3.26578'. [ 1578.411333][ T4587] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1578.723610][ T4587] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1578.753366][ T4587] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1578.763312][ T4587] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1578.817372][ T4587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.843771][T19492] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1578.877030][ T4587] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1579.172111][ T5875] usb 5-1: USB disconnect, device number 72 [ 1579.200754][T19560] random: crng reseeded on system resumption [ 1579.914816][ T5875] kernel write not supported for file /amidi2 (pid: 5875 comm: kworker/0:3) [ 1580.068079][ T5875] usb 10-1: new low-speed USB device number 45 using dummy_hcd [ 1580.098214][T19589] netlink: 'syz.4.26601': attribute type 6 has an invalid length. [ 1580.240879][ T5875] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1580.261473][ T5875] usb 10-1: config 0 has no interface number 0 [ 1580.267754][ T5875] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1580.288257][ T5875] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1580.299600][ T5875] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1580.311884][ T5875] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1580.334581][ T5875] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1580.346971][ T5875] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1580.378797][ T5875] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1580.396402][ T5875] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.435636][ T5875] usb 10-1: config 0 descriptor?? [ 1580.448009][T19581] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1580.456272][T19581] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1580.480478][ T5875] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1580.945185][ T29] audit: type=1326 audit(2000000013.030:11717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.3.26613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1581.030477][ T29] audit: type=1326 audit(2000000013.048:11718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.3.26613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1581.136519][ T29] audit: type=1326 audit(2000000013.048:11719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.3.26613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1581.195667][ T29] audit: type=1326 audit(2000000013.048:11720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.3.26613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c358cde9 code=0x7ffc0000 [ 1581.235589][ T29] audit: type=1326 audit(2000000013.048:11721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.3.26613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69c3583da7 code=0x7ffc0000 [ 1581.298105][ T29] audit: type=1326 audit(2000000013.048:11722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.3.26613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f69c3528fb9 code=0x7ffc0000 [ 1581.335190][ T5879] usb 10-1: USB disconnect, device number 45 [ 1581.351305][ T5879] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 1581.374811][ T29] audit: type=1326 audit(2000000013.048:11723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.3.26613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69c3583da7 code=0x7ffc0000 [ 1581.637650][T19654] tap0: tun_chr_ioctl cmd 1074025677 [ 1581.663546][T19654] tap0: linktype set to 6 [ 1582.103750][T19685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26637'. [ 