last executing test programs: 1m15.403400581s ago: executing program 4 (id=11753): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) 1m15.278626123s ago: executing program 4 (id=11756): r0 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000740)='\b', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 1m15.156883756s ago: executing program 4 (id=11758): r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m12.845128504s ago: executing program 4 (id=11783): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 1m11.955214689s ago: executing program 4 (id=11794): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/64, 0x40}, 0xfffffffb}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m11.605066303s ago: executing program 4 (id=11797): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="0259473bb7c011", 0x7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1m10.916316881s ago: executing program 32 (id=11797): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="0259473bb7c011", 0x7) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 4.792629859s ago: executing program 5 (id=12503): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x2, 0x6, 0x1101, 0x1}) 4.661596354s ago: executing program 5 (id=12504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 4.456295091s ago: executing program 5 (id=12508): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r2, 0xf}, 0x8) 3.461019881s ago: executing program 5 (id=12521): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x44, 0x800, 0x23456}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000001c0)={0x81, 0xffffffffffffffff, 0xd, {0x7, 0x3}, 0x3}, 0x1) 3.207730398s ago: executing program 5 (id=12523): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000001300)="92", 0x2) read$char_usb(r0, 0x0, 0x0) 2.523595893s ago: executing program 2 (id=12534): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x18}}}}}, 0x36) 2.294550164s ago: executing program 2 (id=12536): r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.294213616s ago: executing program 3 (id=12537): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)={0x0, 0x8c7c8f6744f0b74e, 0x8, "d4a911bbd136601b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) 2.183892388s ago: executing program 2 (id=12538): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = dup3(r0, r1, 0x0) mq_notify(r2, 0x0) 1.975670353s ago: executing program 2 (id=12539): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000001100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001c0000000000000000000000070000004404730001000000e736f53aa500a029b4fff380b1208d2517faab10d57912ea57285a512c15273dd90873706db2ce3f1fd2709c8fca22cf77f29736f1e80045368c6d61cfefe19acae96300000000000000022fa79f00000000d114c4e16cb59c3b813222b23474ebab0566f62853"], 0x40}, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) read$char_usb(r1, &(0x7f0000000080)=""/139, 0xfdef) 1.352790827s ago: executing program 1 (id=12541): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000015000100faffffff00000020020100fe", @ANYRES32=r1, @ANYBLOB="140003"], 0x34}}, 0x0) 1.216406559s ago: executing program 1 (id=12543): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 1.119619821s ago: executing program 0 (id=12544): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r1, 0x400, 0x2) 1.079677641s ago: executing program 1 (id=12545): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x10, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x0, 0x0, 0x4d, 0x0, "8ddbb51a3cfd954e41e8ccb2650fa60067fb9bbcf0feeee4dc036d0675af58b39fa8d54ee8323507a61a95cf134ce8f605671338c7f8838a00bdfba71b43b828c7de258b6b9ca1fc52bcc83e2a016a00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r0, 0x81) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8400", 0x14, 0x6, 0xbcdbf0dd7e1a3bc5, @remote, @mcast2, {[], {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 1.051986215s ago: executing program 2 (id=12546): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40800, 0x0) getdents(r1, 0x0, 0x0) 894.54035ms ago: executing program 0 (id=12547): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x84) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYRES8]) 861.757173ms ago: executing program 5 (id=12548): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000100b060a5000000000000109022400010000500009040002010300000009210000000122f80409058103"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)={0x2, 0x2, 0x0, 0xd, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x28}, 0x1, 0x7}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 829.864749ms ago: executing program 1 (id=12549): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f00000a3000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x1380000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 735.598536ms ago: executing program 0 (id=12550): bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000740)={&(0x7f0000000340)="ff64878dec", 0x0, 0x0, 0x0, 0x43e3, 0xffffffffffffffff, 0x4}, 0x38) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1, &(0x7f0000000440)=""/88, 0x58}, 0xa46}], 0x1, 0x2102, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 645.513299ms ago: executing program 0 (id=12551): mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000240)='./file0\x00', 0x200) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file1\x00') 631.213586ms ago: executing program 1 (id=12552): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000005080000024d564b"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)) 556.751753ms ago: executing program 0 (id=12553): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) 497.408211ms ago: executing program 0 (id=12554): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x19, 0x7, {0x7, 0xe, "fe52d83db7"}}, 0x0}, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x0, 0xf, 0x6, "aed2e1a3120f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000640)={0x40, 0xd, 0x3, "9de1cd"}, 0x0, 0x0, 0x0, 0x0}) 458.356052ms ago: executing program 1 (id=12555): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x5, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 422.802715ms ago: executing program 3 (id=12556): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r1, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x80000002}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffefffff8, 0x3fff}) 284.625274ms ago: executing program 3 (id=12557): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) 211.95901ms ago: executing program 3 (id=12558): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x11, r0, 0x0) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) 134.349477ms ago: executing program 3 (id=12559): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r0], 0x38}}, 0x10) 104.710596ms ago: executing program 2 (id=12560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = socket$packet(0x11, 0x2, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) 0s ago: executing program 3 (id=12561): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f0000000540)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) fcntl$setstatus(r1, 0x4, 0x2400) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): tring descriptor 0 read error: -22 [ 711.074332][ T924] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 711.083821][ T924] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 711.113354][ T924] usb 5-1: config 0 descriptor?? [ 711.119663][T30765] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 711.133235][ T924] hub 5-1:0.0: bad descriptor, ignoring hub [ 711.139539][ T924] hub 5-1:0.0: probe with driver hub failed with error -5 [ 711.361389][ T24] kaweth 3-1:0.235: Error setting receive filter [ 711.378639][ T24] kaweth 3-1:0.235: probe with driver kaweth failed with error -5 [ 711.407904][ T24] usb 3-1: USB disconnect, device number 106 [ 711.444784][ T924] usb 5-1: USB disconnect, device number 98 [ 711.989477][T30786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11232'. [ 712.418187][T30709] Set syz1 is full, maxelem 65536 reached [ 713.700987][T30847] binder: 30844:30847 ioctl c0306201 200000001d40 returned -14 [ 714.700363][T30878] batadv_slave_1: entered promiscuous mode [ 715.069020][T30850] syz.4.11255 (30850): drop_caches: 2 [ 715.261237][T30904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11277'. [ 716.734454][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 716.734470][ T30] audit: type=1326 audit(1750972014.912:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30958 comm="syz.2.11298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6078e929 code=0x7fc00000 [ 716.762947][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.101604][T30992] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 717.168717][T30997] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.11315'. [ 717.259695][T31001] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11317'. [ 717.277145][T31001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11317'. [ 717.289117][T31001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11317'. [ 717.359309][ T30] audit: type=1326 audit(1750972015.552:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30958 comm="syz.2.11298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab6072ab19 code=0x7fc00000 [ 717.381670][ C0] vkms_vblank_simulate: vblank timer overrun [ 717.532557][T31010] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 718.992644][T31064] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11344'. [ 719.045980][T31062] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.11344'. [ 719.524093][ T924] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 719.704082][ T924] usb 2-1: Using ep0 maxpacket: 16 [ 719.717845][ T924] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 719.752742][ T924] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 719.787663][ T924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 719.819285][ T924] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 719.825154][T31078] netlink: 'syz.2.11350': attribute type 4 has an invalid length. [ 719.836538][ T924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.864270][ T924] usb 2-1: Product: syz [ 719.868460][ T924] usb 2-1: Manufacturer: syz [ 719.873065][ T924] usb 2-1: SerialNumber: syz [ 720.142216][T31070] IPVS: You probably need to specify IP address on multicast interface. [ 720.163821][T31070] IPVS: Error connecting to the multicast addr [ 720.319371][ T924] usb 2-1: 0:2 : does not exist [ 720.802376][ T30] audit: type=1326 audit(1750972018.992:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31102 comm="syz.4.11361" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f302458e929 code=0x0 [ 720.883726][T31097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.954056][ T43] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 720.963286][ T924] usb 2-1: USB disconnect, device number 111 [ 720.986491][ T6422] udevd[6422]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.119159][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 721.127335][ T43] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 721.139391][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 721.151002][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 721.162397][ T43] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 721.174011][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 721.189631][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 721.199007][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.430503][ T43] usb 3-1: usb_control_msg returned -32 [ 721.447870][ T43] usbtmc 3-1:16.0: can't read capabilities [ 721.510342][T31118] cifs: Unknown parameter 'f,' [ 721.706982][T31131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11373'. [ 722.612426][T31170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11390'. [ 722.743806][T31174] netlink: 'syz.4.11392': attribute type 1 has an invalid length. [ 722.751931][T31174] netlink: 'syz.4.11392': attribute type 2 has an invalid length. [ 723.779353][ T9] usb 3-1: USB disconnect, device number 107 [ 725.703981][T29566] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 725.909704][T29566] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 725.936631][T31240] netlink: 'syz.1.11419': attribute type 1 has an invalid length. [ 725.954014][T29566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 725.965053][T31240] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.11419'. [ 725.981112][T29566] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 726.004505][T29566] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 726.044179][T29566] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 726.084225][T29566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.104840][T29566] usb 5-1: config 0 descriptor?? [ 726.543514][T29566] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x1 [ 726.572826][T29566] plantronics 0003:047F:FFFF.0088: unknown main item tag 0x0 [ 726.593239][T29566] plantronics 0003:047F:FFFF.0088: No inputs registered, leaving [ 726.673986][T29566] plantronics 0003:047F:FFFF.0088: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 726.907736][ T43] usb 5-1: USB disconnect, device number 99 [ 726.978077][T31261] fido_id[31261]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 727.111680][T31272] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 727.123322][T31273] netlink: 80 bytes leftover after parsing attributes in process `syz.2.11433'. [ 727.473792][T31280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11438'. [ 727.659560][ T30] audit: type=1326 audit(1750972025.852:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02dfb2ab19 code=0x7ffc0000 [ 727.719803][ T30] audit: type=1326 audit(1750972025.852:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02dfb2ab19 code=0x7ffc0000 [ 727.800883][ T30] audit: type=1326 audit(1750972025.852:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02dfb2ab19 code=0x7ffc0000 [ 727.957907][ T30] audit: type=1326 audit(1750972025.852:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02dfb2ab19 code=0x7ffc0000 [ 728.075784][ T30] audit: type=1326 audit(1750972025.852:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02dfb2ab19 code=0x7ffc0000 [ 728.240870][ T30] audit: type=1326 audit(1750972025.852:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02dfb2ab19 code=0x7ffc0000 [ 728.367789][ T30] audit: type=1326 audit(1750972025.852:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02dfb2ab19 code=0x7ffc0000 [ 728.489541][ T30] audit: type=1326 audit(1750972025.852:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02dfb2ab19 code=0x7ffc0000 [ 728.504096][T31311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.604025][ T30] audit: type=1326 audit(1750972025.852:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02dfb2ab19 code=0x7ffc0000 [ 728.732968][ T30] audit: type=1326 audit(1750972025.852:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31289 comm="syz.1.11442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f02dfb2ab19 code=0x7ffc0000 [ 728.755304][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.925641][ T43] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 729.087142][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 729.103723][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 729.142020][T31323] sctp: [Deprecated]: syz.0.11458 (pid 31323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 729.142020][T31323] Use struct sctp_sack_info instead [ 729.189592][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 729.278300][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 729.294317][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 729.307892][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 729.317302][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.556064][ T43] usb 4-1: GET_CAPABILITIES returned 0 [ 729.561727][ T43] usbtmc 4-1:16.0: can't read capabilities [ 729.779511][ T43] usb 4-1: USB disconnect, device number 98 [ 730.444288][T31354] sctp: [Deprecated]: syz.1.11472 (pid 31354) Use of struct sctp_assoc_value in delayed_ack socket option. [ 730.444288][T31354] Use struct sctp_sack_info instead [ 731.047383][T31375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11482'. [ 731.344254][ T43] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 731.352054][ T24] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 731.472705][T31395] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.11492'. [ 731.514431][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 731.522686][ T43] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 731.537737][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 731.548347][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.559722][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 731.573790][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 731.583333][ T43] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 731.599213][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.611167][ T43] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.635331][ T24] usb 3-1: config 0 descriptor?? [ 731.642456][ T43] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 731.657610][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.848953][T31408] unknown channel width for channel at 909000KHz? [ 731.858480][T31408] unknown channel width for channel at 909000KHz? [ 731.865645][T31408] unknown channel width for channel at 909000KHz? [ 731.885214][ T43] usb 5-1: GET_CAPABILITIES returned 0 [ 731.892448][ T43] usbtmc 5-1:16.0: can't read capabilities [ 732.052111][ T24] appleir 0003:05AC:8241.0089: unknown main item tag 0x0 [ 732.059556][ T24] appleir 0003:05AC:8241.0089: unknown main item tag 0x0 [ 732.066908][ T24] appleir 0003:05AC:8241.0089: unknown main item tag 0x0 [ 732.074476][ T24] appleir 0003:05AC:8241.0089: unknown main item tag 0x0 [ 732.081546][ T24] appleir 0003:05AC:8241.0089: unknown main item tag 0x0 [ 732.090165][ T24] appleir 0003:05AC:8241.0089: No inputs registered, leaving [ 732.105678][ T24] appleir 0003:05AC:8241.0089: hiddev1,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 732.115710][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.135034][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.144126][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.154030][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.163120][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.172175][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.181248][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.195416][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.204503][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.213556][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.222607][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.232761][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.241865][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.250954][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.260047][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 732.270405][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 732.281899][ T9] usb 3-1: USB disconnect, device number 108 [ 732.304976][T31413] fido_id[31413]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 732.330139][T29566] usb 5-1: USB disconnect, device number 100 [ 733.508150][T31456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11519'. [ 734.053937][ T9] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 734.287725][ T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 734.307265][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.344070][ T9] usb 5-1: Product: syz [ 734.348282][ T9] usb 5-1: Manufacturer: syz [ 734.353298][ T9] usb 5-1: SerialNumber: syz [ 734.384098][ T9] usb 5-1: config 0 descriptor?? [ 734.714132][ T43] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 734.865539][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.887103][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 734.932112][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 734.964067][ T43] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 734.980438][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.023697][ T43] usb 3-1: config 0 descriptor?? [ 735.410431][ T9] usb 5-1: Firmware version (0.0) predates our first public release. [ 735.437869][ T9] usb 5-1: Please update to version 0.2 or newer [ 735.519197][ T43] plantronics 0003:047F:FFFF.008A: No inputs registered, leaving [ 735.554461][ T43] plantronics 0003:047F:FFFF.008A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 735.591761][ T9] usb 5-1: USB disconnect, device number 101 [ 735.811969][ T5923] usb 3-1: USB disconnect, device number 109 [ 735.833671][T31536] fido_id[31536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 736.485285][T31551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.540068][T31554] loop2: detected capacity change from 0 to 7 [ 736.550627][ T6422] Dev loop2: unable to read RDB block 7 [ 736.558151][ T6422] loop2: unable to read partition table [ 736.565856][ T6422] loop2: partition table beyond EOD, truncated [ 736.573124][T31554] Dev loop2: unable to read RDB block 7 [ 736.579756][T31554] loop2: unable to read partition table [ 736.594876][T31554] loop2: partition table beyond EOD, truncated [ 736.595721][ T5923] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 736.602409][T31554] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 736.754113][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 736.771436][ T5923] usb 4-1: config 0 has no interfaces? [ 736.780890][ T5923] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 736.793075][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 736.803546][ T5923] usb 4-1: SerialNumber: syz [ 736.811354][ T5923] usb 4-1: config 0 descriptor?? [ 736.994138][T29566] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 737.053492][ T196] tipc: Subscription rejected, illegal request [ 737.061606][ T43] usb 4-1: USB disconnect, device number 99 [ 737.155661][T29566] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.166848][T29566] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 737.177023][T29566] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 737.187764][T29566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 737.195953][T29566] usb 5-1: SerialNumber: syz [ 737.415260][T29566] usb 5-1: 0:2 : does not exist [ 737.437293][T29566] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 737.467224][T29566] usb 5-1: USB disconnect, device number 102 [ 737.523733][ T6422] udevd[6422]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.605795][T31568] gre0: entered allmulticast mode [ 737.613173][T31568] netlink: 'syz.2.11565': attribute type 39 has an invalid length. [ 738.364397][ T43] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 738.523944][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 738.531962][ T43] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 738.541196][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.549448][ T924] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 738.557150][ T43] usb 2-1: Product: syz [ 738.561302][ T43] usb 2-1: Manufacturer: syz [ 738.566089][ T43] usb 2-1: SerialNumber: syz [ 738.577388][ T43] usb 2-1: config 0 descriptor?? [ 738.593714][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 738.704074][ T24] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 738.715826][ T924] usb 3-1: Using ep0 maxpacket: 16 [ 738.730423][ T924] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 738.739734][ T924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.751712][ T924] usb 3-1: config 0 descriptor?? [ 738.761574][ T924] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 738.842801][ T5831] hid-generic 0000:0000:0000.008B: unknown main item tag 0x7 [ 738.850916][ T5831] hid-generic 0000:0000:0000.008B: ignoring exceeding usage max [ 738.859989][ T5831] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 738.870775][ T5831] hid-generic 0000:0000:0000.008B: unknown main item tag 0x6 [ 738.878664][ T5831] hid-generic 0000:0000:0000.008B: reserved main item tag 0xd [ 738.887649][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.901445][ T5831] hid-generic 0000:0000:0000.008B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 738.911436][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.922885][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 738.939028][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 738.948324][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.002635][ T24] usb 4-1: config 0 descriptor?? [ 739.007420][T31609] fido_id[31609]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 739.132634][T31611] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 739.134150][ T5831] IPVS: starting estimator thread 0... [ 739.235625][T31613] IPVS: using max 28 ests per chain, 67200 per kthread [ 739.421789][ T24] plantronics 0003:047F:FFFF.008C: unknown main item tag 0x6 [ 739.430597][ T24] plantronics 0003:047F:FFFF.008C: No inputs registered, leaving [ 739.444437][ T24] plantronics 0003:047F:FFFF.008C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 739.600417][ T43] gspca_sonixj: reg_w1 err -71 [ 739.684258][ T43] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 739.688068][ T9] usb 4-1: USB disconnect, device number 100 [ 739.694698][ T43] usb 2-1: USB disconnect, device number 112 [ 739.803010][ T5923] usb 3-1: USB disconnect, device number 110 [ 740.175846][T31626] loop2: detected capacity change from 0 to 7 [ 740.183077][T31626] Dev loop2: unable to read RDB block 7 [ 740.188856][T31626] loop2: AHDI p3 [ 740.192542][T31626] loop2: partition table partially beyond EOD, truncated [ 740.659587][ T30] kauditd_printk_skb: 687 callbacks suppressed [ 740.659603][ T30] audit: type=1326 audit(1750972038.852:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31645 comm="syz.0.11597" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda0998e929 code=0x0 [ 741.234255][ T24] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 741.394397][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 741.403110][ T24] usb 4-1: config 0 has no interfaces? [ 741.410390][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 741.426538][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.466510][ T24] usb 4-1: config 0 descriptor?? [ 741.662846][T31687] input: syz0 as /devices/virtual/input/input89 [ 741.775020][T31693] loop7: detected capacity change from 0 to 7 [ 741.823630][T31693] Dev loop7: unable to read RDB block 7 [ 741.850212][T31693] loop7: unable to read partition table [ 741.867855][T31693] loop7: partition table beyond EOD, truncated [ 741.886580][T31693] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 741.929684][T31662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.946810][T31662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.984829][ T43] usb 4-1: USB disconnect, device number 101 [ 742.464072][ T9] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 742.647147][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 742.662585][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.684821][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.711695][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 742.744060][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 742.764862][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.790298][ T9] usb 2-1: config 0 descriptor?? [ 743.029143][T31729] input: syz1 as /devices/virtual/input/input90 [ 743.227679][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 743.253251][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.008D/input/input91 [ 743.334512][ T9] microsoft 0003:045E:07DA.008D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 743.344998][T31739] tun0: tun_chr_ioctl cmd 1074025675 [ 743.372710][T31739] tun0: persist enabled [ 743.392401][T31739] tun0: tun_chr_ioctl cmd 1074025675 [ 743.412588][T31739] tun0: persist enabled [ 743.501667][ T24] usb 2-1: USB disconnect, device number 113 [ 744.314073][ T43] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 744.467134][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 744.478373][ T43] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 744.506364][ T43] usb 5-1: config 0 has no interface number 0 [ 744.527750][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 744.541214][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.562018][ T43] usb 5-1: Product: syz [ 744.572609][ T43] usb 5-1: Manufacturer: syz [ 744.583132][ T43] usb 5-1: SerialNumber: syz [ 744.609544][ T43] usb 5-1: config 0 descriptor?? [ 744.624721][ T43] smsc95xx v2.0.0 [ 744.979130][T31770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 745.033455][ T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 745.074123][ T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 745.257509][T31780] ALSA: mixer_oss: invalid OSS volume '' [ 745.263415][T31780] ALSA: mixer_oss: invalid OSS volume '' [ 745.485757][ T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 745.505917][ T43] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 745.529311][ T43] usb 5-1: USB disconnect, device number 103 [ 745.564906][ T5923] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 745.735863][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.748670][ T5923] usb 3-1: config 0 interface 0 has no altsetting 0 [ 745.760899][ T5923] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 745.776036][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.786694][ T5923] usb 3-1: Product: syz [ 745.793471][ T5923] usb 3-1: Manufacturer: syz [ 745.798232][ T5923] usb 3-1: SerialNumber: syz [ 745.806085][ T5923] usb 3-1: config 0 descriptor?? [ 745.813297][ T5923] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 745.823572][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 745.833445][ T5923] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 745.845585][ T5923] usb 3-1: media controller created [ 745.862776][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 745.906141][ T5923] DVB: Unable to find symbol tda10046_attach() [ 745.912566][ T5923] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 745.927155][ T5923] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 745.944339][ T9] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 746.097771][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 746.121121][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 746.137104][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.146118][ T9] usb 2-1: Product: syz [ 746.150417][ T9] usb 2-1: Manufacturer: syz [ 746.158373][ T9] usb 2-1: SerialNumber: syz [ 746.173958][ T9] usb 2-1: config 0 descriptor?? [ 746.196085][ T9] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 746.394194][ T9] gp8psk: usb in 128 operation failed. [ 746.407931][ T9] gp8psk: usb in 137 operation failed. [ 746.421706][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 746.424374][ T24] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 746.436543][ T9] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 746.449463][ T9] usb 2-1: media controller created [ 746.501324][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 746.534509][ T9] gp8psk_fe: Frontend revision 1 attached [ 746.541320][ T9] usb 2-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 746.561125][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 746.634092][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 746.647765][ T24] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 746.674702][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.682712][ T24] usb 5-1: Product: syz [ 746.703245][ T24] usb 5-1: Manufacturer: syz [ 746.719120][ T24] usb 5-1: SerialNumber: syz [ 746.748049][ T24] usb 5-1: config 0 descriptor?? [ 746.764563][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 746.785676][ T9] gp8psk: found Genpix USB device pID = 201 (hex) [ 746.849942][ T5923] dvb_usb_m920x 3-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 746.870358][ T5923] usb 3-1: USB disconnect, device number 111 [ 746.974336][ T924] usb 2-1: USB disconnect, device number 114 [ 746.986213][ T24] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 747.059629][T31835] syzkaller1: entered promiscuous mode [ 747.065768][T31835] syzkaller1: entered allmulticast mode [ 747.087723][ T24] usb 5-1: USB disconnect, device number 104 [ 747.118178][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.134093][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.148043][ T924] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 748.017729][T31867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11689'. [ 749.618336][T31926] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 750.005744][ T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 750.213969][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.226124][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.236707][ T9] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 750.267582][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.294793][ T9] usb 5-1: config 0 descriptor?? [ 750.304312][ T43] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 750.466381][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 750.494158][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 750.523945][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 750.554407][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.635917][T31958] syzkaller1: entered promiscuous mode [ 750.641460][T31958] syzkaller1: entered allmulticast mode [ 750.784456][ T43] usb 3-1: usb_control_msg returned -32 [ 750.790083][ T43] usbtmc 3-1:16.0: can't read capabilities [ 751.039432][T31972] syzkaller1: entered promiscuous mode [ 751.045865][T31972] syzkaller1: entered allmulticast mode [ 751.159905][ T9] hid-led 0003:27B8:01ED.008E: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 751.219134][ T9] hid-led 0003:27B8:01ED.008E: ThingM blink(1) initialized [ 751.386537][ T9] usb 5-1: USB disconnect, device number 105 [ 751.447329][T31989] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11739'. [ 751.463582][ T30] audit: type=1804 audit(1750972049.652:1370): pid=31987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11738" name="/" dev="pidfs" ino=31987 res=1 errno=0 [ 751.721634][T32004] netlink: 256 bytes leftover after parsing attributes in process `syz.0.11746'. [ 751.829960][T32011] syzkaller1: entered promiscuous mode [ 751.836154][T32011] syzkaller1: entered allmulticast mode [ 752.484292][ T5924] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 752.514031][ T924] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 752.658453][ T5924] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 752.669034][ T5924] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 752.678826][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 752.688245][ T5924] usb 4-1: config 1 has no interface number 0 [ 752.694890][ T5924] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 752.706559][ T924] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 752.708494][ T5924] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 752.719074][ T924] usb 5-1: config 1 has no interface number 0 [ 752.732939][ T5924] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 752.744649][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.752886][ T924] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.766644][ T924] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 752.767631][ T5924] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 752.775966][ T924] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 752.807683][ T924] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 752.816839][ T924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.833951][ T924] usb 5-1: Product: syz [ 752.838140][ T924] usb 5-1: Manufacturer: syz [ 752.842732][ T924] usb 5-1: SerialNumber: syz [ 752.992406][T32031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.003614][T32031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.101788][ T43] usb 3-1: USB disconnect, device number 112 [ 753.374899][ T5924] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 753.401557][T32055] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 753.602608][ T5924] usb 4-1: USB disconnect, device number 102 [ 753.620831][ T5924] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 753.696431][ T924] cdc_ncm 5-1:1.1: bind() failure [ 753.976939][ T924] usb 5-1: USB disconnect, device number 106 [ 754.488463][T32087] loop2: detected capacity change from 0 to 7 [ 754.518277][ T6422] Dev loop2: unable to read RDB block 7 [ 754.534452][ T6422] loop2: unable to read partition table [ 754.552409][ T6422] loop2: partition table beyond EOD, truncated [ 754.589154][T32087] Dev loop2: unable to read RDB block 7 [ 754.595426][T32087] loop2: unable to read partition table [ 754.601469][T32087] loop2: partition table beyond EOD, truncated [ 754.610839][T32087] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 754.933966][ T5924] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 755.116193][ T5924] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 755.146394][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.163906][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.173662][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 755.205468][ T5924] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 755.225001][ T5924] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 755.244473][ T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 755.255411][ T5924] usb 4-1: Manufacturer: syz [ 755.270930][ T5924] usb 4-1: config 0 descriptor?? [ 755.431134][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.451777][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 755.472495][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 755.510456][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 755.534196][ T9] usb 3-1: SerialNumber: syz [ 755.729567][ T5924] appleir 0003:05AC:8243.008F: unknown main item tag 0x0 [ 755.741144][ T5924] appleir 0003:05AC:8243.008F: No inputs registered, leaving [ 755.780829][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.788885][ T9] usb 3-1: 0:2 : does not exist [ 755.814355][ T5924] appleir 0003:05AC:8243.008F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 755.869527][T32116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11798'. [ 755.886385][ T9] usb 3-1: USB disconnect, device number 113 [ 755.966498][ T6422] udevd[6422]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 756.016482][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.088490][ T5924] usb 4-1: USB disconnect, device number 103 [ 756.160927][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.328749][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.684520][ T36] bridge_slave_1: left allmulticast mode [ 756.690207][ T36] bridge_slave_1: left promiscuous mode [ 756.720292][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.862530][ T36] bridge_slave_0: left allmulticast mode [ 756.874022][ T36] bridge_slave_0: left promiscuous mode [ 756.918992][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.094100][T31608] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 757.266821][T31608] usb 2-1: Using ep0 maxpacket: 32 [ 757.294992][T31608] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 757.313578][T31608] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 757.362577][T31608] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 757.406458][T31608] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 757.410648][ T36] tipc: Disabling bearer [ 757.429925][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 757.440346][T31608] usb 2-1: config 0 interface 0 has no altsetting 0 [ 757.450634][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 757.460339][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 757.462895][T31608] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 757.474106][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 757.484553][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 757.507415][T31608] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 757.541956][T31608] usb 2-1: Product: syz [ 757.576275][T31608] usb 2-1: Manufacturer: syz [ 757.597501][T31608] usb 2-1: SerialNumber: syz [ 757.633566][T31608] usb 2-1: config 0 descriptor?? [ 757.669393][T31608] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 757.698767][T31608] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 757.882694][ T36] team0: Port device geneve0 removed [ 757.990801][ T36] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 758.062307][ T36] bond0 (unregistering): (slave 5@ÿ): Releasing backup interface [ 758.088351][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.105688][ T36] bond0 (unregistering): Released all slaves [ 758.131572][ T36] bond1 (unregistering): Released all slaves [ 758.158497][ T36] bond2 (unregistering): Released all slaves [ 758.177278][ T36] bond3 (unregistering): Released all slaves [ 758.522261][ T5924] usb 2-1: USB disconnect, device number 115 [ 758.539087][ T5924] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 758.863270][T32155] chnl_net:caif_netlink_parms(): no params data found [ 759.307790][T32155] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.331221][T32155] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.364685][T32155] bridge_slave_0: entered allmulticast mode [ 759.372384][T32155] bridge_slave_0: entered promiscuous mode [ 759.399221][T32200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11819'. [ 759.399937][T32155] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.474136][T32155] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.481399][T32155] bridge_slave_1: entered allmulticast mode [ 759.503013][T32155] bridge_slave_1: entered promiscuous mode [ 759.513942][ T51] Bluetooth: hci4: command tx timeout [ 759.609026][T32155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.614299][ T924] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 759.629834][T32155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.810752][T32155] team0: Port device team_slave_0 added [ 759.813472][ T924] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 759.847344][ T924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.852080][T32155] team0: Port device team_slave_1 added [ 759.868171][ T924] usb 4-1: Product: syz [ 759.872364][ T924] usb 4-1: Manufacturer: syz [ 759.888410][ T924] usb 4-1: SerialNumber: syz [ 759.911501][ T924] usb 4-1: config 0 descriptor?? [ 760.019109][ T36] tipc: Left network mode [ 760.029983][T32155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.074643][T32155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.144405][T32155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.187076][ T924] usb 4-1: USB disconnect, device number 104 [ 760.278992][T32155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.292186][T32155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 760.349740][T32155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.530770][T32155] hsr_slave_0: entered promiscuous mode [ 760.547913][T32155] hsr_slave_1: entered promiscuous mode [ 760.577174][T32155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.587257][T32155] Cannot create hsr debugfs directory [ 760.664171][ T36] hsr_slave_0: left promiscuous mode [ 760.680130][ T36] hsr_slave_1: left promiscuous mode [ 761.046026][T32246] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11834'. [ 761.471202][ T36] team0 (unregistering): Port device team_slave_1 removed [ 761.521653][ T36] team0 (unregistering): Port device team_slave_0 removed [ 761.594164][ T51] Bluetooth: hci4: command tx timeout [ 762.208826][T32265] netlink: 'syz.3.11841': attribute type 13 has an invalid length. [ 762.609920][T32265] veth0_macvtap: left allmulticast mode [ 762.919508][ T36] IPVS: stop unused estimator thread 0... [ 763.043193][T32286] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 763.092385][T32155] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 763.118274][T32155] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 763.153014][T32155] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 763.173479][T32155] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 763.196039][ T924] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 763.356014][ T924] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 763.373351][T32155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.383223][ T924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.416329][ T924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.449378][T32155] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.461939][ T924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 763.495196][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.502390][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.521036][ T924] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 763.535777][ T924] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 763.560238][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.567426][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.574329][ T924] usb 2-1: Manufacturer: syz [ 763.595333][ T924] usb 2-1: config 0 descriptor?? [ 763.676241][ T51] Bluetooth: hci4: command tx timeout [ 763.941498][T32155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.061162][T32155] veth0_vlan: entered promiscuous mode [ 764.070809][ T924] appleir 0003:05AC:8243.0090: unknown main item tag 0x0 [ 764.092119][ T924] appleir 0003:05AC:8243.0090: No inputs registered, leaving [ 764.112344][T32155] veth1_vlan: entered promiscuous mode [ 764.120797][ T924] appleir 0003:05AC:8243.0090: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 764.205914][T32155] veth0_macvtap: entered promiscuous mode [ 764.242048][T32155] veth1_macvtap: entered promiscuous mode [ 764.311751][T32155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 764.358577][T32155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 764.369239][ T924] usb 2-1: USB disconnect, device number 116 [ 764.387755][T32155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.413895][T32155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.434675][T32155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.443395][T32155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.640005][T30195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.663692][T30195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.713762][T30195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.726020][T30195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.914046][ T43] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 765.078565][ T43] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 765.112212][ T43] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 765.135111][ T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 765.154307][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.180478][T32336] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 765.234879][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 765.252246][T32357] macvlan1: entered promiscuous mode [ 765.294238][ T5924] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 765.305404][T32357] bond0: entered promiscuous mode [ 765.318522][T32357] bond_slave_0: entered promiscuous mode [ 765.364524][T32357] bond_slave_1: entered promiscuous mode [ 765.388011][T32357] hsr1: entered allmulticast mode [ 765.413374][T32357] macvlan1: entered allmulticast mode [ 765.441715][T32357] veth1_vlan: entered allmulticast mode [ 765.468183][T32357] bond0: entered allmulticast mode [ 765.476294][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 765.492488][ T43] usb 3-1: USB disconnect, device number 114 [ 765.492502][T32357] bond_slave_0: entered allmulticast mode [ 765.511680][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 765.533357][ T5924] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 765.551219][T32357] bond_slave_1: entered allmulticast mode [ 765.581706][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.610271][T32366] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 765.638799][ T5924] usb 2-1: config 0 descriptor?? [ 765.655253][T32366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 765.667688][T32366] hsr0: entered promiscuous mode [ 765.674675][T32366] hsr0: entered allmulticast mode [ 765.681069][T32366] hsr_slave_0: entered allmulticast mode [ 765.689902][T32366] hsr_slave_1: entered allmulticast mode [ 765.754080][ T51] Bluetooth: hci4: command tx timeout [ 765.883685][ T5924] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 766.125312][T32382] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11870'. [ 766.300584][ T5924] usb 2-1: USB disconnect, device number 117 [ 766.540374][T32405] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 767.188329][T32431] macvlan0: entered allmulticast mode [ 767.193758][T32431] veth1_vlan: entered allmulticast mode [ 767.249684][T32432] veth1_vlan: left allmulticast mode [ 767.302312][T32432] macvlan0 (unregistering): left allmulticast mode [ 767.990136][ T30] audit: type=1326 audit(1750972066.182:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32445 comm="syz.5.11889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da1b8e929 code=0x7ffc0000 [ 768.087678][ T30] audit: type=1326 audit(1750972066.182:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32445 comm="syz.5.11889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da1b8e929 code=0x7ffc0000 [ 768.184058][ T30] audit: type=1326 audit(1750972066.212:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32445 comm="syz.5.11889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5da1b8e929 code=0x7ffc0000 [ 768.206581][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.301097][ T30] audit: type=1326 audit(1750972066.232:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32445 comm="syz.5.11889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da1b8e929 code=0x7ffc0000 [ 768.399417][ T30] audit: type=1326 audit(1750972066.232:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32445 comm="syz.5.11889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5da1b8e929 code=0x7ffc0000 [ 768.421951][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.480742][ T30] audit: type=1326 audit(1750972066.232:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32445 comm="syz.5.11889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da1b8e929 code=0x7ffc0000 [ 768.503294][ C0] vkms_vblank_simulate: vblank timer overrun [ 768.560947][ T30] audit: type=1326 audit(1750972066.232:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32445 comm="syz.5.11889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da1b8e929 code=0x7ffc0000 [ 768.589215][ T30] audit: type=1326 audit(1750972066.252:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32445 comm="syz.5.11889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5da1b8e929 code=0x7ffc0000 [ 768.704113][ T30] audit: type=1326 audit(1750972066.252:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32445 comm="syz.5.11889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5da1b2ab19 code=0x7ffc0000 [ 768.788241][T32464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11894'. [ 768.800826][ T30] audit: type=1326 audit(1750972066.252:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32445 comm="syz.5.11889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5da1b8e929 code=0x7ffc0000 [ 768.902839][T32464] netlink: 'syz.2.11894': attribute type 1 has an invalid length. [ 768.913546][T32464] netlink: 'syz.2.11894': attribute type 2 has an invalid length. [ 769.789056][T32500] netlink: 'syz.1.11906': attribute type 16 has an invalid length. [ 769.814097][T32500] netlink: 'syz.1.11906': attribute type 3 has an invalid length. [ 769.869143][T32500] netlink: 'syz.1.11906': attribute type 1 has an invalid length. [ 769.974102][T32500] netlink: 'syz.1.11906': attribute type 1 has an invalid length. [ 769.982257][T32500] netlink: 'syz.1.11906': attribute type 2 has an invalid length. [ 770.001354][T32500] netlink: 64006 bytes leftover after parsing attributes in process `syz.1.11906'. [ 771.162665][T32556] loop2: detected capacity change from 0 to 7 [ 771.197423][T32558] binder: 32557:32558 ioctl c0306201 200000000140 returned -14 [ 771.207215][ T6422] Dev loop2: unable to read RDB block 7 [ 771.216259][ T6422] loop2: AHDI p1 p2 p3 p4 [ 771.228272][ T6422] loop2: partition table partially beyond EOD, truncated [ 771.257005][ T6422] loop2: p1 start 1601398130 is beyond EOD, truncated [ 771.274118][ T6422] loop2: p2 start 1702059890 is beyond EOD, truncated [ 771.282906][ T6422] loop2: p3 size 4244635647 extends beyond EOD, truncated [ 771.318039][T32556] Dev loop2: unable to read RDB block 7 [ 771.323947][T32556] loop2: AHDI p1 p2 p3 p4 [ 771.341179][T32556] loop2: partition table partially beyond EOD, truncated [ 771.349482][T32556] loop2: p1 start 1601398130 is beyond EOD, truncated [ 771.362346][T32556] loop2: p2 start 1702059890 is beyond EOD, truncated [ 771.369460][T32556] loop2: p3 size 4244635647 extends beyond EOD, truncated [ 771.461855][ T6422] udevd[6422]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 771.527952][ T6422] udevd[6422]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 771.723897][ T5924] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 771.764948][T32580] batadv_slave_1: entered promiscuous mode [ 771.772290][T32579] batadv_slave_1: left promiscuous mode [ 771.894367][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 771.903273][ T5924] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 771.921691][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 771.941155][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 771.952333][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 771.964513][ T5924] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.979189][ T5924] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 771.989118][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.215082][ T5924] usb 3-1: usb_control_msg returned -32 [ 772.221073][ T5924] usbtmc 3-1:16.0: can't read capabilities [ 772.358942][T32603] input: syz1 as /devices/virtual/input/input92 [ 772.384024][ T924] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 772.544275][ T924] usb 4-1: Using ep0 maxpacket: 32 [ 772.553158][T32611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11948'. [ 772.563585][ T924] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 772.582446][ T924] usb 4-1: config 0 has no interface number 0 [ 772.597402][ T924] usb 4-1: config 0 interface 184 has no altsetting 0 [ 772.612089][T32613] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 772.625058][ T924] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 772.643225][ T924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.660465][ T924] usb 4-1: Product: syz [ 772.670662][ T924] usb 4-1: Manufacturer: syz [ 772.679844][ T924] usb 4-1: SerialNumber: syz [ 772.698632][ T924] usb 4-1: config 0 descriptor?? [ 772.727864][ T924] smsc75xx v1.0.0 [ 772.757293][T32620] binder: 32618:32620 ioctl c0306201 2000000003c0 returned -14 [ 772.820037][ T5924] usb 3-1: USB disconnect, device number 115 [ 772.927339][T32625] netlink: 'syz.1.11954': attribute type 3 has an invalid length. [ 773.244106][T29566] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 773.313934][T31608] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 773.321636][ T924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 773.333045][ T924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 773.414059][T29566] usb 2-1: Using ep0 maxpacket: 32 [ 773.420781][T29566] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 773.431169][T29566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.446572][T29566] usb 2-1: config 0 descriptor?? [ 773.484440][T31608] usb 6-1: Using ep0 maxpacket: 32 [ 773.491751][T31608] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 773.500457][T31608] usb 6-1: config 0 has no interface number 0 [ 773.507083][T31608] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 773.518228][T31608] usb 6-1: config 0 interface 85 has no altsetting 0 [ 773.534871][T31608] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 773.544238][T31608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.552430][ T924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 773.565167][T31608] usb 6-1: Product: syz [ 773.569731][T31608] usb 6-1: Manufacturer: syz [ 773.584007][ T924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 773.593679][T31608] usb 6-1: SerialNumber: syz [ 773.598634][ T924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 773.613129][T31608] usb 6-1: config 0 descriptor?? [ 773.621156][ T924] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 773.628642][T32638] netlink: 'syz.0.11961': attribute type 2 has an invalid length. [ 773.631517][ T924] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 773.639217][ T5924] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 773.654795][ T924] usb 4-1: USB disconnect, device number 105 [ 773.664183][T29566] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 773.674926][T29566] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 773.700797][T29566] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 773.715675][T29566] usb 2-1: media controller created [ 773.753054][T29566] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 773.816510][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 773.828284][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 773.840354][ T5924] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 773.853871][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.873492][T29566] az6027: usb out operation failed. (-71) [ 773.880264][T32634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.891216][T29566] az6027: usb out operation failed. (-71) [ 773.898069][ T5924] usb 3-1: config 0 descriptor?? [ 773.907386][T32634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.915490][T29566] stb0899_attach: Driver disabled by Kconfig [ 773.926423][T29566] az6027: no front-end attached [ 773.926423][T29566] [ 773.939476][T29566] az6027: usb out operation failed. (-71) [ 773.947925][T29566] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 773.961958][T29566] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input94 [ 773.980208][T29566] dvb-usb: schedule remote query interval to 400 msecs. [ 773.988335][T29566] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 774.020953][T29566] usb 2-1: USB disconnect, device number 118 [ 774.078398][T29566] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 774.231870][T32650] syzkaller1: entered promiscuous mode [ 774.237856][T32650] syzkaller1: entered allmulticast mode [ 774.340900][T31608] appletouch 6-1:0.85: Geyser mode initialized. [ 774.351435][T31608] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input93 [ 774.576452][T29566] usb 6-1: USB disconnect, device number 2 [ 774.618895][T29566] appletouch 6-1:0.85: input: appletouch disconnected [ 774.732686][ T5924] uclogic 0003:5543:0781.0091: reserved main item tag 0xd [ 774.746975][ T5924] uclogic 0003:5543:0781.0091: No inputs registered, leaving [ 774.773558][ T5924] uclogic 0003:5543:0781.0091: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.2-1/input0 [ 774.919719][T31608] usb 3-1: USB disconnect, device number 116 [ 776.028512][T32726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11984'. [ 776.260146][T31608] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 776.336462][T32730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11987'. [ 776.427158][T31608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.448420][T31608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.465653][T31608] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 776.495725][T31608] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 776.506370][T31608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.523232][T31608] usb 3-1: config 0 descriptor?? [ 776.947689][T31608] plantronics 0003:047F:FFFF.0092: reserved main item tag 0xe [ 776.981738][T31608] plantronics 0003:047F:FFFF.0092: unknown main item tag 0x0 [ 777.001097][T31608] plantronics 0003:047F:FFFF.0092: No inputs registered, leaving [ 777.040232][T31608] plantronics 0003:047F:FFFF.0092: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 777.212844][T32761] input: syz1 as /devices/virtual/input/input95 [ 777.230676][ T924] usb 3-1: USB disconnect, device number 117 [ 777.528204][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 777.528221][ T30] audit: type=1326 audit(1750972075.722:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.0.12001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda0992ab19 code=0x7ffc0000 [ 777.592266][ T30] audit: type=1326 audit(1750972075.772:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.0.12001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda0992ab19 code=0x7ffc0000 [ 777.620714][ T30] audit: type=1326 audit(1750972075.772:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.0.12001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda0992ab19 code=0x7ffc0000 [ 777.658051][ T30] audit: type=1326 audit(1750972075.772:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.0.12001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda0992ab19 code=0x7ffc0000 [ 777.730997][ T30] audit: type=1326 audit(1750972075.782:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.0.12001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda0992ab19 code=0x7ffc0000 [ 777.756412][ T30] audit: type=1326 audit(1750972075.782:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.0.12001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda0992ab19 code=0x7ffc0000 [ 777.901092][ T30] audit: type=1326 audit(1750972075.782:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.0.12001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda0992ab19 code=0x7ffc0000 [ 778.000846][ T317] syzkaller1: entered promiscuous mode [ 778.012338][ T317] syzkaller1: entered allmulticast mode [ 778.048181][ T30] audit: type=1326 audit(1750972075.782:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.0.12001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda0992ab19 code=0x7ffc0000 [ 778.070437][ C0] vkms_vblank_simulate: vblank timer overrun [ 778.106510][ T30] audit: type=1326 audit(1750972075.782:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.0.12001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda0992ab19 code=0x7ffc0000 [ 778.209945][ T30] audit: type=1326 audit(1750972075.782:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=306 comm="syz.0.12001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fda0992ab19 code=0x7ffc0000 [ 778.961000][ T341] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.968129][T29566] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 779.145925][T29566] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.173910][T29566] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 779.224699][T29566] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 779.253908][T29566] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 779.261951][T29566] usb 6-1: SerialNumber: syz [ 779.499171][T29566] usb 6-1: 0:2 : does not exist [ 779.558326][T29566] usb 6-1: USB disconnect, device number 3 [ 779.637506][ T355] input: syz1 as /devices/virtual/input/input96 [ 779.649785][ T6422] udevd[6422]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 779.694332][ T355] input: failed to attach handler leds to device input96, error: -6 [ 780.005781][ T369] syzkaller1: entered promiscuous mode [ 780.014658][ T369] syzkaller1: entered allmulticast mode [ 780.642441][ T386] xt_hashlimit: size too large, truncated to 1048576 [ 783.013990][ T924] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 783.177113][ T924] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 783.206350][ T924] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 783.224219][ T924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.232237][ T924] usb 3-1: Product: syz [ 783.271245][ T924] usb 3-1: Manufacturer: syz [ 783.282109][ T924] usb 3-1: SerialNumber: syz [ 783.518299][ T924] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 118 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 783.747369][ T924] usb 3-1: USB disconnect, device number 118 [ 783.878423][ T480] syzkaller1: entered promiscuous mode [ 783.894085][ T480] syzkaller1: entered allmulticast mode [ 783.966022][ T454] usblp0: removed [ 784.158506][ T487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12058'. [ 784.170077][ T487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12058'. [ 784.221599][ T487] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 784.250687][ T487] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 784.909449][ T30] kauditd_printk_skb: 2115 callbacks suppressed [ 784.909468][ T30] audit: type=1326 audit(1750972083.102:3578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=501 comm="syz.2.