1582.480107][T19702] sctp: [Deprecated]: syz.4.26644 (pid 19702) Use of int in max_burst socket option deprecated. [ 1582.480107][T19702] Use struct sctp_assoc_value instead [ 1583.035733][T19731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26655'. [ 1583.128570][T19735] veth1_macvtap: left promiscuous mode [ 1583.170835][T19737] netlink: 28 bytes leftover after parsing attributes in process `syz.9.26656'. [ 1584.069072][T19786] netlink: 'syz.4.26677': attribute type 21 has an invalid length. [ 1584.082792][T19786] netlink: 'syz.4.26677': attribute type 1 has an invalid length. [ 1584.115277][T19786] netlink: 16050 bytes leftover after parsing attributes in process `syz.4.26677'. [ 1584.269297][ T5879] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1584.452843][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 1584.481245][ T5879] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1584.493995][ T5879] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1584.518822][T19805] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1584.525375][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.595693][ T5879] usb 4-1: Product: syz [ 1584.599919][ T5879] usb 4-1: Manufacturer: syz [ 1584.632734][ T5879] usb 4-1: SerialNumber: syz [ 1584.640965][ T5879] usb 4-1: config 0 descriptor?? [ 1584.728206][T19815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1585.105841][ T5879] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1585.181950][T19825] Context (ID=0x1) not attached to queue pair (handle=0x4e4:0x0) [ 1585.503940][T19831] netlink: 8 bytes leftover after parsing attributes in process `syz.9.26694'. [ 1585.541780][ T5879] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1585.572324][ T5879] usb 4-1: USB disconnect, device number 27 [ 1586.059106][T19869] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 1586.064948][T19869] dvmrp1: linktype set to 823 [ 1586.567566][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1586.567585][ T29] audit: type=1400 audit(2000000018.277:11735): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=19892 comm="syz.3.26711" [ 1587.498280][ T29] audit: type=1400 audit(2000000019.147:11736): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object=":" requested=w pid=19924 comm="syz.9.26723" daddr=fc00:: dest=65533 [ 1587.760069][T19939] 9p: Unknown Cache mode or invalid value f [ 1588.204287][T19950] netlink: 1256 bytes leftover after parsing attributes in process `syz.9.26732'. [ 1588.299983][ T29] audit: type=1326 audit(2000000019.895:11737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19953 comm="syz.7.26734" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2a178cde9 code=0x0 [ 1588.572598][T19964] openvswitch: netlink: nsh attribute has 65504 unknown bytes. [ 1588.588714][T19964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1589.337349][ T1059] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1589.508508][ T1059] usb 5-1: Using ep0 maxpacket: 16 [ 1589.519934][ T1059] usb 5-1: config 0 has an invalid descriptor of length 233, skipping remainder of the config [ 1589.553976][ T1059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1589.589898][ T1059] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6B, changing to 0xB [ 1589.618767][ T1059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 149, changing to 11 [ 1589.665293][ T1059] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1839, setting to 1024 [ 1589.687991][ T1059] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1589.734705][ T1059] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1589.754154][ T1059] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1589.762530][ T1059] usb 5-1: Manufacturer: syz [ 1589.795318][ T1059] usb 5-1: config 0 descriptor?? [ 1590.128582][ T1059] rc_core: IR keymap rc-hauppauge not found [ 1590.135427][ T1059] Registered IR keymap rc-empty [ 1590.145638][ T1059] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1590.185487][ T1059] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1590.193050][ T5824] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1590.233023][T20039] @: renamed from vlan0 [ 1590.244505][ T1059] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1590.258829][ T1059] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input231 [ 1590.297738][ T1059] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1590.353298][ T1059] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1590.363763][ T5824] usb 3-1: Using ep0 maxpacket: 8 [ 1590.370910][ T5824] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1590.385777][ T1059] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1590.395723][ T5824] usb 3-1: config 0 has no interfaces? [ 1590.403716][ T5824] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1590.423183][ T5824] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1590.431953][ T1059] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1590.448994][ T5824] usb 3-1: Product: syz [ 1590.453247][ T5824] usb 3-1: Manufacturer: syz [ 1590.470696][ T1059] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1590.479743][ T5824] usb 3-1: SerialNumber: syz [ 1590.492223][ T1059] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1590.513698][ T5824] usb 3-1: config 0 descriptor?? [ 1590.519860][ T1059] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1590.560119][ T1059] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1590.599187][ T1059] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1590.631662][ T1059] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 1590.674770][ T1059] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1590.705957][ T1059] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1590.733349][ T1059] usb 5-1: USB disconnect, device number 73 [ 1590.767807][ T5824] usb 3-1: USB disconnect, device number 49 [ 1591.246800][ T29] audit: type=1800 audit(2000000023.656:11738): pid=20106 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.26781" name="[kvm-gmem]" dev="anon_inodefs" ino=237964 res=0 errno=0 [ 1591.339780][T20110] sp0: Synchronizing with TNC [ 1591.346360][T11417] [ 1591.348689][T11417] ===================================================== [ 1591.355616][T11417] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 1591.363055][T11417] 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 Not tainted [ 1591.370155][T11417] ----------------------------------------------------- [ 1591.377085][T11417] kworker/u8:39/11417 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1591.385038][T11417] ffffffff8f4a7e18 (disc_data_lock){.+.+}-{3:3}, at: sixpack_write_wakeup+0x30/0x440 [ 1591.394585][T11417] [ 1591.394585][T11417] and this task is already holding: [ 1591.401924][T11417] ffffffff9a713958 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x107/0xa40 [ 1591.410595][T11417] which would create a new lock dependency: [ 1591.416474][T11417] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock){.+.+}-{3:3} [ 1591.424124][T11417] [ 1591.424124][T11417] but this new dependency connects a HARDIRQ-irq-safe lock: [ 1591.433639][T11417] (&port_lock_key){-.-.