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6078e929 code=0x7ffc0000 [ 785.030585][ T30] audit: type=1326 audit(1750972083.102:3579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=501 comm="syz.2.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6078e929 code=0x7ffc0000 [ 785.113218][ T30] audit: type=1326 audit(1750972083.122:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=501 comm="syz.2.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fab6078e929 code=0x7ffc0000 [ 785.213711][ T30] audit: type=1326 audit(1750972083.162:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=501 comm="syz.2.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6078e929 code=0x7ffc0000 [ 785.323427][ T30] audit: type=1326 audit(1750972083.182:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=501 comm="syz.2.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6078e929 code=0x7ffc0000 [ 785.384002][ T30] audit: type=1326 audit(1750972083.202:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=501 comm="syz.2.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fab6078e929 code=0x7ffc0000 [ 785.513758][ T30] audit: type=1326 audit(1750972083.202:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=501 comm="syz.2.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab6078e929 code=0x7ffc0000 [ 785.611260][ T30] audit: type=1326 audit(1750972083.202:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=501 comm="syz.2.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fab6078e929 code=0x7ffc0000 [ 785.720055][ T30] audit: type=1326 audit(1750972083.202:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=501 comm="syz.2.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab6072ab19 code=0x7ffc0000 [ 785.884322][ T30] audit: type=1326 audit(1750972083.202:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=501 comm="syz.2.12062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab6072ab19 code=0x7ffc0000 [ 786.494095][ T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 786.676219][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 786.686350][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 786.720893][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.755870][ T9] usb 3-1: config 0 descriptor?? [ 786.773718][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 787.797738][ T9] gspca_sunplus: reg_w_riv err -71 [ 787.804707][ T9] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 787.831373][ T584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12085'. [ 787.831541][ T9] usb 3-1: USB disconnect, device number 119 [ 789.334406][ T645] kvm: kvm [644]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xf8 [ 789.445921][ T649] dlm: non-version read from control device 4 [ 790.103896][ T924] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 790.264169][ T924] usb 6-1: Using ep0 maxpacket: 16 [ 790.286331][ T924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.317758][ T924] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 790.338553][ T924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.348556][ T30] kauditd_printk_skb: 91 callbacks suppressed [ 790.348571][ T30] audit: type=1326 audit(1750972088.542:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=692 comm="syz.0.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 790.354310][ T43] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 790.365078][ T30] audit: type=1326 audit(1750972088.552:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=692 comm="syz.0.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 790.376957][ C1] vkms_vblank_simulate: vblank timer overrun [ 790.380219][ T924] usb 6-1: config 0 descriptor?? [ 790.408695][ T30] audit: type=1326 audit(1750972088.582:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=692 comm="syz.0.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 790.467737][ T30] audit: type=1326 audit(1750972088.582:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=692 comm="syz.0.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 790.496349][ T30] audit: type=1326 audit(1750972088.582:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=692 comm="syz.0.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 790.522727][ T30] audit: type=1326 audit(1750972088.642:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=692 comm="syz.0.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 790.563377][ T30] audit: type=1326 audit(1750972088.642:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=692 comm="syz.0.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 790.575864][ T43] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 790.589175][ T30] audit: type=1326 audit(1750972088.642:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=692 comm="syz.0.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 790.622071][ T43] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 790.641884][ T43] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 790.674255][ T30] audit: type=1326 audit(1750972088.642:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=692 comm="syz.0.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 790.684557][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.722359][ T30] audit: type=1326 audit(1750972088.642:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=692 comm="syz.0.12124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 790.744736][ C1] vkms_vblank_simulate: vblank timer overrun [ 790.845850][ T924] appleir 0003:05AC:8241.0093: unknown main item tag 0x0 [ 790.852976][ T924] appleir 0003:05AC:8241.0093: unknown main item tag 0x0 [ 790.862554][ T924] appleir 0003:05AC:8241.0093: unknown main item tag 0x0 [ 790.889853][ T924] appleir 0003:05AC:8241.0093: unknown main item tag 0x0 [ 790.897923][ T924] appleir 0003:05AC:8241.0093: unknown main item tag 0x0 [ 790.911903][ T924] appleir 0003:05AC:8241.0093: No inputs registered, leaving [ 790.926960][ T924] appleir 0003:05AC:8241.0093: hiddev0,hidraw0: USB HID v0.05 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 790.988040][ T43] usb 3-1: usb_control_msg returned -32 [ 790.993702][ T43] usbtmc 3-1:16.0: can't read capabilities [ 791.073915][T29566] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 791.137217][ T924] usb 6-1: USB disconnect, device number 4 [ 791.254064][T29566] usb 2-1: Using ep0 maxpacket: 16 [ 791.266364][T29566] usb 2-1: config 0 has no interfaces? [ 791.275775][T29566] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 791.286445][T29566] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 791.294579][T29566] usb 2-1: Manufacturer: syz [ 791.302864][T29566] usb 2-1: config 0 descriptor?? [ 791.331394][ T721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 791.545905][ T706] lo: entered promiscuous mode [ 791.552413][ T706] tunl0: entered promiscuous mode [ 791.559605][ T706] gre0: entered promiscuous mode [ 791.567417][ T706] gretap0: entered promiscuous mode [ 791.572630][ T706] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 791.597146][T29566] usb 2-1: USB disconnect, device number 119 [ 791.743936][ T43] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 791.906191][ T43] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 791.915680][ T43] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 791.926374][ T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 791.936137][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 791.947600][ T43] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 791.960384][ T43] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 791.969653][ T43] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 791.977988][ T43] usb 4-1: Product: syz [ 791.982154][ T43] usb 4-1: Manufacturer: syz [ 791.992921][ T43] cdc_wdm 4-1:1.0: skipping garbage [ 791.998228][ T43] cdc_wdm 4-1:1.0: skipping garbage [ 792.005694][ T43] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 792.011628][ T43] cdc_wdm 4-1:1.0: Unknown control protocol [ 792.074318][ T924] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 792.226148][ T924] usb 6-1: Using ep0 maxpacket: 32 [ 792.233443][ T924] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 792.253761][ T924] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 792.277137][ T924] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 792.298315][ T924] usb 6-1: config 1 has no interface number 0 [ 792.304565][ T924] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 792.321167][ T924] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 792.335205][ T924] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 792.349946][ T924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.370784][ T924] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 792.570819][ T924] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 793.009065][T29566] usb 6-1: USB disconnect, device number 5 [ 793.020336][T29566] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 793.115021][ T924] usb 3-1: USB disconnect, device number 120 [ 793.416932][T29566] usb 4-1: USB disconnect, device number 106 [ 794.812594][ T801] loop7: detected capacity change from 0 to 6 [ 794.889527][ T6422] Dev loop7: unable to read RDB block 6 [ 794.902080][ T6422] loop7: unable to read partition table [ 794.927208][ T6422] loop7: partition table beyond EOD, truncated [ 794.948730][ T801] Dev loop7: unable to read RDB block 6 [ 794.958643][ T801] loop7: unable to read partition table [ 794.984304][ T801] loop7: partition table beyond EOD, truncated [ 794.998874][ T801] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 795.418017][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 795.418034][ T30] audit: type=1800 audit(1750972093.612:3697): pid=818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12176" name="nullb0" dev="devtmpfs" ino=4186 res=0 errno=0 [ 796.155782][ T852] netlink: 27 bytes leftover after parsing attributes in process `syz.5.12187'. [ 796.506089][ T865] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12194'. [ 796.620942][ T870] input: syz0 as /devices/virtual/input/input97 [ 796.634220][ T870] input: failed to attach handler leds to device input97, error: -6 [ 796.832463][ T873] ip6gretap0: entered promiscuous mode [ 796.855709][ T873] macsec1: entered promiscuous mode [ 796.864127][ T873] macsec1: entered allmulticast mode [ 796.884274][ T873] ip6gretap0: entered allmulticast mode [ 796.936945][ T873] ip6gretap0: left allmulticast mode [ 796.942537][ T873] ip6gretap0: left promiscuous mode [ 797.373719][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.488339][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.504357][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.522888][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.540531][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.548253][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.563904][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.571399][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.579328][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.586950][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.594575][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.602046][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.609808][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.617491][ T924] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 797.625468][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.634091][ T43] hid-generic 00A0:0006:0003.0094: unknown main item tag 0x0 [ 797.701119][ T43] hid-generic 00A0:0006:0003.0094: hidraw0: HID v0.05 Device [syz1] on syz0 [ 797.774057][ T924] usb 3-1: Using ep0 maxpacket: 16 [ 797.789147][ T924] usb 3-1: config 0 has no interfaces? [ 797.801519][ T924] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 797.823105][ T924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.859164][ T924] usb 3-1: Product: syz [ 797.871175][ T924] usb 3-1: Manufacturer: syz [ 797.888368][ T924] usb 3-1: SerialNumber: syz [ 797.925970][ T924] usb 3-1: config 0 descriptor?? [ 798.013969][ T5924] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 798.163472][ T924] usb 3-1: USB disconnect, device number 121 [ 798.192750][ T5924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 798.218878][ T5924] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 798.229104][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.245130][ T5924] usb 2-1: config 0 descriptor?? [ 798.250797][ T920] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 798.694564][ T5924] elan 0003:04F3:0755.0095: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 798.898377][ T5924] usb 2-1: USB disconnect, device number 120 [ 799.510842][ T986] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12233'. [ 799.535182][ T988] vivid-000: disconnect [ 799.542574][ T983] vivid-000: reconnect [ 799.708290][ T995] batadv_slave_1: entered promiscuous mode [ 799.716133][ T995] batadv_slave_1: left promiscuous mode [ 800.274227][ T924] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 800.394274][ T43] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 800.434142][ T924] usb 2-1: Using ep0 maxpacket: 32 [ 800.442777][ T924] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 800.458050][ T924] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 800.468529][ T924] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 800.481023][ T924] usb 2-1: Product: syz [ 800.486011][ T924] usb 2-1: Manufacturer: syz [ 800.490761][ T924] usb 2-1: SerialNumber: syz [ 800.507485][ T924] usb 2-1: config 0 descriptor?? [ 800.517594][ T1018] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 800.536284][ T924] hub 2-1:0.0: bad descriptor, ignoring hub [ 800.542734][ T924] hub 2-1:0.0: probe with driver hub failed with error -5 [ 800.555133][ T43] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 800.563512][ T43] usb 4-1: config 150 has no interface number 0 [ 800.575522][ T43] usb 4-1: config 150 interface 204 has no altsetting 0 [ 800.598414][ T43] usb 4-1: config 150 interface 1 has no altsetting 0 [ 800.609651][ T43] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 800.622985][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.632608][ T43] usb 4-1: Product: syz [ 800.639298][ T43] usb 4-1: Manufacturer: syz [ 800.646230][ T43] usb 4-1: SerialNumber: syz [ 800.654131][ T9] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 800.844244][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 800.861110][ T9] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 800.881175][ T9] usb 3-1: config 0 has no interface number 0 [ 800.885256][ T43] xr_serial 4-1:150.204: xr_serial converter detected [ 800.896152][ T9] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 800.912905][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.922174][ T9] usb 3-1: Product: syz [ 800.930176][ T9] usb 3-1: Manufacturer: syz [ 800.935235][ T9] usb 3-1: SerialNumber: syz [ 800.945204][ T9] usb 3-1: config 0 descriptor?? [ 801.343925][T31608] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 801.483973][ T1018] usb 2-1: reset high-speed USB device number 121 using dummy_hcd [ 801.498793][T31608] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 801.508527][T31608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.516806][T31608] usb 6-1: Product: syz [ 801.521012][T31608] usb 6-1: Manufacturer: syz [ 801.525705][T31608] usb 6-1: SerialNumber: syz [ 801.533649][T31608] usb 6-1: config 0 descriptor?? [ 801.546456][T31608] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 801.564309][ T9] mos7840 3-1:0.225: required endpoints missing [ 801.578691][ T9] usb 3-1: USB disconnect, device number 122 [ 801.635682][ T1018] usb 2-1: device firmware changed [ 801.641499][ T10] usb 2-1: USB disconnect, device number 121 [ 801.710206][ T43] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 801.717890][ T43] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 801.733006][ T43] usb 4-1: USB disconnect, device number 107 [ 801.741409][ T43] xr_serial 4-1:150.204: device disconnected [ 801.784982][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 801.943908][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 801.950910][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 801.964447][ T10] usb 2-1: string descriptor 0 read error: -22 [ 801.971068][ T10] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 801.980602][ T10] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 801.991816][ T10] usb 2-1: config 0 descriptor?? [ 802.007556][ T1043] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 802.019143][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 802.028964][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 802.211111][ T30] audit: type=1326 audit(1750972100.402:3698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1072 comm="syz.0.12265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 802.276644][ T30] audit: type=1326 audit(1750972100.402:3699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1072 comm="syz.0.12265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 802.315149][ T30] audit: type=1326 audit(1750972100.452:3700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1072 comm="syz.0.12265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 802.399009][ T30] audit: type=1326 audit(1750972100.452:3701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1072 comm="syz.0.12265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 802.431968][ T10] usb 2-1: USB disconnect, device number 122 [ 802.491341][ T30] audit: type=1326 audit(1750972100.452:3702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1072 comm="syz.0.12265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 802.553147][ T30] audit: type=1326 audit(1750972100.452:3703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1072 comm="syz.0.12265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fda0998e929 code=0x7ffc0000 [ 802.592303][ T1083] netlink: 'syz.0.12268': attribute type 29 has an invalid length. [ 802.598751][T31608] usb 6-1: USB disconnect, device number 6 [ 802.639342][ T1083] netlink: 'syz.0.12268': attribute type 29 has an invalid length. [ 802.656401][ T30] audit: type=1326 audit(1750972100.562:3704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1072 comm="syz.0.12265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda0998e929 code=0x0 [ 802.671129][ T1083] netlink: 500 bytes leftover after parsing attributes in process `syz.0.12268'. [ 802.700604][ T1086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12270'. [ 802.888389][ T1098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12276'. [ 803.546997][ T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 803.733989][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 803.759378][ T9] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 803.867517][ T30] audit: type=1326 audit(1750972102.062:3705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1089 comm="syz.3.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4e18e929 code=0x7ffc0000 [ 803.890542][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.904988][ T9] usb 2-1: config 0 descriptor?? [ 804.115507][ T30] audit: type=1326 audit(1750972102.062:3706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1089 comm="syz.3.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d4e12ab19 code=0x7ffc0000 [ 804.141600][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 804.183325][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 804.213290][ T30] audit: type=1326 audit(1750972102.062:3707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1089 comm="syz.3.12274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4e18e929 code=0x7ffc0000 [ 804.241097][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 804.252526][ T9] usb 2-1: media controller created [ 804.291408][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 804.361772][ T9] az6027: usb out operation failed. (-71) [ 804.381251][ T9] az6027: usb out operation failed. (-71) [ 804.389304][ T9] stb0899_attach: Driver disabled by Kconfig [ 804.395487][ T9] az6027: no front-end attached [ 804.395487][ T9] [ 804.411986][ T9] az6027: usb out operation failed. (-71) [ 804.433893][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 804.481835][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input98 [ 804.545165][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 804.573945][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 804.617781][ T9] usb 2-1: USB disconnect, device number 123 [ 804.810197][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 804.825203][ T1141] binder: 1140:1141 ioctl c0306201 200000000540 returned -14 [ 804.914243][ T924] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 805.077830][ T924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.101804][ T924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.123092][ T924] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 805.141350][ T924] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 805.154236][ T924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.173514][ T924] usb 6-1: config 0 descriptor?? [ 805.540527][ T1174] input: syz0 as /devices/virtual/input/input99 [ 805.599642][ T924] plantronics 0003:047F:FFFF.0096: reserved main item tag 0xe [ 805.609867][ T924] plantronics 0003:047F:FFFF.0096: unknown main item tag 0x0 [ 805.618683][ T924] plantronics 0003:047F:FFFF.0096: No inputs registered, leaving [ 805.638025][ T924] plantronics 0003:047F:FFFF.0096: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 805.856097][ T924] usb 6-1: USB disconnect, device number 7 [ 806.054160][ T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 806.216097][ T9] usb 2-1: config 0 has an invalid interface number: 144 but max is 0 [ 806.236836][ T9] usb 2-1: config 0 has no interface number 0 [ 806.242943][ T9] usb 2-1: too many endpoints for config 0 interface 144 altsetting 138: 68, using maximum allowed: 30 [ 806.258665][ T9] usb 2-1: config 0 interface 144 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 806.272443][ T9] usb 2-1: config 0 interface 144 has no altsetting 0 [ 806.282951][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 806.292713][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.316017][ T9] usb 2-1: config 0 descriptor?? [ 806.323503][ T9] cp210x 2-1:0.144: cp210x converter detected [ 806.424359][T31608] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 806.588651][T31608] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 806.614207][T31608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.638287][T31608] usb 4-1: config 0 descriptor?? [ 806.648210][T31608] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 806.728098][ T9] cp210x 2-1:0.144: failed to get vendor val 0x000e size 3: -71 [ 806.749863][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 806.765569][ T9] usb 2-1: USB disconnect, device number 124 [ 806.792887][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 806.806400][ T9] cp210x 2-1:0.144: device disconnected [ 806.864164][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 807.017663][ T10] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 807.026445][ T10] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 807.037375][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 807.046815][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 807.057988][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 807.058434][T31608] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 807.070752][ T10] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 807.085980][ T10] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 807.094037][ T10] usb 6-1: Product: syz [ 807.098329][ T10] usb 6-1: Manufacturer: syz [ 807.107896][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 807.113130][ T10] cdc_wdm 6-1:1.0: skipping garbage [ 807.123485][ T10] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 807.129477][ T10] cdc_wdm 6-1:1.0: Unknown control protocol [ 807.459615][T31608] gspca_cpia1: usb_control_msg 02, error -32 [ 807.476545][T31608] gspca_cpia1: usb_control_msg 02, error -71 [ 807.482631][T31608] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 807.496505][T31608] usb 4-1: USB disconnect, device number 108 [ 807.764188][ T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 807.897834][ T5924] usb 6-1: USB disconnect, device number 8 [ 807.934240][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 807.934830][T31608] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 807.942468][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 807.957024][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.967312][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 807.980600][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 807.989870][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.998263][ T10] usb 2-1: Product: syz [ 808.002981][ T10] usb 2-1: Manufacturer: syz [ 808.007972][ T10] usb 2-1: SerialNumber: syz [ 808.109218][T31608] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 808.125082][T31608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 808.157135][T31608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 808.167655][T31608] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 808.181253][T31608] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 808.191016][T31608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.207328][T31608] usb 3-1: config 0 descriptor?? [ 808.434210][ T10] usb 2-1: 0:2 : does not exist [ 808.568330][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.574949][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.642884][T31608] plantronics 0003:047F:FFFF.0097: ignoring exceeding usage max [ 808.653777][T31608] plantronics 0003:047F:FFFF.0097: No inputs registered, leaving [ 808.672731][T31608] plantronics 0003:047F:FFFF.0097: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 808.694243][ T5924] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 808.864130][ T5924] usb 6-1: Using ep0 maxpacket: 32 [ 808.870993][ T5924] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 808.879677][ T5924] usb 6-1: config 0 has no interface number 0 [ 808.886192][ T5924] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 808.897307][ T5924] usb 6-1: config 0 interface 85 has no altsetting 0 [ 808.906560][ T5924] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 808.916339][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.924450][ T5924] usb 6-1: Product: syz [ 808.928629][ T5924] usb 6-1: Manufacturer: syz [ 808.933265][ T5924] usb 6-1: SerialNumber: syz [ 808.940767][ T5924] usb 6-1: config 0 descriptor?? [ 809.061125][ T10] usb 2-1: USB disconnect, device number 125 [ 809.088730][ T6422] udevd[6422]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 809.273915][T31608] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 809.425936][T31608] usb 4-1: config 0 has no interfaces? [ 809.435408][T31608] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 809.444966][T31608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.453012][T31608] usb 4-1: Product: syz [ 809.457442][T31608] usb 4-1: Manufacturer: syz [ 809.462077][T31608] usb 4-1: SerialNumber: syz [ 809.470139][T31608] usb 4-1: config 0 descriptor?? [ 809.555275][ T5924] appletouch 6-1:0.85: Geyser mode initialized. [ 809.564032][ T5924] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input100 [ 809.701303][ T10] usb 4-1: USB disconnect, device number 109 [ 809.767675][ T9] usb 6-1: USB disconnect, device number 9 [ 809.791084][ T9] appletouch 6-1:0.85: input: appletouch disconnected [ 809.883996][ T5924] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 810.036108][ T5924] usb 2-1: config 0 interface 0 has no altsetting 0 [ 810.042776][ T5924] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 810.051989][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.062579][ T5924] usb 2-1: config 0 descriptor?? [ 810.654027][ T43] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 810.823888][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 810.832302][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.863882][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.873655][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 810.887966][ T43] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 810.897508][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.908281][ T43] usb 4-1: config 0 descriptor?? [ 810.994883][ T924] usb 3-1: reset high-speed USB device number 123 using dummy_hcd [ 811.089986][ T5924] video4linux radio48: keene_cmd_set failed (-71) [ 811.101897][ T5924] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 811.112920][ T5924] usb 2-1: USB disconnect, device number 126 [ 811.157967][ T924] usb 3-1: device firmware changed [ 811.168680][ T10] usb 3-1: USB disconnect, device number 123 [ 811.314012][ T10] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 811.332570][ T43] shield 0003:0955:7214.0098: unknown main item tag 0x0 [ 811.340214][ T43] shield 0003:0955:7214.0098: item fetching failed at offset 1/5 [ 811.348805][ T43] shield 0003:0955:7214.0098: Parse failed [ 811.354790][ T43] shield 0003:0955:7214.0098: probe with driver shield failed with error -22 [ 811.485900][ T10] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 811.494403][ T10] usb 3-1: config 0 has no interface number 0 [ 811.502495][ T10] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 811.512200][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.520273][ T10] usb 3-1: Product: syz [ 811.525765][ T10] usb 3-1: Manufacturer: syz [ 811.530395][ T10] usb 3-1: SerialNumber: syz [ 811.538597][ T10] usb 3-1: config 0 descriptor?? [ 811.550861][ T5924] usb 4-1: USB disconnect, device number 110 [ 812.401993][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 812.402011][ T30] audit: type=1326 audit(1750972110.592:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1303 comm="syz.5.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5da1b2ab19 code=0x7ffc0000 [ 812.458979][ T30] audit: type=1326 audit(1750972110.622:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1303 comm="syz.5.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5da1b2ab19 code=0x7ffc0000 [ 812.483194][ T30] audit: type=1326 audit(1750972110.622:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1303 comm="syz.5.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5da1b2ab19 code=0x7ffc0000 [ 812.505737][ T30] audit: type=1326 audit(1750972110.622:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1303 comm="syz.5.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5da1b2ab19 code=0x7ffc0000 [ 812.528734][ T30] audit: type=1326 audit(1750972110.622:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1303 comm="syz.5.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5da1b2ab19 code=0x7ffc0000 [ 812.554937][ T30] audit: type=1326 audit(1750972110.622:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1303 comm="syz.5.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5da1b2ab19 code=0x7ffc0000 [ 812.580005][ T30] audit: type=1326 audit(1750972110.622:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1303 comm="syz.5.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5da1b2ab19 code=0x7ffc0000 [ 812.615941][ T10] asix 3-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 812.634270][ T10] asix 3-1:0.239: probe with driver asix failed with error -71 [ 812.642861][ T30] audit: type=1326 audit(1750972110.622:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1303 comm="syz.5.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5da1b2ab19 code=0x7ffc0000 [ 812.676448][ T10] usb 3-1: USB disconnect, device number 124 [ 812.756549][ T30] audit: type=1326 audit(1750972110.622:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1303 comm="syz.5.