}-{3:3} [ 1591.433658][T11417] [ 1591.433658][T11417] ... which became HARDIRQ-irq-safe at: [ 1591.446170][T11417] lock_acquire+0x1ed/0x550 [ 1591.450746][T11417] _raw_spin_lock_irqsave+0xd5/0x120 [ 1591.456095][T11417] serial8250_handle_irq+0x6d/0xb80 [ 1591.461358][T11417] serial8250_default_handle_irq+0xd1/0x1f0 [ 1591.467316][T11417] serial8250_interrupt+0xa9/0x1f0 [ 1591.472497][T11417] __handle_irq_event_percpu+0x29a/0xa60 [ 1591.478281][T11417] handle_irq_event+0x89/0x1f0 [ 1591.483108][T11417] handle_edge_irq+0x25f/0xc20 [ 1591.488031][T11417] __common_interrupt+0x136/0x230 [ 1591.493156][T11417] common_interrupt+0xb4/0xd0 [ 1591.497901][T11417] asm_common_interrupt+0x26/0x40 [ 1591.503033][T11417] acpi_safe_halt+0x21/0x30 [ 1591.507614][T11417] acpi_idle_enter+0xe4/0x140 [ 1591.512368][T11417] cpuidle_enter_state+0x109/0x470 [ 1591.517577][T11417] cpuidle_enter+0x5d/0xa0 [ 1591.522113][T11417] do_idle+0x372/0x5c0 [ 1591.526252][T11417] cpu_startup_entry+0x42/0x60 [ 1591.531083][T11417] rest_init+0x2dc/0x300 [ 1591.535406][T11417] start_kernel+0x484/0x510 [ 1591.539972][T11417] x86_64_start_reservations+0x2a/0x30 [ 1591.545512][T11417] x86_64_start_kernel+0x9f/0xa0 [ 1591.550553][T11417] common_startup_64+0x13e/0x147 [ 1591.555593][T11417] [ 1591.555593][T11417] to a HARDIRQ-irq-unsafe lock: [ 1591.562588][T11417] (disc_data_lock){.+.+}-{3:3} [ 1591.562607][T11417] [ 1591.562607][T11417] ... which became HARDIRQ-irq-unsafe at: [ 1591.575379][T11417] ... [ 1591.575385][T11417] lock_acquire+0x1ed/0x550 [ 1591.582520][T11417] _raw_read_lock+0x36/0x50 [ 1591.587094][T11417] sixpack_ioctl+0x81/0x550 [ 1591.591658][T11417] tty_ioctl+0x998/0xdc0 [ 1591.595964][T11417] __se_sys_ioctl+0xf5/0x170 [ 1591.600615][T11417] do_syscall_64+0xf3/0x230 [ 1591.605182][T11417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.611246][T11417] [ 1591.611246][T11417] other info that might help us debug this: [ 1591.611246][T11417] [ 1591.621463][T11417] Possible interrupt unsafe locking scenario: [ 1591.621463][T11417] [ 1591.629774][T11417] CPU0 CPU1 [ 1591.635141][T11417] ---- ---- [ 1591.640498][T11417] lock(disc_data_lock); [ 1591.644811][T11417] local_irq_disable(); [ 1591.651543][T11417] lock(&port_lock_key); [ 1591.658374][T11417] lock(disc_data_lock); [ 1591.665202][T11417] [ 1591.668635][T11417] lock(&port_lock_key); [ 1591.673118][T11417] [ 1591.673118][T11417] *** DEADLOCK *** [ 1591.673118][T11417] [ 1591.681244][T11417] 6 locks held by kworker/u8:39/11417: [ 1591.686681][T11417] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1591.699539][T11417] #1: ffffc9001037fc60 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1591.711166][T11417] #2: ffff888024cc0ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x860 [ 1591.720196][T11417] #3: ffff8880618fc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1591.729488][T11417] #4: ffffffff9a713958 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x107/0xa40 [ 1591.738596][T11417] #5: ffff8880618fc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1591.747878][T11417] [ 1591.747878][T11417] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 1591.758276][T11417] -> (&port_lock_key){-.-.}-{3:3} { [ 1591.763464][T11417] IN-HARDIRQ-W at: [ 1591.767424][T11417] lock_acquire+0x1ed/0x550 [ 1591.773558][T11417] _raw_spin_lock_irqsave+0xd5/0x120 [ 1591.780492][T11417] serial8250_handle_irq+0x6d/0xb80 [ 1591.787320][T11417] serial8250_default_handle_irq+0xd1/0x1f0 [ 1591.794848][T11417] serial8250_interrupt+0xa9/0x1f0 [ 1591.801590][T11417] __handle_irq_event_percpu+0x29a/0xa60 [ 1591.808871][T11417] handle_irq_event+0x89/0x1f0 [ 1591.815294][T11417] handle_edge_irq+0x25f/0xc20 [ 1591.821786][T11417] __common_interrupt+0x136/0x230 [ 1591.828448][T11417] common_interrupt+0xb4/0xd0 [ 1591.834753][T11417] asm_common_interrupt+0x26/0x40 [ 1591.841411][T11417] acpi_safe_halt+0x21/0x30 [ 1591.847546][T11417] acpi_idle_enter+0xe4/0x140 [ 1591.853855][T11417] cpuidle_enter_state+0x109/0x470 [ 1591.860604][T11417] cpuidle_enter+0x5d/0xa0 [ 1591.866652][T11417] do_idle+0x372/0x5c0 [ 1591.872361][T11417] cpu_startup_entry+0x42/0x60 [ 1591.878763][T11417] rest_init+0x2dc/0x300 [ 1591.884645][T11417] start_kernel+0x484/0x510 [ 1591.890774][T11417] x86_64_start_reservations+0x2a/0x30 [ 1591.897858][T11417] x86_64_start_kernel+0x9f/0xa0 [ 1591.904421][T11417] common_startup_64+0x13e/0x147 [ 1591.911018][T11417] IN-SOFTIRQ-W at: [ 1591.915007][T11417] lock_acquire+0x1ed/0x550 [ 1591.921248][T11417] _raw_spin_lock_irqsave+0xd5/0x120 [ 1591.928172][T11417] serial8250_handle_irq+0x6d/0xb80 [ 1591.935002][T11417] serial8250_default_handle_irq+0xd1/0x1f0 [ 1591.942527][T11417] serial8250_interrupt+0xa9/0x1f0 [ 1591.949395][T11417] __handle_irq_event_percpu+0x29a/0xa60 [ 1591.956686][T11417] handle_irq_event+0x89/0x1f0 [ 1591.963171][T11417] handle_edge_irq+0x25f/0xc20 [ 1591.969561][T11417] __common_interrupt+0x136/0x230 [ 1591.976215][T11417] common_interrupt+0x5e/0xd0 [ 1591.982513][T11417] asm_common_interrupt+0x26/0x40 [ 1591.989167][T11417] handle_softirqs+0x1ef/0x9b0 [ 1591.995561][T11417] __irq_exit_rcu+0xf7/0x220 [ 1592.001777][T11417] irq_exit_rcu+0x9/0x30 [ 1592.007644][T11417] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1592.014905][T11417] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1592.022520][T11417] finish_task_switch+0x1ea/0x870 [ 1592.029171][T11417] schedule_tail+0xf/0xb0 [ 1592.035172][T11417] ret_from_fork+0x24/0x80 [ 1592.041218][T11417] ret_from_fork_asm+0x1a/0x30 [ 1592.047625][T11417] INITIAL USE at: [ 1592.051517][T11417] lock_acquire+0x1ed/0x550 [ 1592.057562][T11417] _raw_spin_lock_irqsave+0xd5/0x120 [ 1592.064388][T11417] serial8250_do_set_termios+0x4da/0x1c70 [ 1592.071665][T11417] uart_set_options+0x3eb/0x730 [ 1592.078096][T11417] serial8250_console_setup+0x3db/0x670 [ 1592.085197][T11417] univ8250_console_setup+0x426/0x530 [ 1592.092112][T11417] try_enable_preferred_console+0x46b/0x5c0 [ 1592.099550][T11417] register_console+0x37a/0xfd0 [ 1592.105980][T11417] univ8250_console_init+0x52/0x90 [ 1592.112686][T11417] console_init+0x1b8/0x6f0 [ 1592.118737][T11417] start_kernel+0x2dd/0x510 [ 1592.124785][T11417] x86_64_start_reservations+0x2a/0x30 [ 1592.131823][T11417] x86_64_start_kernel+0x9f/0xa0 [ 1592.138317][T11417] common_startup_64+0x13e/0x147 [ 1592.144801][T11417] } [ 1592.147273][T11417] ... key at: [] port_lock_key+0x0/0x20 [ 1592.154883][T11417] [ 1592.154883][T11417] the dependencies between the lock to be acquired [ 1592.154890][T11417] and HARDIRQ-irq-unsafe lock: [ 1592.168800][T11417] -> (disc_data_lock){.+.+}-{3:3} { [ 1592.173990][T11417] HARDIRQ-ON-R at: [ 1592.177949][T11417] lock_acquire+0x1ed/0x550 [ 1592.184098][T11417] _raw_read_lock+0x36/0x50 [ 1592.190247][T11417] sixpack_ioctl+0x81/0x550 [ 1592.196384][T11417] tty_ioctl+0x998/0xdc0 [ 1592.202254][T11417] __se_sys_ioctl+0xf5/0x170 [ 1592.208469][T11417] do_syscall_64+0xf3/0x230 [ 1592.214608][T11417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.222143][T11417] SOFTIRQ-ON-R at: [ 1592.226119][T11417] lock_acquire+0x1ed/0x550 [ 1592.232335][T11417] _raw_read_lock+0x36/0x50 [ 1592.238465][T11417] sixpack_ioctl+0x81/0x550 [ 1592.244594][T11417] tty_ioctl+0x998/0xdc0 [ 1592.250463][T11417] __se_sys_ioctl+0xf5/0x170 [ 1592.256675][T11417] do_syscall_64+0xf3/0x230 [ 1592.262807][T11417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.270328][T11417] INITIAL USE at: [ 1592.274198][T11417] lock_acquire+0x1ed/0x550 [ 1592.280256][T11417] _raw_write_lock_irq+0xd3/0x120 [ 1592.286827][T11417] sixpack_close+0x2c/0x280 [ 1592.292871][T11417] tty_ldisc_kill+0xa3/0x1a0 [ 1592.299009][T11417] tty_ldisc_release+0x174/0x200 [ 1592.305500][T11417] tty_release_struct+0x2b/0xe0 [ 1592.311891][T11417] tty_release+0xd06/0x12c0 [ 1592.317935][T11417] __fput+0x3e9/0x9f0 [ 1592.323551][T11417] task_work_run+0x24f/0x310 [ 1592.329684][T11417] syscall_exit_to_user_mode+0x13f/0x340 [ 1592.336859][T11417] do_syscall_64+0x100/0x230 [ 1592.342997][T11417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.350433][T11417] INITIAL READ USE at: [ 1592.354743][T11417] lock_acquire+0x1ed/0x550 [ 1592.361244][T11417] _raw_read_lock+0x36/0x50 [ 1592.367723][T11417] sixpack_ioctl+0x81/0x550 [ 1592.374199][T11417] tty_ioctl+0x998/0xdc0 [ 1592.380434][T11417] __se_sys_ioctl+0xf5/0x170 [ 1592.387056][T11417] do_syscall_64+0xf3/0x230 [ 1592.393556][T11417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.401441][T11417] } [ 1592.403945][T11417] ... key at: [] disc_data_lock+0x18/0x100 [ 1592.411902][T11417] ... acquired at: [ 1592.415677][T11417] lock_acquire+0x1ed/0x550 [ 1592.420348][T11417] _raw_read_lock+0x36/0x50 [ 1592.425021][T11417] sixpack_write_wakeup+0x30/0x440 [ 1592.430294][T11417] tty_wakeup+0xbb/0x100 [ 1592.434711][T11417] tty_port_default_wakeup+0xa6/0xf0 [ 1592.440169][T11417] serial8250_tx_chars+0x6e2/0x930 [ 1592.445454][T11417] __start_tx+0x32e/0x470 [ 1592.449950][T11417] __uart_start+0x2bc/0x450 [ 1592.454605][T11417] uart_write+0x280/0xa40 [ 1592.459089][T11417] sixpack_receive_buf+0x490/0x1640 [ 1592.464443][T11417] tty_ldisc_receive_buf+0x11f/0x170 [ 1592.469901][T11417] tty_port_default_receive_buf+0x6d/0xa0 [ 1592.475809][T11417] flush_to_ldisc+0x328/0x860 [ 1592.480678][T11417] process_scheduled_works+0xa66/0x1840 [ 1592.486490][T11417] worker_thread+0x870/0xd30 [ 1592.491269][T11417] kthread+0x7a9/0x920 [ 1592.495496][T11417] ret_from_fork+0x4b/0x80 [ 1592.500065][T11417] ret_from_fork_asm+0x1a/0x30 [ 1592.504987][T11417] [ 1592.507290][T11417] [ 1592.507290][T11417] stack backtrace: [ 1592.513159][T11417] CPU: 1 UID: 0 PID: 11417 Comm: kworker/u8:39 Not tainted 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1592.513172][T11417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1592.513181][T11417] Workqueue: events_unbound flush_to_ldisc [ 1592.513198][T11417] Call Trace: [ 1592.513205][T11417] [ 1592.513212][T11417] dump_stack_lvl+0x241/0x360 [ 1592.513229][T11417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1592.513242][T11417] ? __pfx__printk+0x10/0x10 [ 1592.513257][T11417] ? print_shortest_lock_dependencies+0xf2/0x160 [ 1592.513270][T11417] validate_chain+0x4ebd/0x5920 [ 1592.513288][T11417] ? __pfx_validate_chain+0x10/0x10 [ 1592.513301][T11417] ? validate_chain+0x11e/0x5920 [ 1592.513318][T11417] ? validate_chain+0x11e/0x5920 [ 1592.513331][T11417] ? mark_lock+0x9a/0x360 [ 1592.513344][T11417] ? mark_lock+0x9a/0x360 [ 1592.513356][T11417] __lock_acquire+0x1397/0x2100 [ 1592.513371][T11417] lock_acquire+0x1ed/0x550 [ 1592.513382][T11417] ? sixpack_write_wakeup+0x30/0x440 [ 1592.513395][T11417] ? __pfx_lock_acquire+0x10/0x10 [ 1592.513405][T11417] ? tty_port_default_wakeup+0x9e/0xf0 [ 1592.513417][T11417] ? do_raw_spin_lock+0x14f/0x370 [ 1592.513426][T11417] ? __pfx_lock_release+0x10/0x10 [ 1592.513438][T11417] ? ldsem_down_read_trylock+0x192/0x200 [ 1592.513452][T11417] ? tty_ldisc_ref+0x1c/0x80 [ 1592.513463][T11417] _raw_read_lock+0x36/0x50 [ 1592.513475][T11417] ? sixpack_write_wakeup+0x30/0x440 [ 1592.513484][T11417] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1592.513493][T11417] sixpack_write_wakeup+0x30/0x440 [ 1592.513504][T11417] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1592.513514][T11417] tty_wakeup+0xbb/0x100 [ 1592.513525][T11417] tty_port_default_wakeup+0xa6/0xf0 [ 1592.513538][T11417] serial8250_tx_chars+0x6e2/0x930 [ 1592.513553][T11417] __start_tx+0x32e/0x470 [ 1592.513565][T11417] __uart_start+0x2bc/0x450 [ 1592.513576][T11417] uart_write+0x280/0xa40 [ 1592.513587][T11417] sixpack_receive_buf+0x490/0x1640 [ 1592.513598][T11417] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1592.513608][T11417] ? tty_ldisc_ref+0x1c/0x80 [ 1592.513619][T11417] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 1592.513633][T11417] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 1592.513644][T11417] tty_ldisc_receive_buf+0x11f/0x170 [ 1592.513656][T11417] tty_port_default_receive_buf+0x6d/0xa0 [ 1592.513669][T11417] flush_to_ldisc+0x328/0x860 [ 1592.513683][T11417] ? process_scheduled_works+0x976/0x1840 [ 1592.513693][T11417] process_scheduled_works+0xa66/0x1840 [ 1592.513709][T11417] ? __pfx_process_scheduled_works+0x10/0x10 [ 1592.513720][T11417] ? assign_work+0x364/0x3d0 [ 1592.513730][T11417] worker_thread+0x870/0xd30 [ 1592.513742][T11417] ? __kthread_parkme+0x169/0x1d0 [ 1592.513753][T11417] ? __pfx_worker_thread+0x10/0x10 [ 1592.513763][T11417] kthread+0x7a9/0x920 [ 1592.513773][T11417] ? __pfx_kthread+0x10/0x10 [ 1592.513785][T11417] ? __pfx_worker_thread+0x10/0x10 [ 1592.513795][T11417] ? __pfx_kthread+0x10/0x10 [ 1592.513805][T11417] ? __pfx_kthread+0x10/0x10 [ 1592.513817][T11417] ? __pfx_kthread+0x10/0x10 [ 1592.513827][T11417] ? _raw_spin_unlock_irq+0x23/0x50 [ 1592.513837][T11417] ? lockdep_hardirqs_on+0x99/0x150 [ 1592.513849][T11417] ? __pfx_kthread+0x10/0x10 [ 1592.513860][T11417] ret_from_fork+0x4b/0x80 [ 1592.513871][T11417] ? __pfx_kthread+0x10/0x10 [ 1592.513882][T11417] ret_from_fork_asm+0x1a/0x30 [ 1592.513895][T11417] [ 1592.832651][ C1] vkms_vblank_simulate: vblank timer overrun [ 1592.844977][T20115] netlink: 'syz.4.26783': attribute type 3 has an invalid length. [ 1592.853006][T20115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26783'. [ 1592.964053][ T5824] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1593.132061][ T5824] usb 4-1: Using ep0 maxpacket: 8 [ 1593.140593][ T5824] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1593.149791][T11418] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1593.160898][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.169274][ T5824] usb 4-1: Product: syz [ 1593.173428][ T5824] usb 4-1: Manufacturer: syz [ 1593.178446][ T5824] usb 4-1: SerialNumber: syz [ 1593.184250][ T5824] usb 4-1: config 0 descriptor?? [ 1593.408213][ T5824] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1594.056631][ T5824] usb write operation failed. (-71) [ 1594.064431][ T5824] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1594.076343][ T5824] dvbdev: DVB: registering new adapter (Terratec H7) [ 1594.083787][ T5824] usb 4-1: media controller created [ 1594.089240][ T5824] usb read operation failed. (-71) [ 1594.094960][ T5824] usb write operation failed. (-71) [ 1594.101746][ T5824] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1594.112621][ T5824] usb 4-1: USB disconnect, device number 28