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5da1b2ab19 code=0x7ffc0000 [ 812.780971][ T30] audit: type=1326 audit(1750972110.632:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1303 comm="syz.5.12360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5da1b2ab19 code=0x7ffc0000 [ 813.074328][ T43] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 813.154036][ T924] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 813.247167][ T43] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 813.256007][ T43] usb 4-1: config 0 has no interface number 0 [ 813.262159][ T43] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 813.273475][ T43] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 813.286066][ T43] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 813.298594][ T43] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 813.310140][ T43] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 813.344256][ T924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 813.354404][ T924] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 813.374473][ T924] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 813.387531][ T43] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 813.410919][ T43] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 813.422376][ T924] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 813.433163][ T924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 813.441746][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.450067][ T924] usb 2-1: Product: syz [ 813.460955][ T43] usb 4-1: config 0 descriptor?? [ 813.466466][ T924] usb 2-1: Manufacturer: syz [ 813.481304][ T924] usb 2-1: SerialNumber: syz [ 813.487119][ T1312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 813.496927][ T1312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 813.528959][ T43] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 813.746040][ T924] usblp 2-1:1.0: usblp1: USB Unidirectional printer dev 127 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 813.786356][ T10] usb 4-1: USB disconnect, device number 111 [ 813.786432][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 813.817263][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 814.154190][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 814.334150][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 814.340723][ T9] usb 6-1: config 1 has an invalid interface number: 4 but max is 0 [ 814.348851][ T9] usb 6-1: config 1 has no interface number 0 [ 814.355040][ T9] usb 6-1: config 1 interface 4 has no altsetting 0 [ 814.363688][ T9] usb 6-1: New USB device found, idVendor=19d2, idProduct=1247, bcdDevice=6e.bb [ 814.373183][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.381533][ T5924] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 814.390663][ T9] usb 6-1: Product: syz [ 814.395133][ T9] usb 6-1: Manufacturer: syz [ 814.399961][ T9] usb 6-1: SerialNumber: syz [ 814.474394][ T10] usb 2-1: USB disconnect, device number 127 [ 814.494973][ T10] usblp1: removed [ 814.574814][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 814.581973][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 814.596650][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 814.606910][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 814.618950][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 814.630143][ T5924] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 814.655127][ T9] usb 6-1: USB disconnect, device number 10 [ 814.662146][ T5924] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 814.684114][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.864018][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 814.934445][ T5924] usb 3-1: GET_CAPABILITIES returned 0 [ 814.939993][ T5924] usbtmc 3-1:16.0: can't read capabilities [ 815.043945][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 815.055709][ T10] usb 2-1: config 0 has an invalid interface number: 130 but max is 0 [ 815.066808][ T10] usb 2-1: config 0 has no interface number 0 [ 815.086045][ T10] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56 [ 815.097255][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.109147][ T10] usb 2-1: Product: syz [ 815.113335][ T10] usb 2-1: Manufacturer: syz [ 815.126476][ T10] usb 2-1: SerialNumber: syz [ 815.134218][ T10] usb 2-1: config 0 descriptor?? [ 815.163775][ T9] usb 3-1: USB disconnect, device number 125 [ 815.170575][ T10] as10x_usb: device has been detected [ 815.192060][ T10] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 815.240495][ T10] usb 2-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))... [ 815.267156][ T10] as10x_usb: error during firmware upload part1 [ 815.275355][ T10] Registered device PCTV Systems picoStick (74e) [ 815.379813][ T9] usb 2-1: USB disconnect, device number 2 [ 815.395560][ T1387] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 815.431965][ T9] Unregistered device PCTV Systems picoStick (74e) [ 815.437980][ T9] as10x_usb: device has been disconnected [ 815.531755][ T1394] input: syz1 as /devices/virtual/input/input102 [ 815.740682][ T1400] syzkaller1: entered promiscuous mode [ 815.754113][ T1340] Bluetooth: hci3: command 0x0406 tx timeout [ 815.761351][ T1400] syzkaller1: entered allmulticast mode [ 815.811451][ T1407] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12406'. [ 815.822481][ T1407] netlink: 'syz.5.12406': attribute type 7 has an invalid length. [ 815.830542][ T1407] netlink: 'syz.5.12406': attribute type 8 has an invalid length. [ 815.839428][ T1407] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12406'. [ 815.861950][ T1407] gretap0: entered promiscuous mode [ 815.869234][ T1407] batadv_slave_1: entered promiscuous mode [ 815.877914][ T1407] gretap0: left promiscuous mode [ 815.883645][ T1407] batadv_slave_1: left promiscuous mode [ 815.943974][ T43] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 816.107556][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 816.148902][ T43] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 816.168361][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.197944][ T43] usb 4-1: Product: syz [ 816.202174][ T43] usb 4-1: Manufacturer: syz [ 816.208236][ T1423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 816.224086][ T43] usb 4-1: SerialNumber: syz [ 816.246439][ T43] usb 4-1: config 0 descriptor?? [ 816.291262][ T43] gspca_main: sq905-2.14.0 probing 2770:9120 [ 816.584191][ T924] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 816.587882][ T1438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12419'. [ 816.622975][ T1438] vlan2: entered promiscuous mode [ 816.630255][ T1438] hsr0: entered promiscuous mode [ 816.758450][ T924] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 816.777665][ T924] usb 3-1: config 0 has no interface number 0 [ 816.796551][ T924] usb 3-1: config 0 interface 101 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 816.828025][ T924] usb 3-1: config 0 interface 101 altsetting 0 endpoint 0x9 has invalid maxpacket 2007, setting to 1024 [ 816.860170][ T924] usb 3-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 816.879789][ T924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.897523][ T924] usb 3-1: Product: syz [ 816.901803][ T924] usb 3-1: Manufacturer: syz [ 816.906620][ T924] usb 3-1: SerialNumber: syz [ 816.915022][ T924] usb 3-1: config 0 descriptor?? [ 816.924571][ T924] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 817.298944][ T43] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 817.312446][ T43] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 817.323581][ T43] usb 4-1: USB disconnect, device number 112 [ 817.741874][ T924] input: gspca_pac7302 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input103 [ 817.985268][ T5924] usb 3-1: USB disconnect, device number 126 [ 818.229559][ T30] kauditd_printk_skb: 172 callbacks suppressed [ 818.229578][ T30] audit: type=1326 audit(1750972116.412:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.3.12441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4e18e929 code=0x7ffc0000 [ 818.272027][ T30] audit: type=1326 audit(1750972116.462:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.3.12441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4e18e929 code=0x7ffc0000 [ 818.349138][ T30] audit: type=1326 audit(1750972116.462:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.3.12441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4d4e18e929 code=0x7ffc0000 [ 818.380118][ T30] audit: type=1326 audit(1750972116.512:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.3.12441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4e18e929 code=0x7ffc0000 [ 818.414340][ T30] audit: type=1326 audit(1750972116.512:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.3.12441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4e18e929 code=0x7ffc0000 [ 818.473662][ T30] audit: type=1326 audit(1750972116.512:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.3.12441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4d4e18e929 code=0x7ffc0000 [ 818.536924][ T30] audit: type=1326 audit(1750972116.512:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.3.12441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4e18e929 code=0x7ffc0000 [ 818.631487][ T30] audit: type=1326 audit(1750972116.512:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.3.12441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4d4e18e929 code=0x7ffc0000 [ 818.672265][ T1503] syzkaller1: entered promiscuous mode [ 818.681351][ T1503] syzkaller1: entered allmulticast mode [ 818.689584][ T30] audit: type=1326 audit(1750972116.522:3957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.3.12441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d4e12ab19 code=0x7ffc0000 [ 818.712028][T31608] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 818.764233][ T30] audit: type=1326 audit(1750972116.522:3958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1488 comm="syz.3.12441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d4e18e929 code=0x7ffc0000 [ 818.864228][T31608] usb 4-1: Using ep0 maxpacket: 16 [ 818.894302][T31608] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 818.903061][T31608] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.932846][T31608] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 818.959544][T31608] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 818.968902][T31608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.989013][T31608] usb 4-1: Product: syz [ 818.993203][T31608] usb 4-1: Manufacturer: syz [ 819.010776][T31608] usb 4-1: SerialNumber: syz [ 819.443331][T31608] usb 4-1: 0:2 : does not exist [ 819.754580][ T5924] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 819.941614][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 819.956453][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 819.975236][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 819.995171][ T5924] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 820.056665][T31608] usb 4-1: 1:0: failed to get current value for ch 0 (-22) [ 820.084139][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.099502][ T5924] usb 6-1: config 0 descriptor?? [ 820.153269][T31608] usb 4-1: USB disconnect, device number 113 [ 820.439700][ T1555] syzkaller1: entered promiscuous mode [ 820.445874][ T1555] syzkaller1: entered allmulticast mode [ 820.542409][ T5924] plantronics 0003:047F:FFFF.0099: No inputs registered, leaving [ 820.571201][ T5924] plantronics 0003:047F:FFFF.0099: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 820.642609][ T1560] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12475'. [ 820.653279][ T1560] netlink: 35 bytes leftover after parsing attributes in process `syz.3.12475'. [ 820.665541][ T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 820.673400][ T1560] netlink: 'syz.3.12475': attribute type 6 has an invalid length. [ 820.683406][ T1560] netlink: 'syz.3.12475': attribute type 5 has an invalid length. [ 820.708437][ T1560] netlink: 35 bytes leftover after parsing attributes in process `syz.3.12475'. [ 820.737037][ T1562] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.12476'. [ 820.752809][ T1562] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 820.775380][ T1562] openvswitch: netlink: Message has 8454 unknown bytes. [ 820.814911][ T10] usb 6-1: USB disconnect, device number 11 [ 820.841911][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 820.868511][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.879803][ T9] usb 3-1: Product: syz [ 820.884802][ T9] usb 3-1: Manufacturer: syz [ 820.889923][ T9] usb 3-1: SerialNumber: syz [ 820.901239][ T9] usb 3-1: config 0 descriptor?? [ 821.917237][ T9] usb 3-1: f81604_read: reg: 100f failed: -EPROTO [ 821.962000][ T9] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 821.992170][ T9] usb 3-1: USB disconnect, device number 127 [ 822.010171][ T9] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 822.065046][ T5497] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 822.169182][ T9] usb 3-1: f81604_read: reg: 200f failed: -ENODEV [ 824.404559][ T924] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 824.567969][ T924] usb 6-1: Using ep0 maxpacket: 8 [ 824.578426][ T924] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 824.588430][ T924] usb 6-1: config 0 has no interface number 0 [ 824.595242][ T924] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 824.606647][ T924] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 824.621421][ T924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.639760][ T924] usb 6-1: config 0 descriptor?? [ 824.666726][ T924] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 825.404801][ T43] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 825.584347][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 825.596189][ T43] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 825.606998][ T43] usb 4-1: config 0 has no interface number 0 [ 825.613156][ T43] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 825.627610][ T43] usb 4-1: config 0 interface 85 has no altsetting 0 [ 825.638933][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 825.648863][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.657612][ T43] usb 4-1: Product: syz [ 825.661878][ T43] usb 4-1: Manufacturer: syz [ 825.667294][ T43] usb 4-1: SerialNumber: syz [ 825.681320][ T43] usb 4-1: config 0 descriptor?? [ 825.918389][T31608] usb 6-1: USB disconnect, device number 12 [ 826.074300][ T1753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12541'. [ 826.115937][ T43] appletouch 4-1:0.85: Geyser mode initialized. [ 826.132134][ T43] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input104 [ 826.371508][ T10] usb 4-1: USB disconnect, device number 114 [ 826.371526][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 826.401216][ T30] kauditd_printk_skb: 238 callbacks suppressed [ 826.401241][ T30] audit: type=1326 audit(1750972124.592:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1761 comm="syz.2.12546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fab6078e929 code=0x0 [ 826.444110][ T10] appletouch 4-1:0.85: input: appletouch disconnected [ 826.674703][T30195] tipc: Subscription rejected, illegal request [ 826.776734][ T43] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 826.944162][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 826.953491][ T43] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.974647][ T43] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.999434][ T43] usb 6-1: config 0 interface 0 has no altsetting 0 [ 827.008852][ T43] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 827.018483][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.038299][ T43] usb 6-1: config 0 descriptor?? [ 827.419874][ T1797] [ 827.422232][ T1797] ===================================================== [ 827.429171][ T1797] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 827.436638][ T1797] 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 Not tainted [ 827.443737][ T1797] ----------------------------------------------------- [ 827.450655][ T1797] syz.3.12561/1797 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 827.458456][ T1797] ffff88805557e9f0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 827.467173][ T1797] [ 827.467173][ T1797] and this task is already holding: [ 827.474533][ T1797] ffff88802889a028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 827.484281][ T1797] which would create a new lock dependency: [ 827.490161][ T1797] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 827.498267][ T1797] [ 827.498267][ T1797] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 827.507706][ T1797] (&dev->event_lock#2){..-.}-{3:3} [ 827.507741][ T1797] [ 827.507741][ T1797] ... which became SOFTIRQ-irq-safe at: [ 827.520614][ T1797] lock_acquire+0x120/0x360 [ 827.525211][ T1797] _raw_spin_lock_irqsave+0xa7/0xf0 [ 827.530496][ T1797] input_inject_event+0xab/0x320 [ 827.535517][ T1797] led_trigger_event+0x138/0x210 [ 827.540537][ T1797] kbd_bh+0x1c6/0x2e0 [ 827.544596][ T1797] tasklet_action_common+0x36c/0x580 [ 827.549957][ T1797] handle_softirqs+0x286/0x870 [ 827.554800][ T1797] run_ksoftirqd+0x9b/0x100 [ 827.559380][ T1797] smpboot_thread_fn+0x53f/0xa60 [ 827.564404][ T1797] kthread+0x70e/0x8a0 [ 827.568556][ T1797] ret_from_fork+0x3fc/0x770 [ 827.573228][ T1797] ret_from_fork_asm+0x1a/0x30 [ 827.578071][ T1797] [ 827.578071][ T1797] to a SOFTIRQ-irq-unsafe lock: [ 827.585075][ T1797] (tasklist_lock){.+.+}-{3:3} [ 827.585103][ T1797] [ 827.585103][ T1797] ... which became SOFTIRQ-irq-unsafe at: [ 827.597714][ T1797] ... [ 827.597722][ T1797] lock_acquire+0x120/0x360 [ 827.604876][ T1797] _raw_read_lock+0x36/0x50 [ 827.609462][ T1797] __do_wait+0xde/0x740 [ 827.613698][ T1797] do_wait+0x1f8/0x520 [ 827.617845][ T1797] kernel_wait+0xab/0x170 [ 827.622252][ T1797] call_usermodehelper_exec_work+0xbe/0x230 [ 827.628233][ T1797] process_scheduled_works+0xae1/0x17b0 [ 827.633861][ T1797] worker_thread+0x8a0/0xda0 [ 827.638533][ T1797] kthread+0x70e/0x8a0 [ 827.642679][ T1797] ret_from_fork+0x3fc/0x770 [ 827.647353][ T1797] ret_from_fork_asm+0x1a/0x30 [ 827.652193][ T1797] [ 827.652193][ T1797] other info that might help us debug this: [ 827.652193][ T1797] [ 827.662416][ T1797] Chain exists of: [ 827.662416][ T1797] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 827.662416][ T1797] [ 827.675990][ T1797] Possible interrupt unsafe locking scenario: [ 827.675990][ T1797] [ 827.684294][ T1797] CPU0 CPU1 [ 827.689644][ T1797] ---- ---- [ 827.694996][ T1797] lock(tasklist_lock); [ 827.699236][ T1797] local_irq_disable(); [ 827.705983][ T1797] lock(&dev->event_lock#2); [ 827.713181][ T1797] lock(&client->buffer_lock); [ 827.720542][ T1797] [ 827.724015][ T1797] lock(&dev->event_lock#2); [ 827.728879][ T1797] [ 827.728879][ T1797] *** DEADLOCK *** [ 827.728879][ T1797] [ 827.737013][ T1797] 7 locks held by syz.3.12561/1797: [ 827.742197][ T1797] #0: ffff888146f36118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 827.751345][ T1797] #1: ffff888029cdf230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 827.761454][ T1797] #2: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 827.771116][ T1797] #3: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 827.780691][ T1797] #4: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 827.789825][ T1797] #5: ffff88802889a028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 827.800004][ T1797] #6: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 827.809060][ T1797] [ 827.809060][ T1797] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 827.819450][ T1797] -> (&dev->event_lock#2){..-.}-{3:3} { [ 827.825100][ T1797] IN-SOFTIRQ-W at: [ 827.829160][ T1797] lock_acquire+0x120/0x360 [ 827.835483][ T1797] _raw_spin_lock_irqsave+0xa7/0xf0 [ 827.842501][ T1797] input_inject_event+0xab/0x320 [ 827.849261][ T1797] led_trigger_event+0x138/0x210 [ 827.856013][ T1797] kbd_bh+0x1c6/0x2e0 [ 827.861811][ T1797] tasklet_action_common+0x36c/0x580 [ 827.868905][ T1797] handle_softirqs+0x286/0x870 [ 827.875497][ T1797] run_ksoftirqd+0x9b/0x100 [ 827.881814][ T1797] smpboot_thread_fn+0x53f/0xa60 [ 827.888569][ T1797] kthread+0x70e/0x8a0 [ 827.894453][ T1797] ret_from_fork+0x3fc/0x770 [ 827.900861][ T1797] ret_from_fork_asm+0x1a/0x30 [ 827.907441][ T1797] INITIAL USE at: [ 827.911419][ T1797] lock_acquire+0x120/0x360 [ 827.917654][ T1797] _raw_spin_lock_irqsave+0xa7/0xf0 [ 827.924587][ T1797] input_inject_event+0xab/0x320 [ 827.931256][ T1797] kbd_led_trigger_activate+0xbc/0x100 [ 827.938514][ T1797] led_trigger_set+0x52a/0x950 [ 827.945006][ T1797] led_trigger_set_default+0x260/0x2a0 [ 827.952189][ T1797] led_classdev_register_ext+0x73d/0x930 [ 827.959554][ T1797] input_leds_connect+0x517/0x790 [ 827.966329][ T1797] input_register_device+0xcee/0x10b0 [ 827.973442][ T1797] atkbd_connect+0x70e/0x9c0 [ 827.979767][ T1797] serio_driver_probe+0x7f/0xa0 [ 827.986350][ T1797] really_probe+0x26a/0x9a0 [ 827.992591][ T1797] __driver_probe_device+0x18c/0x2f0 [ 827.999607][ T1797] driver_probe_device+0x4f/0x430 [ 828.006363][ T1797] __driver_attach+0x452/0x700 [ 828.012859][ T1797] bus_for_each_dev+0x230/0x2b0 [ 828.019442][ T1797] serio_handle_event+0x1a2/0x860 [ 828.026200][ T1797] process_scheduled_works+0xae1/0x17b0 [ 828.033479][ T1797] worker_thread+0x8a0/0xda0 [ 828.039800][ T1797] kthread+0x70e/0x8a0 [ 828.045594][ T1797] ret_from_fork+0x3fc/0x770 [ 828.051917][ T1797] ret_from_fork_asm+0x1a/0x30 [ 828.058407][ T1797] } [ 828.060984][ T1797] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 828.070085][ T1797] -> (&client->buffer_lock){....}-{3:3} { [ 828.075822][ T1797] INITIAL USE at: [ 828.079707][ T1797] lock_acquire+0x120/0x360 [ 828.085769][ T1797] _raw_spin_lock_irqsave+0xa7/0xf0 [ 828.092541][ T1797] evdev_ioctl_handler+0x1095/0x1f10 [ 828.099397][ T1797] __se_sys_ioctl+0xf9/0x170 [ 828.105554][ T1797] do_syscall_64+0xfa/0x3b0 [ 828.111631][ T1797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.119086][ T1797] } [ 828.121577][ T1797] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 828.129738][ T1797] ... acquired at: [ 828.133534][ T1797] lock_acquire+0x120/0x360 [ 828.138211][ T1797] _raw_spin_lock+0x2e/0x40 [ 828.142884][ T1797] evdev_handle_get_val+0x70/0x9f0 [ 828.148166][ T1797] evdev_ioctl_handler+0x1202/0x1f10 [ 828.153628][ T1797] __se_sys_ioctl+0xf9/0x170 [ 828.158408][ T1797] do_syscall_64+0xfa/0x3b0 [ 828.163087][ T1797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.169152][ T1797] [ 828.171468][ T1797] [ 828.171468][ T1797] the dependencies between the lock to be acquired [ 828.171480][ T1797] and SOFTIRQ-irq-unsafe lock: [ 828.184972][ T1797] -> (tasklist_lock){.+.+}-{3:3} { [ 828.190280][ T1797] HARDIRQ-ON-R at: [ 828.194429][ T1797] lock_acquire+0x120/0x360 [ 828.200932][ T1797] _raw_read_lock+0x36/0x50 [ 828.207426][ T1797] __do_wait+0xde/0x740 [ 828.213573][ T1797] do_wait+0x1f8/0x520 [ 828.219640][ T1797] kernel_wait+0xab/0x170 [ 828.225972][ T1797] call_usermodehelper_exec_work+0xbe/0x230 [ 828.233972][ T1797] process_scheduled_works+0xae1/0x17b0 [ 828.241519][ T1797] worker_thread+0x8a0/0xda0 [ 828.248107][ T1797] kthread+0x70e/0x8a0 [ 828.254184][ T1797] ret_from_fork+0x3fc/0x770 [ 828.260779][ T1797] ret_from_fork_asm+0x1a/0x30 [ 828.267531][ T1797] SOFTIRQ-ON-R at: [ 828.271681][ T1797] lock_acquire+0x120/0x360 [ 828.278180][ T1797] _raw_read_lock+0x36/0x50 [ 828.284691][ T1797] __do_wait+0xde/0x740 [ 828.290846][ T1797] do_wait+0x1f8/0x520 [ 828.296910][ T1797] kernel_wait+0xab/0x170 [ 828.303232][ T1797] call_usermodehelper_exec_work+0xbe/0x230 [ 828.311126][ T1797] process_scheduled_works+0xae1/0x17b0 [ 828.318670][ T1797] worker_thread+0x8a0/0xda0 [ 828.325260][ T1797] kthread+0x70e/0x8a0 [ 828.331321][ T1797] ret_from_fork+0x3fc/0x770 [ 828.337904][ T1797] ret_from_fork_asm+0x1a/0x30 [ 828.344656][ T1797] INITIAL USE at: [ 828.348714][ T1797] lock_acquire+0x120/0x360 [ 828.355127][ T1797] _raw_write_lock_irq+0xa2/0xf0 [ 828.361969][ T1797] copy_process+0x224f/0x3c00 [ 828.368544][ T1797] kernel_clone+0x21e/0x870 [ 828.374955][ T1797] user_mode_thread+0xdd/0x140 [ 828.381622][ T1797] rest_init+0x23/0x300 [ 828.387686][ T1797] start_kernel+0x47d/0x500 [ 828.394094][ T1797] x86_64_start_reservations+0x24/0x30 [ 828.401454][ T1797] x86_64_start_kernel+0x143/0x1c0 [ 828.408465][ T1797] common_startup_64+0x13e/0x147 [ 828.415306][ T1797] INITIAL READ USE at: [ 828.419801][ T1797] lock_acquire+0x120/0x360 [ 828.426645][ T1797] _raw_read_lock+0x36/0x50 [ 828.433491][ T1797] __do_wait+0xde/0x740 [ 828.439984][ T1797] do_wait+0x1f8/0x520 [ 828.446399][ T1797] kernel_wait+0xab/0x170 [ 828.453065][ T1797] call_usermodehelper_exec_work+0xbe/0x230 [ 828.461302][ T1797] process_scheduled_works+0xae1/0x17b0 [ 828.469187][ T1797] worker_thread+0x8a0/0xda0 [ 828.476120][ T1797] kthread+0x70e/0x8a0 [ 828.482524][ T1797] ret_from_fork+0x3fc/0x770 [ 828.489455][ T1797] ret_from_fork_asm+0x1a/0x30 [ 828.496556][ T1797] } [ 828.499218][ T1797] ... key at: [] tasklist_lock+0x18/0x40 [ 828.507108][ T1797] ... acquired at: [ 828.511074][ T1797] lock_acquire+0x120/0x360 [ 828.515742][ T1797] _raw_read_lock+0x36/0x50 [ 828.520413][ T1797] send_sigurg+0x12b/0x420 [ 828.525003][ T1797] sk_send_sigurg+0x6c/0x2e0 [ 828.529767][ T1797] queue_oob+0x490/0x5a0 [ 828.534174][ T1797] unix_stream_sendmsg+0xaf9/0xc90 [ 828.539456][ T1797] __sock_sendmsg+0x219/0x270 [ 828.544301][ T1797] ____sys_sendmsg+0x505/0x830 [ 828.549230][ T1797] ___sys_sendmsg+0x21f/0x2a0 [ 828.554076][ T1797] __x64_sys_sendmsg+0x19b/0x260 [ 828.559181][ T1797] do_syscall_64+0xfa/0x3b0 [ 828.563857][ T1797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.569919][ T1797] [ 828.572235][ T1797] -> (&f_owner->lock){....}-{3:3} { [ 828.577531][ T1797] INITIAL USE at: [ 828.581501][ T1797] lock_acquire+0x120/0x360 [ 828.587733][ T1797] _raw_write_lock_irq+0xa2/0xf0 [ 828.594406][ T1797] __f_setown+0x67/0x370 [ 828.600379][ T1797] f_setown+0x23a/0x300 [ 828.606269][ T1797] sock_ioctl+0x5c5/0x790 [ 828.612328][ T1797] __se_sys_ioctl+0xf9/0x170 [ 828.618651][ T1797] do_syscall_64+0xfa/0x3b0 [ 828.624886][ T1797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.632508][ T1797] INITIAL READ USE at: [ 828.636917][ T1797] lock_acquire+0x120/0x360 [ 828.643586][ T1797] _raw_read_lock_irq+0xaa/0xf0 [ 828.650605][ T1797] do_fcntl+0x812/0x1910 [ 828.657022][ T1797] __se_sys_fcntl+0xc8/0x150 [ 828.663776][ T1797] do_syscall_64+0xfa/0x3b0 [ 828.670450][ T1797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.678507][ T1797] } [ 828.681079][ T1797] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 828.690007][ T1797] ... acquired at: [ 828.693886][ T1797] lock_acquire+0x120/0x360 [ 828.698557][ T1797] _raw_read_lock_irqsave+0xaf/0x100 [ 828.704015][ T1797] send_sigio+0x38/0x370 [ 828.708423][ T1797] kill_fasync+0x24d/0x4d0 [ 828.713008][ T1797] lease_break_callback+0x26/0x30 [ 828.718204][ T1797] __break_lease+0x6a5/0x1620 [ 828.723055][ T1797] vfs_truncate+0x428/0x520 [ 828.727720][ T1797] do_sys_truncate+0xdb/0x190 [ 828.732559][ T1797] __x64_sys_truncate+0x5b/0x70 [ 828.737574][ T1797] do_syscall_64+0xfa/0x3b0 [ 828.742247][ T1797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.748309][ T1797] [ 828.750626][ T1797] -> (&new->fa_lock){....}-{3:3} { [ 828.755750][ T1797] INITIAL USE at: [ 828.759634][ T1797] lock_acquire+0x120/0x360 [ 828.765696][ T1797] _raw_write_lock_irq+0xa2/0xf0 [ 828.772190][ T1797] fasync_remove_entry+0xf1/0x1c0 [ 828.778771][ T1797] __fput+0x8a2/0xa70 [ 828.784486][ T1797] task_work_run+0x1d1/0x260 [ 828.790628][ T1797] exit_to_user_mode_loop+0xec/0x110 [ 828.797471][ T1797] do_syscall_64+0x2bd/0x3b0 [ 828.803617][ T1797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.811066][ T1797] INITIAL READ USE at: [ 828.815381][ T1797] lock_acquire+0x120/0x360 [ 828.821875][ T1797] _raw_read_lock_irqsave+0xaf/0x100 [ 828.829150][ T1797] kill_fasync+0x199/0x4d0 [ 828.835557][ T1797] sock_wake_async+0x137/0x160 [ 828.842313][ T1797] sk_wake_async+0x184/0x280 [ 828.848891][ T1797] unix_shutdown+0x2f5/0x3f0 [ 828.855472][ T1797] __x64_sys_shutdown+0x13f/0x1a0 [ 828.862481][ T1797] do_syscall_64+0xfa/0x3b0 [ 828.868974][ T1797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.876863][ T1797] } [ 828.879347][ T1797] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 828.888013][ T1797] ... acquired at: [ 828.891799][ T1797] lock_acquire+0x120/0x360 [ 828.896471][ T1797] _raw_read_lock_irqsave+0xaf/0x100 [ 828.901920][ T1797] kill_fasync+0x199/0x4d0 [ 828.906503][ T1797] evdev_pass_values+0x627/0xbd0 [ 828.911605][ T1797] evdev_events+0x1e6/0x340 [ 828.916267][ T1797] input_pass_values+0x288/0x890 [ 828.921363][ T1797] input_event_dispose+0x330/0x6b0 [ 828.926640][ T1797] input_inject_event+0x1fe/0x320 [ 828.931831][ T1797] evdev_write+0x2fc/0x480 [ 828.936407][ T1797] vfs_write+0x27e/0xa90 [ 828.940820][ T1797] ksys_write+0x145/0x250 [ 828.945309][ T1797] do_syscall_64+0xfa/0x3b0 [ 828.949984][ T1797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.956038][ T1797] [ 828.958351][ T1797] [ 828.958351][ T1797] stack backtrace: [ 828.964229][ T1797] CPU: 0 UID: 0 PID: 1797 Comm: syz.3.12561 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) [ 828.964248][ T1797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 828.964258][ T1797] Call Trace: [ 828.964266][ T1797] [ 828.964274][ T1797] dump_stack_lvl+0x189/0x250 [ 828.964299][ T1797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 828.964320][ T1797] ? __pfx__printk+0x10/0x10 [ 828.964342][ T1797] validate_chain+0x1f05/0x2140 [ 828.964365][ T1797] __lock_acquire+0xab9/0xd20 [ 828.964387][ T1797] ? kill_fasync+0x199/0x4d0 [ 828.964405][ T1797] lock_acquire+0x120/0x360 [ 828.964424][ T1797] ? kill_fasync+0x199/0x4d0 [ 828.964446][ T1797] _raw_read_lock_irqsave+0xaf/0x100 [ 828.964468][ T1797] ? kill_fasync+0x199/0x4d0 [ 828.964487][ T1797] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 828.964505][ T1797] ? do_raw_spin_lock+0x121/0x290 [ 828.964524][ T1797] kill_fasync+0x199/0x4d0 [ 828.964543][ T1797] ? kill_fasync+0x53/0x4d0 [ 828.964561][ T1797] evdev_pass_values+0x627/0xbd0 [ 828.964579][ T1797] ? evdev_pass_values+0x601/0xbd0 [ 828.964597][ T1797] evdev_events+0x1e6/0x340 [ 828.964615][ T1797] ? evdev_events+0x79/0x340 [ 828.964629][ T1797] ? input_pass_values+0x8d/0x890 [ 828.964644][ T1797] input_pass_values+0x288/0x890 [ 828.964661][ T1797] ? input_handle_event+0x70c/0xf30 [ 828.964681][ T1797] input_event_dispose+0x330/0x6b0 [ 828.964703][ T1797] input_inject_event+0x1fe/0x320 [ 828.964723][ T1797] ? input_inject_event+0xbc/0x320 [ 828.964747][ T1797] evdev_write+0x2fc/0x480 [ 828.964764][ T1797] ? __pfx_evdev_write+0x10/0x10 [ 828.964780][ T1797] ? bpf_lsm_file_permission+0x9/0x20 [ 828.964800][ T1797] ? security_file_permission+0x75/0x290 [ 828.964816][ T1797] ? rw_verify_area+0x258/0x650 [ 828.964836][ T1797] ? __pfx_evdev_write+0x10/0x10 [ 828.964852][ T1797] vfs_write+0x27e/0xa90 [ 828.964878][ T1797] ? __pfx_vfs_write+0x10/0x10 [ 828.964898][ T1797] ? __fget_files+0x2a/0x420 [ 828.964915][ T1797] ? __fget_files+0x2a/0x420 [ 828.964929][ T1797] ? __fget_files+0x3a0/0x420 [ 828.964944][ T1797] ? __fget_files+0x2a/0x420 [ 828.964962][ T1797] ksys_write+0x145/0x250 [ 828.964981][ T1797] ? __pfx_ksys_write+0x10/0x10 [ 828.964998][ T1797] ? do_syscall_64+0xbe/0x3b0 [ 828.965023][ T1797] do_syscall_64+0xfa/0x3b0 [ 828.965044][ T1797] ? lockdep_hardirqs_on+0x9c/0x150 [ 828.965064][ T1797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.965078][ T1797] ? clear_bhb_loop+0x60/0xb0 [ 828.965094][ T1797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.965109][ T1797] RIP: 0033:0x7f4d4e18e929 [ 828.965123][ T1797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 828.965138][ T1797] RSP: 002b:00007f4d4f05c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 828.965157][ T1797] RAX: ffffffffffffffda RBX: 00007f4d4e3b5fa0 RCX: 00007f4d4e18e929 [ 828.965168][ T1797] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 828.965178][ T1797] RBP: 00007f4d4e210b39 R08: 0000000000000000 R09: 0000000000000000 [ 828.965188][ T1797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.965198][ T1797] R13: 0000000000000000 R14: 00007f4d4e3b5fa0 R15: 00007f4d4e4dfa28 [ 828.965213][ T1797] [ 829.336457][ T43] hid (null): bogus close delimiter [ 829.370281][ T43] cougar 0003:060B:500A.009A: unexpected long global item [ 829.392192][ T43] cougar 0003:060B:500A.009A: parse failed [ 829.407371][ T43] cougar 0003:060B:500A.009A: probe with driver cougar failed with error -22 [ 829.519467][ T43] usb 6-1: USB disconnect, device number 13 [ 829.533883][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 829.685234][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 829.696315][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 829.706124][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 829.716219][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 829.725908][ T9] usb 3-1: SerialNumber: syz [ 829.937999][ T9] usb 3-1: 0:2 : does not exist [ 829.950938][ T9] usb 3-1: USB disconnect, device number 2 [ 829.969302][ T6422] udevd[6422]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory