last executing test programs: 2m3.554734907s ago: executing program 0 (id=40): r0 = landlock_create_ruleset(&(0x7f0000000000)={0xe01, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 2m3.469803099s ago: executing program 0 (id=42): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) 2m2.422638109s ago: executing program 0 (id=48): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 2m0.574659153s ago: executing program 0 (id=59): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 1m59.642422915s ago: executing program 0 (id=74): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40041, 0x0) r0 = io_uring_setup(0x273f, &(0x7f0000000280)={0x0, 0x79c1, 0x10, 0x2002, 0x40000597}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000380)={0x2, 0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4107, 0x100b}], 0x0}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') read$FUSE(r1, &(0x7f0000000d80)={0x2020}, 0x2020) 1m59.274901884s ago: executing program 0 (id=79): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 1m58.984276467s ago: executing program 32 (id=79): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) 5.989855537s ago: executing program 5 (id=1139): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x8a}], 0x1) 5.835917712s ago: executing program 5 (id=1140): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x1, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.601974772s ago: executing program 5 (id=1141): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001400)={0x100000003}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x2) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x2}]) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2778) 5.359657604s ago: executing program 5 (id=1144): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x30}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 4.993569976s ago: executing program 5 (id=1149): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x3, 0xffffffff, 0x7f, 0x9, 0x7, 0xf}) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000000)={0xc, @pix_mp={0x9, 0x40000055, 0x47524247, 0x6, 0x8, [{0x9, 0x4000}, {0x9, 0x7fffffff}, {0x7f4d6e18, 0x2}, {0x0, 0x1}, {0x8000, 0x200}, {0x4000007}, {0x2, 0x1f}, {0x7311, 0x7}], 0xc3, 0x4, 0x8, 0x1, 0x5}}) 2.211449655s ago: executing program 2 (id=1164): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r1], 0x0) 2.074207936s ago: executing program 5 (id=1165): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0xc, &(0x7f0000000180)={0x40, 0xe, 0x2, {0x2, 0xd}}, 0x0}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1.833557867s ago: executing program 1 (id=1170): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x9) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r0, &(0x7f0000000180)=""/67, 0x43) 1.337675653s ago: executing program 4 (id=1175): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x5) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000700)=0x31) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000900)='@', 0x1}], 0x1) 1.267646773s ago: executing program 4 (id=1176): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)='J', 0x1}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x44084) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x78) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 1.21902715s ago: executing program 4 (id=1177): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.103285475s ago: executing program 4 (id=1178): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88035b96648e582003c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 1.058689671s ago: executing program 4 (id=1179): openat$sw_sync_info(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xa4, &(0x7f0000000440)={0x0, 0xce53, 0x400, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 955.472562ms ago: executing program 4 (id=1181): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000047ff4f40d3131132677a010203010902120001760fb30f09040001"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket(0x2b, 0x80801, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 839.247048ms ago: executing program 2 (id=1182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 838.971147ms ago: executing program 3 (id=1183): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x205, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000000c0)=0x49, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/19, &(0x7f0000000240)=0x14) 811.864843ms ago: executing program 1 (id=1184): syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x381b01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d65f0800010002010002170003800500000099db973b91aa057972513500b0406700912deb5b85932234", 0x3c) 734.35972ms ago: executing program 2 (id=1185): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) lstat(&(0x7f0000000640)='./file0/file1\x00', 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 732.881272ms ago: executing program 3 (id=1186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd7d76b2af00042f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd0100000000001400000060"], 0xfdef) 690.543429ms ago: executing program 1 (id=1187): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)=@x86={0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0xfd}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x2, 0x0, @ioapic={0xdddd0000, 0x2, 0x5, 0x4, 0x0, [{0x4, 0x85, 0x7, '\x00', 0x7}, {0x2, 0x80, 0x7, '\x00', 0x8}, {0x6c, 0x8, 0x6, '\x00', 0xff}, {0xf2, 0x2, 0x10, '\x00', 0x9}, {0x9, 0x1, 0x0, '\x00', 0x2}, {0x5, 0x1, 0x7, '\x00', 0x1}, {0xf0, 0x7, 0xf7, '\x00', 0xf3}, {0x0, 0xe, 0x40, '\x00', 0x5}, {0x80, 0x34, 0x8, '\x00', 0x9}, {0x99, 0x0, 0x2, '\x00', 0x1}, {0xbe, 0x1, 0x4, '\x00', 0x6}, {0x8, 0x5, 0xe, '\x00', 0x7f}, {0xa6, 0x0, 0x11, '\x00', 0x18}, {0x9, 0x8, 0x0, '\x00', 0x2}, {0x4, 0x4d, 0x9, '\x00', 0x1}, {0x9, 0x0, 0x9, '\x00', 0x2}, {0x5, 0x8, 0xa5}, {0xb0, 0x7, 0x80, '\x00', 0x2}, {0x0, 0x0, 0x5, '\x00', 0x7f}, {0x1, 0x3, 0xe5, '\x00', 0x2}, {0xe, 0x2, 0x7, '\x00', 0x6}, {0x0, 0xfe, 0xc, '\x00', 0x1}, {0x6, 0x11, 0x5}, {0x5, 0x9, 0x1, '\x00', 0x8}]}}) 556.051072ms ago: executing program 3 (id=1188): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e34", 0xc3}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001600)=""/4086, 0xff6}], 0x1}, 0x0) 500.983349ms ago: executing program 1 (id=1189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 490.904421ms ago: executing program 2 (id=1190): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) 440.735343ms ago: executing program 3 (id=1191): sendmmsg(0xffffffffffffffff, &(0x7f0000008f80)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x2, {0xa, 0x4e21, 0x5, @loopback, 0x3}}}, 0x80, 0x0}}], 0x1, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000806000003"], 0xfdef) 268.241465ms ago: executing program 1 (id=1192): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, 0x0, 0x801, 0x70bd26, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]}]}, 0x28}}, 0x20000000) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x2000000000005}, {0x0, 0x0, 0x0, 0x1}, 0x4, 0x6e6bb8, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x8004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) 267.197841ms ago: executing program 2 (id=1193): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x0, r1}) close(0x3) 209.388372ms ago: executing program 3 (id=1194): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000300)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000480), 0x2, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f00000000c0)=[0x2], &(0x7f0000000280)=[r3, r3], &(0x7f0000000040)}) 59.066615ms ago: executing program 2 (id=1195): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)={0x0, 0x15, 0x4, "912f2747"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000300)={0x40, 0x3, 0x4, "ef599e72"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000500)={0x40, 0x1, 0x4, "75719c93"}, 0x0, 0x0, 0x0, 0x0}) 58.76581ms ago: executing program 1 (id=1196): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 0s ago: executing program 3 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) kernel console output (not intermixed with test programs): g 0 has no interface number 0 [ 104.141288][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 104.169648][ T797] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.189306][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 256, setting to 64 [ 104.211375][ T797] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.227674][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 104.250126][ T797] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.271792][ T797] usb 4-1: config 0 interface 1 has no altsetting 0 [ 104.285761][ T797] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 104.298697][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.307540][ T5878] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 104.317277][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.327203][ T5878] usb 2-1: Product: syz [ 104.332432][ T797] usb 4-1: config 0 descriptor?? [ 104.354394][ T5934] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 104.355649][ T5878] usb 2-1: Manufacturer: syz [ 104.383266][ T5934] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 104.384326][ T5878] usb 2-1: SerialNumber: syz [ 104.417629][ T5878] usb 2-1: config 0 descriptor?? [ 104.433343][ T6638] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 104.449698][ T5878] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 104.751824][ T5878] usb 5-1: USB disconnect, device number 9 [ 104.888783][ T9] usb 2-1: USB disconnect, device number 5 [ 104.968469][ T797] input: HID 145f:0212 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:145F:0212.000B/input/input13 [ 105.089637][ T6681] ªªªªªª: renamed from wg2 (while UP) [ 105.097527][ T797] input: HID 145f:0212 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:145F:0212.000B/input/input14 [ 105.227157][ T797] uclogic 0003:145F:0212.000B: input,hidraw0: USB HID v4.06 Keypad [HID 145f:0212] on usb-dummy_hcd.3-1/input1 [ 105.307492][ T797] usb 4-1: USB disconnect, device number 10 [ 105.436071][ T6687] fido_id[6687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 105.475666][ T5934] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 105.668178][ T5934] usb 6-1: Using ep0 maxpacket: 16 [ 105.714100][ T5934] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 105.732485][ T5934] usb 6-1: config 0 has no interface number 0 [ 105.742616][ T5934] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.779123][ T5934] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.804952][ T5934] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 105.832090][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.862973][ T5934] usb 6-1: config 0 descriptor?? [ 105.868111][ T5932] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 106.014444][ T5808] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 106.036181][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 106.055462][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.065679][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 106.076620][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 106.089473][ T5932] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 106.104183][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.121308][ T5932] usb 5-1: config 0 descriptor?? [ 106.134755][ T797] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 106.184726][ T5808] usb 2-1: Using ep0 maxpacket: 32 [ 106.191556][ T5808] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 106.201056][ T5808] usb 2-1: config 0 has no interface number 0 [ 106.211396][ T5808] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 106.221816][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.230015][ T5808] usb 2-1: Product: syz [ 106.235412][ T5808] usb 2-1: Manufacturer: syz [ 106.242191][ T5808] usb 2-1: SerialNumber: syz [ 106.249925][ T5808] usb 2-1: config 0 descriptor?? [ 106.296293][ T797] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 106.307395][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.318424][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.333539][ T797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 106.350072][ T797] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 106.369366][ T797] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 106.378672][ T797] usb 4-1: Manufacturer: syz [ 106.389296][ T797] usb 4-1: config 0 descriptor?? [ 106.429888][ T9] usb 5-1: USB disconnect, device number 10 [ 106.536504][ T5934] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.000C/input/input15 [ 106.660143][ T5934] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.000C/input/input16 [ 106.723165][ T5934] uclogic 0003:28BD:0071.000C: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1 [ 106.756309][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 106.766504][ T5934] usb 6-1: USB disconnect, device number 3 [ 106.828133][ T797] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 106.857116][ T6716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.870500][ T797] appleir 0003:05AC:8243.000D: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 106.878232][ T6717] fido_id[6717]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 107.177090][ T10] usb 4-1: USB disconnect, device number 11 [ 107.315015][ T5808] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 107.333981][ T5808] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 107.350793][ T5808] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 107.362141][ T5808] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 107.388782][ T5808] usb 2-1: USB disconnect, device number 6 [ 107.749103][ T5808] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 107.914375][ T5808] usb 6-1: Using ep0 maxpacket: 8 [ 107.930529][ T5808] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 107.945331][ T5808] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 107.955200][ T5808] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 107.963973][ T5808] usb 6-1: Product: syz [ 107.972683][ T5808] usb 6-1: Manufacturer: syz [ 107.978337][ T5808] usb 6-1: SerialNumber: syz [ 108.208903][ T5808] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 108.221764][ T5808] usb 6-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 108.230145][ T5808] usb 6-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 108.239087][ T5808] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 108.421070][ T5808] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 108.460606][ T5808] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 108.496356][ T5808] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 108.630167][ T6737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.659353][ T6737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.672935][ T5808] usb 6-1: USB disconnect, device number 4 [ 108.700461][ T5808] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 108.736796][ T5808] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 108.768292][ T5808] visor 6-1:1.0: device disconnected [ 109.423249][ T6793] netlink: 'syz.3.310': attribute type 1 has an invalid length. [ 109.463650][ T6793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.495261][ T6793] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 109.505270][ T6793] bond1: (slave batadv1): making interface the new active one [ 109.514079][ T6793] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 109.604396][ T6798] netlink: 'syz.4.312': attribute type 2 has an invalid length. [ 109.612307][ T6798] netlink: 28 bytes leftover after parsing attributes in process `syz.4.312'. [ 109.707385][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 109.795114][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 110.053239][ T30] audit: type=1326 audit(1772206577.676:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.3.318" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70bef6c code=0x0 [ 110.794847][ T797] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 110.964947][ T797] usb 6-1: Using ep0 maxpacket: 16 [ 110.976352][ T797] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 110.997113][ T797] usb 6-1: config 1 has no interface number 0 [ 111.003641][ T797] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 111.024118][ T797] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 111.054603][ T797] usb 6-1: config 1 interface 105 has no altsetting 0 [ 111.073800][ T797] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 111.093513][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.113660][ T797] usb 6-1: Product: syz [ 111.122833][ T797] usb 6-1: Manufacturer: syz [ 111.127800][ T797] usb 6-1: SerialNumber: syz [ 111.148924][ T6824] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 111.161634][ T6824] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 111.587599][ T6824] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 111.602672][ T6824] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 111.725836][ T6849] trusted_key: syz.2.332 sent an empty control message without MSG_MORE. [ 111.744424][ T30] audit: type=1326 audit(1772206579.366:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz.4.331" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7f6c code=0x0 [ 112.241061][ T797] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 112.266798][ T797] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 112.291107][ T6872] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 112.304400][ T6872] netlink: 'syz.1.341': attribute type 6 has an invalid length. [ 112.312604][ T6872] netlink: 'syz.1.341': attribute type 3 has an invalid length. [ 112.315413][ T797] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 1a:aa:47:ee:50:5c [ 112.361997][ T797] usb 6-1: USB disconnect, device number 5 [ 112.381002][ T797] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 112.455751][ T797] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 112.465318][ T797] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 112.484489][ T797] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 112.672385][ T6881] veth1_to_bridge: entered allmulticast mode [ 112.684147][ T6881] veth1_to_bridge: left allmulticast mode [ 113.187027][ T30] audit: type=1326 audit(1772206580.796:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6899 comm="syz.2.351" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf6ffef6c code=0x0 [ 113.279384][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.352'. [ 113.475146][ T6909] input: syz1 as /devices/virtual/input/input18 [ 113.619839][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 113.672492][ T6911] bond0: entered promiscuous mode [ 113.710112][ T6911] bond_slave_0: entered promiscuous mode [ 113.710845][ T6914] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 113.734646][ T6911] bond_slave_1: entered promiscuous mode [ 113.781274][ T6911] bond0: left promiscuous mode [ 113.811155][ T6911] bond_slave_0: left promiscuous mode [ 113.831584][ T6911] bond_slave_1: left promiscuous mode [ 114.144889][ T6921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.360'. [ 114.456960][ T6930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.363'. [ 114.575266][ T6933] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.185733][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.376'. [ 116.712770][ T7019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.381'. [ 116.838806][ T7023] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 116.918506][ T7023] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 117.745404][ T7071] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.886997][ T797] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 118.068620][ T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.092038][ T797] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 118.121935][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.162011][ T797] usb 2-1: config 0 descriptor?? [ 118.196218][ T797] pwc: Askey VC010 type 2 USB webcam detected. [ 118.274958][ T7085] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 118.429391][ T7085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.462178][ T7091] syzkaller1: entered promiscuous mode [ 118.482593][ T7091] syzkaller1: entered allmulticast mode [ 118.509057][ T7090] bond2: (slave geneve2): making interface the new active one [ 118.518737][ T7090] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 118.600826][ T797] pwc: recv_control_msg error -32 req 02 val 2b00 [ 118.616119][ T797] pwc: recv_control_msg error -32 req 02 val 2700 [ 118.635234][ T797] pwc: recv_control_msg error -32 req 02 val 2c00 [ 118.844099][ T797] pwc: recv_control_msg error -71 req 04 val 1300 [ 118.855837][ T797] pwc: recv_control_msg error -71 req 04 val 1400 [ 118.876936][ T797] pwc: recv_control_msg error -71 req 02 val 2000 [ 118.884437][ T5808] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 118.889421][ T797] pwc: recv_control_msg error -71 req 02 val 2100 [ 118.900926][ T7104] netlink: 'syz.5.406': attribute type 9 has an invalid length. [ 118.909205][ T797] pwc: recv_control_msg error -71 req 04 val 1500 [ 118.909603][ T797] pwc: recv_control_msg error -71 req 02 val 2500 [ 118.923550][ T797] pwc: recv_control_msg error -71 req 02 val 2400 [ 118.944239][ T7104] netlink: 'syz.5.406': attribute type 11 has an invalid length. [ 118.953608][ T7104] netlink: 'syz.5.406': attribute type 12 has an invalid length. [ 118.954694][ T797] pwc: recv_control_msg error -71 req 02 val 2600 [ 118.971325][ T797] pwc: recv_control_msg error -71 req 02 val 2900 [ 118.999035][ T797] pwc: recv_control_msg error -71 req 02 val 2800 [ 119.006984][ T797] pwc: recv_control_msg error -71 req 04 val 1100 [ 119.012083][ T7104] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.406'. [ 119.015157][ T797] pwc: recv_control_msg error -71 req 04 val 1200 [ 119.036888][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.406'. [ 119.043213][ T797] pwc: Registered as video103. [ 119.078460][ T5808] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 119.089377][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.119195][ T797] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 119.124658][ T5808] usb 3-1: Product: syz [ 119.139913][ T5808] usb 3-1: Manufacturer: syz [ 119.165843][ T5808] usb 3-1: SerialNumber: syz [ 119.188309][ T5808] usb 3-1: config 0 descriptor?? [ 119.192545][ T797] usb 2-1: USB disconnect, device number 7 [ 119.208651][ T5808] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 119.275416][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 119.354539][ T7115] netlink: 'syz.5.410': attribute type 4 has an invalid length. [ 119.454423][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 119.461356][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 119.474295][ T10] usb 4-1: config 0 has no interface number 0 [ 119.480473][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.504336][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.514161][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 119.533255][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.561853][ T10] usb 4-1: config 0 descriptor?? [ 120.014626][ T797] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 120.194572][ T797] usb 6-1: Using ep0 maxpacket: 16 [ 120.202094][ T797] usb 6-1: config 0 has no interfaces? [ 120.214525][ T797] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 120.238227][ T10] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.000E/input/input21 [ 120.252669][ T5808] gspca_sunplus: reg_r err -71 [ 120.255986][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.280161][ T5808] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 120.285474][ T797] usb 6-1: config 0 descriptor?? [ 120.333281][ T5808] usb 3-1: USB disconnect, device number 10 [ 120.336032][ T10] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.000E/input/input22 [ 120.424127][ T10] uclogic 0003:28BD:0071.000E: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1 [ 120.513082][ T10] usb 4-1: USB disconnect, device number 12 [ 120.563494][ T5878] usb 6-1: USB disconnect, device number 6 [ 120.613045][ T7142] fido_id[7142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 120.904182][ T7149] pim6reg1: entered promiscuous mode [ 120.909703][ T7149] pim6reg1: entered allmulticast mode [ 121.374519][ T10] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 121.538113][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.562318][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.603831][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.623302][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.641124][ T10] usb 4-1: Product: syz [ 121.650976][ T10] usb 4-1: Manufacturer: syz [ 121.664394][ T10] usb 4-1: SerialNumber: syz [ 121.666336][ T5808] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 121.834340][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 121.846961][ T5808] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.865095][ T5808] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.885284][ T5808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.897213][ T5808] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 121.922936][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.958903][ T5808] usb 3-1: config 0 descriptor?? [ 122.097974][ T10] usb 4-1: 0:2 : does not exist [ 122.206776][ T7183] loop7: detected capacity change from 0 to 16384 [ 122.399924][ T5808] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 122.411813][ T5808] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 122.423158][ T5808] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 122.432631][ T5808] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 122.443133][ T5808] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 122.450399][ T7184] loop7: detected capacity change from 16384 to 16383 [ 122.575719][ T5808] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 122.629610][ T10] usb 4-1: USB disconnect, device number 13 [ 122.699092][ T5808] usb 3-1: USB disconnect, device number 11 [ 122.791684][ T7191] fido_id[7191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 123.447131][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 123.631451][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.665373][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.687344][ T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 123.704451][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 123.735246][ T9] usb 6-1: Manufacturer: syz [ 123.762128][ T9] usb 6-1: config 0 descriptor?? [ 124.799235][ T9] uclogic 0003:256C:006D.0010: v1 frame probing failed: -71 [ 124.817367][ T9] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 124.845348][ T9] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 124.868518][ T9] usb 6-1: USB disconnect, device number 7 [ 125.114972][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 125.225199][ T7263] kvm: user requested TSC rate below hardware speed [ 125.278729][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.299763][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.312951][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 125.326791][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 125.344700][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.370850][ T10] usb 3-1: config 0 descriptor?? [ 125.504378][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 125.686757][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 125.700785][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 125.712565][ T9] usb 4-1: config 0 has no interface number 0 [ 125.724545][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.739658][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 125.753211][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.791791][ T9] usb 4-1: config 0 descriptor?? [ 125.808818][ T10] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd [ 125.847699][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 125.871221][ T10] plantronics 0003:047F:FFFF.0011: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 126.017982][ T5808] usb 3-1: USB disconnect, device number 12 [ 126.098959][ T10] usb 4-1: USB disconnect, device number 14 [ 126.172647][ T30] audit: type=1326 audit(1772206593.796:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7292 comm="syz.4.484" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7f6c code=0x0 [ 126.939618][ T7319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.493'. [ 126.949548][ T7319] netlink: 32 bytes leftover after parsing attributes in process `syz.1.493'. [ 127.308567][ T7327] veth2: entered promiscuous mode [ 127.337657][ T7327] veth2: entered allmulticast mode [ 127.474788][ T30] audit: type=1326 audit(1772206595.096:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7330 comm="syz.4.498" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7f6c code=0x0 [ 127.564619][ T5808] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 127.734611][ T5808] usb 3-1: Using ep0 maxpacket: 16 [ 127.758207][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.794761][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.814727][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 127.828051][ T5808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 127.842610][ T5808] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.901344][ T5808] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 127.910701][ T5808] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 127.924501][ T5808] usb 3-1: Manufacturer: syz [ 127.943717][ T5808] usb 3-1: config 0 descriptor?? [ 128.044511][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.219044][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.236437][ T5808] rc_core: IR keymap rc-hauppauge not found [ 128.241577][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.253512][ T5808] Registered IR keymap rc-empty [ 128.265082][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 128.270856][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.283528][ T10] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 128.297658][ T10] usb 2-1: Manufacturer: syz [ 128.304617][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.305968][ T10] usb 2-1: config 0 descriptor?? [ 128.343242][ T5808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 128.371304][ T5808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input24 [ 128.394018][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.434734][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.454756][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.484529][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.505469][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.535040][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.556591][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.584456][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.605915][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.634492][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 128.670931][ T5808] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 128.675856][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 128.681760][ T5808] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 128.719402][ T5808] usb 3-1: USB disconnect, device number 13 [ 128.850058][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.882473][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.909047][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 128.939037][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 128.951705][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.966675][ T9] usb 6-1: config 0 descriptor?? [ 129.140260][ T10] uclogic 0003:256C:006D.0012: interface is invalid, ignoring [ 129.162004][ T10] usb 2-1: USB disconnect, device number 8 [ 129.406824][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 129.427348][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 129.463174][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 129.486244][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 129.503755][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 129.518469][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 129.554378][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 129.572442][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 129.594989][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 129.623058][ T9] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 129.671479][ T7395] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 129.676527][ T9] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 130.237727][ T7406] usb 6-1: language id specifier not provided by device, defaulting to English [ 130.258134][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 130.269572][ T7416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 130.291387][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.531'. [ 130.751232][ T7431] netlink: 'syz.2.537': attribute type 10 has an invalid length. [ 130.771425][ T7433] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.538'. [ 130.783590][ T7433] netlink: Conntrack attr has 4 unknown bytes [ 130.802291][ T7431] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 130.814435][ T797] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 130.821977][ T7431] team0: Failed to send options change via netlink (err -105) [ 130.834997][ T7431] team0: Port device netdevsim0 added [ 130.872902][ T7423] capability: warning: `syz.3.534' uses 32-bit capabilities (legacy support in use) [ 130.972448][ T7436] input: syz0 as /devices/virtual/input/input25 [ 130.986637][ T797] usb 5-1: Using ep0 maxpacket: 16 [ 131.003257][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.026080][ T797] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.059324][ T797] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.104695][ T797] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.113764][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.179662][ T797] usb 5-1: config 0 descriptor?? [ 131.612993][ T797] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 131.656443][ T797] microsoft 0003:045E:07DA.0014: unsupported Resolution Multiplier 0 [ 131.747344][ T7465] netlink: 'syz.3.553': attribute type 1 has an invalid length. [ 131.807789][ T7465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.819094][ T797] microsoft 0003:045E:07DA.0014: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 131.830972][ T9] usb 6-1: USB disconnect, device number 8 [ 131.846668][ T797] microsoft 0003:045E:07DA.0014: no inputs found [ 131.853029][ T797] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 131.866659][ T797] usb 5-1: USB disconnect, device number 11 [ 131.931099][ T7469] fido_id[7469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 132.557588][ T797] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 132.678581][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.689551][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.744341][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 132.767193][ T797] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 132.804141][ T797] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.820318][ T797] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.840850][ T7493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.563'. [ 132.850501][ T797] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.862777][ T797] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.894337][ T797] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.933929][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.986887][ T7495] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 133.169994][ T797] usb 4-1: usb_control_msg returned -32 [ 133.187237][ T797] usbtmc 4-1:16.0: can't read capabilities [ 133.189091][ T7499] 8021q: adding VLAN 0 to HW filter on device bond4 [ 133.220974][ T7499] bond3: (slave bond4): making interface the new active one [ 133.229010][ T7499] bond3: (slave bond4): Enslaving as an active interface with an up link [ 133.772348][ T24] usb 4-1: USB disconnect, device number 15 [ 134.955377][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 135.034448][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.576'. [ 135.277220][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.579'. [ 135.327728][ T7536] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 135.353072][ T7536] netlink: 'syz.3.579': attribute type 2 has an invalid length. [ 135.510673][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'. [ 135.592525][ T7546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.583'. [ 136.325845][ T5808] hid_parser_main: 5 callbacks suppressed [ 136.325865][ T5808] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 136.398937][ T5808] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.682098][ T7594] netlink: 'syz.5.603': attribute type 4 has an invalid length. [ 136.691693][ T7594] netlink: 'syz.5.603': attribute type 4 has an invalid length. [ 137.544511][ T5808] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 137.720895][ T5808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.744530][ T5808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.765019][ T5808] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.778141][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.792856][ T5808] usb 4-1: SerialNumber: syz [ 138.041719][ T5808] usb 4-1: 0:2 : does not exist [ 138.167963][ T5808] usb 4-1: USB disconnect, device number 16 [ 138.270757][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.361070][ T7678] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 139.629154][ T5932] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 139.815793][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.858012][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.924326][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.959137][ T5932] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 140.017056][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.045210][ T7693] binder: 7692:7693 unknown command 0 [ 140.055818][ T5932] usb 3-1: config 0 descriptor?? [ 140.091805][ T7693] binder: 7692:7693 ioctl c0306201 80000080 returned -22 [ 140.130363][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.534965][ T5932] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 141.842209][ C1] plantronics 0003:047F:FFFF.0016: usb_submit_urb(ctrl) failed: -1 [ 142.154664][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 142.604307][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 142.631977][ T10] usb 2-1: config index 0 descriptor too short (expected 22308, got 36) [ 142.644356][ T10] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 142.662948][ T10] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 142.681250][ T10] usb 2-1: config 250 has no interface number 0 [ 142.792862][ T10] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65309, setting to 1024 [ 142.816131][ T10] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 142.895059][ T5808] usb 3-1: USB disconnect, device number 14 [ 142.897045][ T10] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 239 [ 142.960924][ T10] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 143.023236][ T10] usb 2-1: config 250 interface 228 has no altsetting 0 [ 143.053824][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 143.121047][ T10] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 143.156611][ T10] usb 2-1: Product: syz [ 143.174509][ T10] usb 2-1: SerialNumber: syz [ 143.232264][ T10] hub 2-1:250.228: bad descriptor, ignoring hub [ 143.251947][ T10] hub 2-1:250.228: probe with driver hub failed with error -5 [ 143.456386][ T10] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 143.881283][ T7756] syzkaller1: entered promiscuous mode [ 143.886914][ T7756] syzkaller1: entered allmulticast mode [ 144.255316][ T5808] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 144.294938][ T30] audit: type=1326 audit(1772206611.916:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz.4.672" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7f6c code=0x0 [ 144.426405][ T5808] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.440387][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.451854][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 144.462509][ T5808] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.477228][ T5808] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.486572][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.505309][ T5808] usb 4-1: config 0 descriptor?? [ 144.514519][ T5932] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 144.589019][ T7731] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 144.684349][ T5932] usb 6-1: Using ep0 maxpacket: 8 [ 144.691524][ T5932] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 144.700667][ T5932] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.711209][ T5932] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.722235][ T5932] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.734980][ T5932] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.750106][ T5932] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.761485][ T5932] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.937634][ T5808] plantronics 0003:047F:FFFF.0017: ignoring exceeding usage max [ 144.982416][ C0] usblp0: nonzero read bulk status received: -71 [ 145.005017][ T5808] plantronics 0003:047F:FFFF.0017: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 145.018997][ T5932] usb 6-1: usb_control_msg returned -32 [ 145.032901][ T5932] usbtmc 6-1:16.0: can't read capabilities [ 145.210533][ T9] usb 2-1: USB disconnect, device number 9 [ 145.259546][ T9] usblp0: removed [ 145.285367][ T5932] usb 4-1: USB disconnect, device number 17 [ 145.791116][ T30] audit: type=1326 audit(1772206613.416:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 145.854337][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 145.864520][ T30] audit: type=1326 audit(1772206613.416:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 145.914323][ T30] audit: type=1326 audit(1772206613.416:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz.1.678" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 145.997313][ T7789] loop8: detected capacity change from 0 to 8 [ 146.028633][ T5960] Dev loop8: unable to read RDB block 8 [ 146.040809][ T5960] loop8: unable to read partition table [ 146.047260][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.047529][ T5960] loop8: partition table beyond EOD, truncated [ 146.069789][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.094615][ T9] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 146.096446][ T7789] Dev loop8: unable to read RDB block 8 [ 146.108164][ T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 146.126896][ T7789] loop8: unable to read partition table [ 146.130861][ T9] usb 5-1: Manufacturer: syz [ 146.140909][ T7789] loop8: partition table beyond EOD, truncated [ 146.149614][ T7789] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 146.161216][ T9] usb 5-1: config 0 descriptor?? [ 146.309985][ T7798] netlink: 52 bytes leftover after parsing attributes in process `syz.1.684'. [ 146.339286][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.684'. [ 146.414349][ T5878] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 146.566708][ T5878] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.583641][ T5878] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.617523][ T5878] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 146.643449][ T5878] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 146.659515][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.678896][ T7794] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 147.207972][ T9] uclogic 0003:256C:006D.0018: v1 frame probing failed: -71 [ 147.215475][ T9] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 147.223059][ T9] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71 [ 147.241819][ T9] usb 5-1: USB disconnect, device number 12 [ 147.276694][ T10] usb 6-1: USB disconnect, device number 9 [ 147.308489][ T797] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 147.484679][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 147.492888][ T797] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 147.509089][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.523076][ T797] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 147.532632][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.540798][ T797] usb 2-1: Product: syz [ 147.546271][ T797] usb 2-1: Manufacturer: syz [ 147.550945][ T797] usb 2-1: SerialNumber: syz [ 147.560444][ T797] usb 2-1: config 0 descriptor?? [ 147.571447][ T797] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 147.593279][ T797] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 147.966065][ T7839] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 148.104682][ T7839] bond1: (slave lo): Enslaving as an active interface with an up link [ 148.188821][ T797] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 148.197068][ T7839] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 148.229062][ T797] em28xx 2-1:0.0: Config register raw data: 0x73 [ 148.236784][ T797] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 148.242986][ T797] em28xx 2-1:0.0: No AC97 audio processor [ 148.290325][ T5878] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 148.348077][ T5878] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input26 [ 148.534977][ T5878] usb 3-1: USB disconnect, device number 15 [ 148.540955][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 148.648585][ T797] usb 2-1: USB disconnect, device number 10 [ 148.882901][ T7865] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 149.173840][ T5808] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 149.209072][ T5808] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.390873][ T7877] loop6: detected capacity change from 0 to 3664 [ 149.398861][ T7877] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.410044][ T7877] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.418400][ T7877] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.427514][ T7877] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.435733][ T7877] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.443618][ T7877] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.461004][ T7878] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 149.471247][ T7877] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.479821][ T7877] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.489381][ T7878] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 149.500943][ T7877] ldm_validate_partition_table(): Disk read failed. [ 149.508738][ T7878] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 149.523405][ T7877] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.568946][ T7877] Buffer I/O error on dev loop6, logical block 0, async page read [ 149.584392][ T7878] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 149.604443][ T7877] Dev loop6: unable to read RDB block 0 [ 149.636312][ T7878] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 149.662883][ T7877] loop6: unable to read partition table [ 149.685234][ T7877] loop_reread_partitions: partition scan of loop6 (3„ ¾‚”˜) failed (rc=-5) [ 149.721305][ T7878] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 149.744500][ T7878] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 149.765810][ T7878] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 149.786148][ T7878] I/O error, dev loop6, sector 3040 op 0x1:(WRITE) flags 0x8800 phys_seg 79 prio class 2 [ 149.810892][ T7878] I/O error, dev loop6, sector 3040 op 0x1:(WRITE) flags 0x8800 phys_seg 79 prio class 2 [ 149.957023][ T797] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 150.125718][ T797] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 150.164654][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.205107][ T797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 150.252276][ T797] usb 2-1: New USB device found, idVendor=056a, idProduct=037b, bcdDevice= 0.00 [ 150.266490][ T7893] loop5: detected capacity change from 0 to 7 [ 150.284480][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.293567][ T7893] Dev loop5: unable to read RDB block 7 [ 150.308588][ T797] usb 2-1: config 0 descriptor?? [ 150.320606][ T7893] loop5: AHDI p1 p2 p3 p4 [ 150.338941][ T7893] loop5: partition table partially beyond EOD, truncated [ 150.360076][ T7893] loop5: p1 start 7562610 is beyond EOD, truncated [ 150.384536][ T7893] loop5: p2 start 1702059890 is beyond EOD, truncated [ 150.398418][ T7893] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 150.535544][ T5960] udevd[5960]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 150.550540][ T6323] udevd[6323]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 150.798789][ T797] wacom 0003:056A:037B.001A: Unknown device_type for 'HID 056a:037b'. Assuming pen. [ 150.842079][ T797] wacom 0003:056A:037B.001A: hidraw0: USB HID v0.00 Device [HID 056a:037b] on usb-dummy_hcd.1-1/input0 [ 150.890902][ T797] input: Wacom One by Wacom M Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:037B.001A/input/input27 [ 151.117790][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.157294][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.309375][ T5808] usb 2-1: USB disconnect, device number 11 [ 151.766197][ T7923] netlink: 'syz.4.735': attribute type 1 has an invalid length. [ 151.815633][ T7923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.735'. [ 152.377356][ T797] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 152.411824][ T30] audit: type=1326 audit(1772206620.036:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.1.742" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf701ef6c code=0x0 [ 152.545687][ T797] usb 5-1: Using ep0 maxpacket: 8 [ 152.563300][ T797] usb 5-1: config index 0 descriptor too short (expected 22308, got 36) [ 152.574348][ T797] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 152.584507][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 152.605899][ T797] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 152.621772][ T797] usb 5-1: config 250 has no interface number 0 [ 152.629422][ T797] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65309, setting to 1024 [ 152.641131][ T797] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 152.651720][ T797] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 239 [ 152.662917][ T797] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 152.677824][ T797] usb 5-1: config 250 interface 228 has no altsetting 0 [ 152.697215][ T797] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 152.706557][ T797] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 152.724342][ T797] usb 5-1: Product: syz [ 152.731224][ T797] usb 5-1: SerialNumber: syz [ 152.748148][ T797] hub 5-1:250.228: bad descriptor, ignoring hub [ 152.764490][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 152.770000][ T797] hub 5-1:250.228: probe with driver hub failed with error -5 [ 152.785767][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 152.818485][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 152.828906][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.838617][ T10] usb 3-1: Product: syz [ 152.843258][ T10] usb 3-1: Manufacturer: syz [ 152.850012][ T10] usb 3-1: SerialNumber: syz [ 152.867620][ T10] usb 3-1: config 0 descriptor?? [ 152.878091][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 152.956349][ T797] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 13 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 153.354358][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 153.524467][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 153.531296][ T24] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 153.540697][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.561401][ T24] usb 6-1: config 0 descriptor?? [ 153.572771][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 153.875329][ T7931] usb 5-1: reset high-speed USB device number 13 using dummy_hcd [ 153.898522][ T10] gspca_zc3xx: reg_w_i err -71 [ 154.224741][ T5932] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 154.317977][ C0] usblp0: nonzero read bulk status received: -71 [ 154.437745][ T5932] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 154.447437][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.455551][ T5932] usb 2-1: Product: syz [ 154.459840][ T5932] usb 2-1: Manufacturer: syz [ 154.464543][ T5932] usb 2-1: SerialNumber: syz [ 154.479697][ T5932] usb 2-1: config 0 descriptor?? [ 154.489492][ T5932] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 154.504350][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 154.561814][ T5878] usb 5-1: USB disconnect, device number 13 [ 154.570514][ T10] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 154.582829][ T5878] usblp0: removed [ 154.626656][ T10] usb 3-1: USB disconnect, device number 16 [ 154.825876][ T24] gspca_vc032x: reg_w err -71 [ 154.835561][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.840917][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.846517][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.851844][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.857797][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.867930][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.873283][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.884557][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.890180][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.895716][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.901062][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.906652][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.912983][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.918657][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.924078][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.929892][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.935390][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.941413][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 154.947348][ T24] gspca_vc032x: Unknown sensor... [ 154.953313][ T24] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 154.967441][ T24] usb 6-1: USB disconnect, device number 10 [ 154.987238][ T7981] binder: 7980:7981 unknown command 0 [ 154.992678][ T7981] binder: 7980:7981 ioctl c0306201 80000040 returned -22 [ 154.999956][ T5878] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 155.157352][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 155.178930][ T5878] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 155.189852][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.205274][ T5878] usb 4-1: config 0 descriptor?? [ 155.215041][ T7973] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 155.284446][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 155.444387][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 155.453012][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 155.464519][ T24] usb 3-1: config 0 has no interface number 0 [ 155.470752][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 155.483427][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 155.493325][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.505605][ T24] usb 3-1: Product: syz [ 155.509908][ T24] usb 3-1: Manufacturer: syz [ 155.514975][ T24] usb 3-1: SerialNumber: syz [ 155.525272][ T24] usb 3-1: config 0 descriptor?? [ 155.661474][ T5878] elan 0003:04F3:0755.001B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 155.694664][ T5934] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 155.727195][ T5932] gspca_sunplus: reg_w_riv err -71 [ 155.739870][ T5932] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 155.770799][ T5932] usb 2-1: USB disconnect, device number 12 [ 155.886237][ T5808] usb 4-1: USB disconnect, device number 18 [ 155.895159][ T5934] usb 6-1: Using ep0 maxpacket: 8 [ 155.909315][ T5934] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.931838][ T5934] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.941685][ T5934] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 155.953306][ T5934] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 155.966037][ T5934] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 155.976612][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.997398][ T5934] hub 6-1:1.0: bad descriptor, ignoring hub [ 156.003381][ T5934] hub 6-1:1.0: probe with driver hub failed with error -5 [ 156.012738][ T5934] cdc_wdm 6-1:1.0: skipping garbage [ 156.018028][ T5934] cdc_wdm 6-1:1.0: skipping garbage [ 156.025285][ T5934] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 156.031228][ T5934] cdc_wdm 6-1:1.0: Unknown control protocol [ 156.314201][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 156.385677][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 156.440746][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 156.700760][ T8006] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 156.718251][ T8006] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 156.743117][ T8006] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 156.784353][ T24] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: b8 failed: -71 [ 156.806347][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 156.813676][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 156.842092][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 156.892371][ T24] usb 3-1: USB disconnect, device number 17 [ 156.971854][ T7987] usb 6-1: reset high-speed USB device number 11 using dummy_hcd [ 157.212465][ T7987] usb 6-1: device firmware changed [ 157.227604][ T9] usb 6-1: USB disconnect, device number 11 [ 157.233644][ T7987] cdc_wdm 6-1:1.0: Error autopm - -16 [ 157.394415][ T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 157.556628][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 157.576049][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.604783][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.637493][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.672267][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 157.691811][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.719266][ T9] hub 6-1:1.0: bad descriptor, ignoring hub [ 157.725994][ T9] hub 6-1:1.0: probe with driver hub failed with error -5 [ 157.733674][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 157.740630][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 157.760819][ T9] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 157.886574][ T5808] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 158.030171][ T8044] netlink: 'syz.4.784': attribute type 1 has an invalid length. [ 158.065126][ T8044] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.079285][ T5808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.099443][ T5808] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.114741][ T9] usb 6-1: USB disconnect, device number 12 [ 158.163252][ T5808] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.190081][ T5808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.216874][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.785'. [ 158.439944][ T5808] usb 2-1: usb_control_msg returned -32 [ 158.454172][ T5808] usbtmc 2-1:16.0: can't read capabilities [ 158.700521][ T30] audit: type=1326 audit(1772206626.326:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 158.754560][ T30] audit: type=1326 audit(1772206626.326:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 158.784539][ T30] audit: type=1326 audit(1772206626.366:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 158.828608][ T30] audit: type=1326 audit(1772206626.366:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 158.856234][ T30] audit: type=1326 audit(1772206626.366:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 158.906416][ T30] audit: type=1326 audit(1772206626.366:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 158.931033][ T30] audit: type=1326 audit(1772206626.366:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 158.957477][ T30] audit: type=1326 audit(1772206626.366:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 159.023039][ T30] audit: type=1326 audit(1772206626.366:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=255 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 159.047738][ T9] usb 2-1: USB disconnect, device number 13 [ 159.055027][ T30] audit: type=1326 audit(1772206626.366:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8055 comm="syz.5.789" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2f6c code=0x7ffc0000 [ 159.444345][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 159.597739][ T24] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.610321][ T24] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 159.632490][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.654421][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 159.671192][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.685254][ T24] usb 3-1: config 0 descriptor?? [ 159.922684][ T8101] netlink: 172 bytes leftover after parsing attributes in process `syz.3.807'. [ 160.145652][ T24] magicmouse 0003:05AC:0265.001C: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 160.157338][ T24] magicmouse 0003:05AC:0265.001C: magicmouse input not registered [ 160.186700][ T24] magicmouse 0003:05AC:0265.001C: probe with driver magicmouse failed with error -12 [ 160.631470][ T145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.803786][ T145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.935772][ T145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.077187][ T145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.180622][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.191385][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.199295][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.233508][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.244748][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.314498][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 161.355383][ T145] bridge_slave_1: left allmulticast mode [ 161.385082][ T145] bridge_slave_1: left promiscuous mode [ 161.416805][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.458200][ T145] bridge_slave_0: left allmulticast mode [ 161.467279][ T145] bridge_slave_0: left promiscuous mode [ 161.482659][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.494683][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 161.508322][ T9] usb 2-1: config 0 has no interfaces? [ 161.539607][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 161.558833][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 161.578524][ T9] usb 2-1: Manufacturer: syz [ 161.594505][ T9] usb 2-1: config 0 descriptor?? [ 161.822050][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.835236][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.846673][ T145] bond0 (unregistering): Released all slaves [ 161.863527][ T145] bond1 (unregistering): (slave lo): Releasing backup interface [ 161.876041][ T145] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 161.888586][ T145] bond1 (unregistering): Released all slaves [ 161.908775][ T145] bond2 (unregistering): Released all slaves [ 161.941825][ T8140] syzkaller1: entered promiscuous mode [ 161.950063][ T8140] syzkaller1: entered allmulticast mode [ 162.214962][ T5822] usb 3-1: USB disconnect, device number 18 [ 162.316444][ T8158] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 162.366942][ T145] hsr_slave_0: left promiscuous mode [ 162.377564][ T145] hsr_slave_1: left promiscuous mode [ 162.383639][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.392892][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.405511][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.413002][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.427058][ T145] veth1_macvtap: left promiscuous mode [ 162.432700][ T145] veth0_macvtap: left promiscuous mode [ 162.438753][ T145] veth1_vlan: left promiscuous mode [ 162.444132][ T145] veth0_vlan: left promiscuous mode [ 162.772245][ T145] team0 (unregistering): Port device team_slave_1 removed [ 162.820356][ T145] team0 (unregistering): Port device team_slave_0 removed [ 163.039544][ T8158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 163.060272][ T8165] bond5: (slave geneve3): making interface the new active one [ 163.087300][ T8165] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 163.125999][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 163.249890][ T8125] chnl_net:caif_netlink_parms(): no params data found [ 163.288318][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.310420][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.323347][ T5143] Bluetooth: hci4: command tx timeout [ 163.334320][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.364331][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.373386][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.410378][ T9] usb 4-1: config 0 descriptor?? [ 163.530303][ T8125] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.542239][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.560263][ T8125] bridge_slave_0: entered allmulticast mode [ 163.576565][ T8125] bridge_slave_0: entered promiscuous mode [ 163.586869][ T8125] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.597017][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.604674][ T8125] bridge_slave_1: entered allmulticast mode [ 163.613030][ T8125] bridge_slave_1: entered promiscuous mode [ 163.673560][ T8125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.711781][ T8125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.772578][ T8125] team0: Port device team_slave_0 added [ 163.795498][ T8125] team0: Port device team_slave_1 added [ 163.854668][ T9] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 163.908068][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.935837][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.018007][ T8125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.062934][ T8125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.089088][ T8125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.124485][ T5878] usb 2-1: USB disconnect, device number 14 [ 164.189935][ T8125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.380259][ T8125] hsr_slave_0: entered promiscuous mode [ 164.406174][ T8125] hsr_slave_1: entered promiscuous mode [ 164.574428][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 164.647892][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 164.708176][ T8232] netlink: 104 bytes leftover after parsing attributes in process `syz.1.840'. [ 164.749738][ T8232] netlink: 104 bytes leftover after parsing attributes in process `syz.1.840'. [ 165.188378][ T5808] usb 4-1: USB disconnect, device number 19 [ 165.395072][ T5143] Bluetooth: hci4: command tx timeout [ 165.711468][ T8260] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.847'. [ 166.020383][ T8125] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.097698][ T8125] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.121889][ T8270] mmap: syz.1.850 (8270) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 166.162895][ T8125] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.218370][ T8125] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.234752][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 166.378708][ T8285] input: syz0 as /devices/virtual/input/input31 [ 166.435132][ T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 166.469559][ T10] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 166.490207][ T5808] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 166.500409][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 166.534544][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 166.579818][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 166.629780][ T8125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.636310][ T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.645693][ T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.653692][ T10] usb 4-1: Product: syz [ 166.684400][ T10] usb 4-1: Manufacturer: syz [ 166.689684][ T5808] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 166.708810][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 166.714066][ T10] cdc_wdm 4-1:1.0: skipping garbage [ 166.736195][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.740516][ T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 166.749049][ T8125] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.784409][ T10] cdc_wdm 4-1:1.0: Unknown control protocol [ 166.791015][ T5808] usb 6-1: config 0 descriptor?? [ 166.831640][ T6989] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.838387][ T5808] cp210x 6-1:0.0: cp210x converter detected [ 166.838818][ T6989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.953519][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.960694][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.044230][ T8274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.074950][ T8274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.192432][ T8125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.291508][ T8125] veth0_vlan: entered promiscuous mode [ 167.300439][ T10] usb 4-1: USB disconnect, device number 20 [ 167.319020][ T5808] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 167.336223][ T8125] veth1_vlan: entered promiscuous mode [ 167.356660][ T5808] usb 6-1: cp210x converter now attached to ttyUSB0 [ 167.428904][ T8125] veth0_macvtap: entered promiscuous mode [ 167.471621][ T8125] veth1_macvtap: entered promiscuous mode [ 167.480647][ T5143] Bluetooth: hci4: command tx timeout [ 167.520747][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.569050][ T8125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.585664][ T10] usb 6-1: USB disconnect, device number 13 [ 167.608580][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 167.617027][ T6992] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.627637][ T10] cp210x 6-1:0.0: device disconnected [ 167.655557][ T6992] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.666331][ T5808] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 167.688156][ T6992] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.702197][ T6992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.834326][ T5808] usb 3-1: Using ep0 maxpacket: 32 [ 167.855979][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.889317][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.917264][ T5808] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 167.941622][ T1328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.952078][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.969301][ T1328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.992545][ T5808] usb 3-1: config 0 descriptor?? [ 168.071816][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.098223][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.448350][ T5808] ft260 0003:0403:6030.001E: unknown main item tag 0x7 [ 168.614362][ T5878] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 168.639897][ T5808] ft260 0003:0403:6030.001E: chip code: b200 0000 [ 168.811097][ T5878] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 168.847603][ T5808] ft260 0003:0403:6030.001E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 168.864480][ T5878] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 168.894695][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 168.957285][ T5878] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 168.987895][ T5878] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 169.009424][ T5878] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.020006][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.046609][ T5808] ft260 0003:0403:6030.001E: failed to retrieve status: -71, no wakeup [ 169.071430][ T5878] usb 2-1: Product: syz [ 169.088428][ T5808] ft260 0003:0403:6030.001E: failed to retrieve status: -71 [ 169.096154][ T5878] usb 2-1: Manufacturer: syz [ 169.121063][ T5808] ft260 0003:0403:6030.001E: failed to reset I2C controller: -71 [ 169.176820][ T5878] cdc_wdm 2-1:1.0: skipping garbage [ 169.196479][ T5878] cdc_wdm 2-1:1.0: skipping garbage [ 169.239950][ T5878] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 169.264561][ T5808] usb 3-1: USB disconnect, device number 19 [ 169.275426][ T5878] cdc_wdm 2-1:1.0: Unknown control protocol [ 169.485395][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 169.486861][ T5934] usb 2-1: USB disconnect, device number 15 [ 169.492021][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 169.492041][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 169.555929][ T5143] Bluetooth: hci4: command tx timeout [ 169.697133][ T8380] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.879'. [ 170.340334][ T8396] veth1_to_bridge: entered promiscuous mode [ 170.361573][ T8398] pim6reg1: entered promiscuous mode [ 170.368083][ T8398] pim6reg1: entered allmulticast mode [ 170.429510][ T8396] veth1_to_bridge: left promiscuous mode [ 170.638594][ T5934] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 170.786494][ T8421] loop5: detected capacity change from 0 to 7 [ 170.799656][ T8421] Dev loop5: unable to read RDB block 7 [ 170.806808][ T8421] loop5: AHDI p1 p2 p3 [ 170.814370][ T5808] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 170.822766][ T8421] loop5: partition table partially beyond EOD, truncated [ 170.830049][ T5934] usb 6-1: Using ep0 maxpacket: 8 [ 170.846225][ T8421] loop5: p1 size 100663304 extends beyond EOD, truncated [ 170.856481][ T5934] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.867948][ T8421] loop5: p2 start 1702059890 is beyond EOD, truncated [ 170.869834][ T5934] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.884761][ T5934] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.895320][ T5934] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.910954][ T5934] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 170.920482][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.006820][ T5808] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 171.030037][ T5960] udevd[5960]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 171.030709][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.084602][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.124508][ T5808] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 171.156920][ T5934] usb 6-1: GET_CAPABILITIES returned 0 [ 171.164889][ T9] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 171.172606][ T5934] usbtmc 6-1:16.0: can't read capabilities [ 171.186326][ T5808] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 171.206283][ T5808] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 171.224232][ T5808] usb 4-1: Manufacturer: syz [ 171.240451][ T5808] usb 4-1: config 0 descriptor?? [ 171.331280][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 171.360939][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.378652][ T9] usb 5-1: Product: syz [ 171.383010][ T9] usb 5-1: Manufacturer: syz [ 171.393448][ T9] usb 5-1: SerialNumber: syz [ 171.416410][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.426918][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.436038][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.480931][ T9] usb 5-1: config 0 descriptor?? [ 171.526962][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.536079][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.545169][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.554254][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.565738][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.574830][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.585012][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.594096][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.603177][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.612272][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.621356][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.630420][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.639556][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 171.657141][ T5878] usb 6-1: USB disconnect, device number 14 [ 171.726806][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 171.737229][ T5808] appleir 0003:05AC:8243.001F: unknown main item tag 0x0 [ 171.770382][ T5808] appleir 0003:05AC:8243.001F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 172.174842][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 172.174860][ T30] audit: type=1326 audit(1772206639.786:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7fc00000 [ 172.519800][ T5808] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 172.541018][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 172.565431][ T9] usb 5-1: USB disconnect, device number 14 [ 172.683449][ T5808] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 172.700368][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.712830][ T5808] usb 3-1: config 0 descriptor?? [ 172.732178][ T5808] cp210x 3-1:0.0: cp210x converter detected [ 172.750403][ T30] audit: type=1326 audit(1772206640.376:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8447 comm="syz.1.897" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf701ef6c code=0x7fc00000 [ 173.148414][ T5808] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 173.166082][ T5808] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 173.190145][ T5808] usb 3-1: cp210x converter now attached to ttyUSB0 [ 173.257914][ T8486] netlink: 'syz.4.901': attribute type 13 has an invalid length. [ 173.389076][ T10] usb 3-1: USB disconnect, device number 20 [ 173.404933][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 173.413154][ T10] cp210x 3-1:0.0: device disconnected [ 173.915304][ T5808] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 173.945728][ T5878] usb 4-1: USB disconnect, device number 21 [ 174.145949][ T5808] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 174.154391][ T5808] usb 5-1: config 4 has no interface number 0 [ 174.176142][ T5808] usb 5-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 174.192044][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.202594][ T8512] raw_sendmsg: syz.1.912 forgot to set AF_INET. Fix it! [ 174.210317][ T5808] usb 5-1: Product: syz [ 174.226883][ T5808] usb 5-1: Manufacturer: syz [ 174.231867][ T5808] usb 5-1: SerialNumber: syz [ 174.254344][ T24] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 174.269302][ T5808] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.28/input/input32 [ 174.434030][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29389, setting to 64 [ 174.458814][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.508887][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.523638][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.545480][ T5178] bcm5974 5-1:4.28: could not read from device [ 174.559548][ T24] usb 6-1: config 0 descriptor?? [ 174.574156][ T8515] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 174.597335][ T5808] bcm5974 5-1:4.28: could not read from device [ 174.611936][ T5178] bcm5974 5-1:4.28: could not read from device [ 174.654433][ T5808] input: failed to attach handler mousedev to device input32, error: -5 [ 174.684734][ T5808] usb 5-1: USB disconnect, device number 15 [ 174.704942][ T5178] bcm5974 5-1:4.28: could not read from device [ 174.744510][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.919'. [ 175.092135][ T24] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 175.406381][ T9] usb 6-1: USB disconnect, device number 15 [ 175.569396][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'. [ 175.580925][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'. [ 176.613221][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 176.624621][ T5878] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 176.746430][ T9] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 176.768107][ T9] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 176.795240][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.815290][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.855864][ T5878] usb 2-1: string descriptor 0 read error: -22 [ 176.872472][ T5878] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.891732][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.949633][ T5878] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.995666][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 177.155744][ T9] usb 6-1: config 0 has no interfaces? [ 177.162288][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.171337][ T24] usb 2-1: USB disconnect, device number 16 [ 177.173153][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 177.186241][ T9] usb 6-1: SerialNumber: syz [ 177.198575][ T9] usb 6-1: config 0 descriptor?? [ 177.234419][ T5934] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 177.397977][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.410978][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.420887][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.433953][ T5934] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.443460][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.453503][ T5934] usb 4-1: config 0 descriptor?? [ 177.788201][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.952'. [ 177.798388][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.952'. [ 177.809001][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.952'. [ 177.874745][ T5934] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 177.902934][ T5934] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 177.953179][ T30] audit: type=1326 audit(1772206645.576:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 177.976276][ T30] audit: type=1326 audit(1772206645.576:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 177.998848][ T30] audit: type=1326 audit(1772206645.576:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 178.026168][ T30] audit: type=1326 audit(1772206645.576:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 178.048962][ T30] audit: type=1326 audit(1772206645.576:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 178.090458][ T30] audit: type=1326 audit(1772206645.576:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 178.112479][ T30] audit: type=1326 audit(1772206645.576:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 178.172171][ T30] audit: type=1326 audit(1772206645.576:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 178.198468][ T30] audit: type=1326 audit(1772206645.576:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 178.220375][ T30] audit: type=1326 audit(1772206645.576:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.2.955" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6ffef6c code=0x7ffc0000 [ 178.939767][ T8634] loop4: detected capacity change from 0 to 7 [ 178.968068][ T8634] Dev loop4: unable to read RDB block 7 [ 178.987950][ T8634] loop4: unable to read partition table [ 179.003737][ T8634] loop4: partition table beyond EOD, truncated [ 179.014951][ T8634] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 179.366750][ T5885] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 179.552797][ T5885] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 179.574697][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.583014][ T5885] usb 5-1: Product: syz [ 179.587607][ T5885] usb 5-1: Manufacturer: syz [ 179.592226][ T5885] usb 5-1: SerialNumber: syz [ 179.598687][ T5885] usb 5-1: config 0 descriptor?? [ 179.730696][ T5934] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 179.754429][ T5878] usb 6-1: USB disconnect, device number 16 [ 179.788860][ T5934] usb 4-1: USB disconnect, device number 22 [ 179.879602][ T8652] fido_id[8652]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 180.026514][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 180.144523][ T5934] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 180.194759][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 180.215997][ T9] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 180.233241][ T9] usb 2-1: config 0 has no interface number 0 [ 180.242460][ T9] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 180.263533][ T9] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 180.284536][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.292631][ T9] usb 2-1: Product: syz [ 180.297284][ T9] usb 2-1: Manufacturer: syz [ 180.301929][ T9] usb 2-1: SerialNumber: syz [ 180.310473][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 180.343688][ T9] usb 2-1: config 0 descriptor?? [ 180.345011][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.378232][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 180.395273][ T5934] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 180.406605][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.421054][ T5934] usb 4-1: Product: syz [ 180.425561][ T5934] usb 4-1: Manufacturer: syz [ 180.430389][ T5934] usb 4-1: SerialNumber: syz [ 180.437878][ T5934] usb 4-1: config 0 descriptor?? [ 180.608199][ T8678] netlink: 35 bytes leftover after parsing attributes in process `syz.2.982'. [ 180.617989][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.982'. [ 180.654559][ T5885] usb 5-1: non-Atmel transceiver xxxx0447 [ 180.690663][ T5934] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 180.784442][ T797] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 180.863959][ T5885] usb 5-1: Firmware version (0.0) predates our first public release. [ 180.877451][ T5885] usb 5-1: Please update to version 0.2 or newer [ 180.885625][ T5885] usb 5-1: atusb_probe: initialization failed, error = -19 [ 180.912964][ T5885] usb 5-1: USB disconnect, device number 16 [ 180.939562][ T797] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 180.955817][ T797] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 180.968424][ T9] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 180.981006][ T797] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.996523][ T5878] usb 4-1: USB disconnect, device number 23 [ 181.010529][ T9] usb 2-1: USB disconnect, device number 17 [ 181.017835][ T797] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 181.032581][ T797] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 181.053563][ T797] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 181.063020][ T797] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 181.077870][ T797] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.092843][ T797] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 181.106239][ T797] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 181.119994][ T797] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 181.129883][ T797] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 181.141217][ T797] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.153253][ T797] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 181.165444][ T797] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 181.179842][ T797] usb 6-1: string descriptor 0 read error: -22 [ 181.187063][ T797] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 181.197497][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.229364][ T797] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 182.134379][ T797] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 182.347045][ T797] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.392180][ T797] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 182.419223][ T797] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.436345][ T797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.447082][ T797] usb 2-1: Product: syz [ 182.451285][ T797] usb 2-1: Manufacturer: syz [ 182.456938][ T797] usb 2-1: SerialNumber: syz [ 182.707145][ T8707] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.355482][ T8707] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 183.565801][ T797] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 183.572303][ T797] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 183.580282][ T797] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 183.767889][ T797] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 183.779344][ T797] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 183.795124][ T797] usb 2-1: USB disconnect, device number 18 [ 183.802623][ T797] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 184.454569][ T5822] usb 6-1: USB disconnect, device number 17 [ 184.580326][ T8736] veth3: entered allmulticast mode [ 184.769289][ T797] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 184.777200][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 184.944541][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 184.953410][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 184.964451][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.974149][ T797] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 184.983975][ T797] usb 5-1: config 0 has no interface number 0 [ 184.991818][ T9] usb 2-1: config 0 descriptor?? [ 185.008892][ T797] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 185.021374][ T9] gspca_main: spca508-2.14.0 probing 8086:0110 [ 185.042957][ T797] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 185.064741][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.091255][ T797] usb 5-1: Product: syz [ 185.108350][ T797] usb 5-1: Manufacturer: syz [ 185.114421][ T797] usb 5-1: SerialNumber: syz [ 185.133116][ T797] usb 5-1: config 0 descriptor?? [ 185.163913][ T8732] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 185.218464][ T9] gspca_spca508: reg_read err -32 [ 185.234428][ T9] gspca_spca508: reg_read err -32 [ 185.241391][ T9] gspca_spca508: reg_read err -32 [ 185.261350][ T9] gspca_spca508: reg_read err -32 [ 185.390265][ T8732] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 185.469490][ T9] gspca_spca508: reg write: error -71 [ 185.491913][ T9] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 185.518728][ T9] usb 2-1: USB disconnect, device number 19 [ 185.709090][ T8767] netlink: 'syz.5.1018': attribute type 1 has an invalid length. [ 185.717855][ T8767] netlink: 'syz.5.1018': attribute type 2 has an invalid length. [ 185.726535][ T8767] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1018'. [ 185.736183][ T8767] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.789745][ T8769] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1019'. [ 186.047522][ T797] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 186.078322][ T797] asix 5-1:0.188: probe with driver asix failed with error -71 [ 186.120656][ T797] usb 5-1: USB disconnect, device number 17 [ 186.665117][ T797] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 186.734385][ T5934] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 186.858306][ T797] usb 3-1: Using ep0 maxpacket: 8 [ 186.895234][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 186.911162][ T5934] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 186.940314][ T5934] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.960823][ T5934] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 187.007353][ T5934] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 187.010156][ T797] usb 3-1: unable to get BOS descriptor or descriptor too short [ 187.044863][ T5934] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.045954][ T797] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 187.084158][ T797] usb 3-1: can't read configurations, error -71 [ 187.104518][ T5934] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 187.113589][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.420458][ T5934] usb 4-1: usb_control_msg returned -32 [ 187.430271][ T5934] usbtmc 4-1:16.0: can't read capabilities [ 187.992029][ T8833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1045'. [ 188.001739][ T8833] netlink: 'syz.4.1045': attribute type 18 has an invalid length. [ 188.016071][ T5934] usb 4-1: USB disconnect, device number 24 [ 188.063370][ T8833] vxlan0: entered promiscuous mode [ 188.075416][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.084493][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.116346][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.126167][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.138845][ T8835] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 188.147001][ T8835] syzkaller1: Linktype set failed because interface is up [ 188.155389][ T5808] syzkaller1: tun_net_xmit 90 [ 188.920481][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'. [ 188.934225][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'. [ 189.065156][ T797] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 189.227074][ T797] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 189.240648][ T797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.253121][ T797] usb 5-1: config 0 descriptor?? [ 189.493806][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.965357][ T8899] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1075'. [ 190.488313][ T797] usb 5-1: Cannot set autoneg [ 190.496076][ T797] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 190.515530][ T5822] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 190.524195][ T5808] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 190.527704][ T797] usb 5-1: USB disconnect, device number 18 [ 190.675623][ T8910] netlink: 392 bytes leftover after parsing attributes in process `syz.1.1079'. [ 190.714365][ T5808] usb 6-1: Using ep0 maxpacket: 8 [ 190.722465][ T5822] usb 3-1: Using ep0 maxpacket: 32 [ 190.779202][ T5822] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 190.792027][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.800862][ T5822] usb 3-1: Product: syz [ 190.806027][ T5822] usb 3-1: Manufacturer: syz [ 190.810654][ T5822] usb 3-1: SerialNumber: syz [ 190.824676][ T5822] usb 3-1: config 0 descriptor?? [ 190.835477][ T5822] hub 3-1:0.0: bad descriptor, ignoring hub [ 190.842317][ T5822] hub 3-1:0.0: probe with driver hub failed with error -5 [ 190.851305][ T5822] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 190.900327][ T5808] usb 6-1: unable to get BOS descriptor or descriptor too short [ 190.926307][ T5808] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 190.933939][ T5808] usb 6-1: can't read configurations, error -71 [ 191.460003][ T5822] gspca_vc032x: reg_r err -71 [ 191.467048][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.472352][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.489320][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.505189][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.524576][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.529874][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.553650][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.578657][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.583983][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.604345][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.609647][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.615337][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.620771][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.628319][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.633670][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.643139][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.649247][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.658465][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.669659][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 191.684572][ T5822] gspca_vc032x: Unknown sensor... [ 191.689879][ T5822] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 191.757265][ T5822] usb 3-1: USB disconnect, device number 23 [ 192.184375][ T5808] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 192.350806][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 192.354380][ T5808] usb 6-1: Using ep0 maxpacket: 8 [ 192.377037][ T5808] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.397412][ T5808] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.427043][ T5808] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.452546][ T5808] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.488300][ T5808] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.530032][ T5808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.806178][ T5808] usb 6-1: GET_CAPABILITIES returned 0 [ 192.811713][ T5808] usbtmc 6-1:16.0: can't read capabilities [ 192.998493][ T5885] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 193.080180][ T5808] usb 6-1: USB disconnect, device number 20 [ 193.174325][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 193.199461][ T5885] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 193.236253][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 193.264338][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 193.284906][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 193.301354][ T5885] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 193.321072][ T5885] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 193.337085][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.346231][ T5885] usb 5-1: Product: syz [ 193.350429][ T5885] usb 5-1: Manufacturer: syz [ 193.357064][ T5885] usb 5-1: SerialNumber: syz [ 193.364607][ T5885] usb 5-1: config 0 descriptor?? [ 193.806534][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 193.824094][ T5885] input input34: Device does not respond to id packet M [ 193.837815][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 193.843865][ T5885] input input34: Device does not respond to id packet P [ 193.859559][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 193.866214][ T5885] input input34: Device does not respond to id packet B [ 194.075625][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.092241][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.112224][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.126276][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.132581][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.141977][ T5885] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 194.152649][ T5885] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input34 [ 194.184602][ T5885] usb 5-1: USB disconnect, device number 19 [ 194.195407][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 194.367130][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 194.385505][ T9] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.404331][ T9] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.424336][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 194.436778][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.888863][ T9] mcp2221 0003:04D8:00DD.0023: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 195.375354][ T9] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 195.464488][ T5808] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 195.524430][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 195.531638][ T9] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 195.540818][ T9] usb 6-1: config 0 has no interface number 0 [ 195.548488][ T9] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 195.560437][ T9] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 195.569533][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.577578][ T9] usb 6-1: Product: syz [ 195.581740][ T9] usb 6-1: Manufacturer: syz [ 195.586408][ T9] usb 6-1: SerialNumber: syz [ 195.593704][ T9] usb 6-1: config 0 descriptor?? [ 195.629999][ T5808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.651280][ T5808] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.669119][ T5808] usb 2-1: New USB device found, idVendor=0025, idProduct=a4a1, bcdDevice= 0.40 [ 195.687105][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.695490][ T5808] usb 2-1: Product: syz [ 195.699978][ T5808] usb 2-1: Manufacturer: syz [ 195.706837][ T5808] usb 2-1: SerialNumber: syz [ 195.755782][ T5885] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 195.914383][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 195.922845][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.936169][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.950611][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 195.963921][ T5885] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 195.979555][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.002266][ T5885] usb 3-1: config 0 descriptor?? [ 196.205149][ T5143] Bluetooth: hci0: command 0x0406 tx timeout [ 196.214435][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 196.214463][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 196.235140][ T9] usbtouchscreen 6-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 196.261523][ T9] usb 6-1: USB disconnect, device number 21 [ 196.465570][ T5885] input: HID 0955:7214 Haptics as /devices/virtual/input/input36 [ 196.516276][ T5885] shield 0003:0955:7214.0024: Registered Thunderstrike controller [ 196.524721][ T5885] shield 0003:0955:7214.0024: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 196.688756][ T9034] random: crng reseeded on system resumption [ 196.716530][ T10] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 196.728917][ T9] usb 3-1: USB disconnect, device number 24 [ 196.749304][ T10] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 196.792972][ T10] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 196.847009][ T10] shield 0003:0955:7214.0024: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 196.985390][ T5808] cdc_ncm 2-1:1.0: bind() failure [ 197.034723][ T5808] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 197.043338][ T5808] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 197.065625][ T5808] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 197.087960][ T5808] usb 2-1: USB disconnect, device number 20 [ 197.094316][ T797] usb 4-1: reset high-speed USB device number 25 using dummy_hcd [ 197.112768][ T797] usb 4-1: device reset changed ep0 maxpacket size! [ 197.136629][ T5934] usb 4-1: USB disconnect, device number 25 [ 197.316902][ T5934] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 197.433700][ T9062] input: syz1 as /devices/virtual/input/input37 [ 197.484373][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 197.503252][ T9066] netlink: 'syz.5.1144': attribute type 8 has an invalid length. [ 197.513309][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1144'. [ 197.513461][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0 [ 197.529187][ T9066] bond0: entered promiscuous mode [ 197.529206][ T9066] bond_slave_0: entered promiscuous mode [ 197.529389][ T9066] bond_slave_1: entered promiscuous mode [ 197.538199][ T5934] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 197.555550][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.556490][ T9066] gretap0: entered promiscuous mode [ 197.563538][ T5934] usb 4-1: Product: syz [ 197.563556][ T5934] usb 4-1: Manufacturer: syz [ 197.563570][ T5934] usb 4-1: SerialNumber: syz [ 197.601251][ T9066] bond0: left promiscuous mode [ 197.628314][ T9066] bond_slave_0: left promiscuous mode [ 197.628665][ T5934] usb 4-1: config 0 descriptor?? [ 197.633901][ T9066] bond_slave_1: left promiscuous mode [ 197.670590][ T9066] gretap0: left promiscuous mode [ 198.034458][ T5822] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 198.042133][ T5808] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 198.069837][ T5934] gs_usb 4-1:0.0: Configuring for 82 interfaces [ 198.094447][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 198.197874][ T5822] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 198.208961][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.219969][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.230934][ T5822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.240700][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.245875][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 198.250661][ T5822] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 198.262426][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 198.275134][ T5808] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.299918][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 198.310684][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 198.311985][ T5808] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.324106][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 198.332984][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.344972][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.354537][ T5808] usb 5-1: config 0 descriptor?? [ 198.362918][ T5822] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 198.372681][ T5822] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 198.380832][ T9] usb 6-1: config 0 descriptor?? [ 198.387698][ T5822] usb 2-1: Manufacturer: syz [ 198.403954][ T5822] usb 2-1: config 0 descriptor?? [ 198.712178][ T5934] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 198.737682][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880312bdc00: rx timeout, send abort [ 198.747320][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880312bdc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 198.811585][ T9] plantronics 0003:047F:FFFF.0025: ignoring exceeding usage max [ 198.829794][ T5822] appleir 0003:05AC:8243.0027: unknown main item tag 0x0 [ 198.843428][ T5808] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 198.860220][ T5934] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 198.871248][ T9] plantronics 0003:047F:FFFF.0025: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 198.873858][ T5822] appleir 0003:05AC:8243.0027: hiddev2,hidraw2: USB HID v10.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 198.917912][ T5934] usb 4-1: USB disconnect, device number 26 [ 200.070223][ T9107] netlink: 'syz.2.1159': attribute type 1 has an invalid length. [ 200.078825][ T9107] netlink: 'syz.2.1159': attribute type 2 has an invalid length. [ 200.092694][ T9107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 200.206130][ T797] usb 6-1: USB disconnect, device number 22 [ 200.217805][ T5878] usb 2-1: USB disconnect, device number 21 [ 200.364558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 200.434840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 200.834685][ T5932] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 201.004491][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 201.010109][ T5934] usb 5-1: USB disconnect, device number 20 [ 201.025227][ T5932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.055716][ T5932] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.082597][ T5932] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.086521][ T797] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 201.098278][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.110258][ T5932] usb 3-1: Product: syz [ 201.114615][ T5932] usb 3-1: Manufacturer: syz [ 201.119215][ T5932] usb 3-1: SerialNumber: syz [ 201.264385][ T797] usb 6-1: Using ep0 maxpacket: 8 [ 201.274103][ T797] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 201.283372][ T797] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.298275][ T797] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.308276][ T797] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.326658][ T797] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.333761][ T5932] usb 3-1: 0:2 : does not exist [ 201.349529][ T797] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 201.370470][ T5932] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 201.370653][ T797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.422820][ T5932] usb 3-1: USB disconnect, device number 25 [ 201.460951][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.619141][ T797] usb 6-1: usb_control_msg returned -32 [ 201.626026][ T797] usbtmc 6-1:16.0: can't read capabilities [ 201.699572][ T9153] netlink: 'syz.4.1178': attribute type 9 has an invalid length. [ 201.707531][ T9153] netlink: 'syz.4.1178': attribute type 11 has an invalid length. [ 201.715866][ T9153] netlink: 'syz.4.1178': attribute type 12 has an invalid length. [ 201.723766][ T9153] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1178'. [ 201.733379][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1178'. [ 202.009231][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 202.035206][ T9162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1182'. [ 202.056489][ T9166] netlink: 'syz.1.1184': attribute type 3 has an invalid length. [ 202.072096][ T9166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 202.164337][ T5878] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 202.348861][ T5878] usb 5-1: config 118 interface 0 has no altsetting 0 [ 202.378878][ T5878] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 202.399203][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.418982][ T5878] usb 5-1: Product: syz [ 202.423182][ T5878] usb 5-1: Manufacturer: syz [ 202.439156][ T5878] usb 5-1: SerialNumber: syz [ 202.479457][ T9177] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 202.668267][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 202.680265][ T5878] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 202.685450][ T5934] usb 6-1: USB disconnect, device number 23 [ 202.707787][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 202.736100][ T5878] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 202.765787][ T5878] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 202.786806][ T5878] usb 5-1: media controller created [ 202.822019][ T9195] [ 202.824366][ T9195] ===================================================== [ 202.828935][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.831287][ T9195] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 202.831317][ T9195] syzkaller #0 Tainted: G L [ 202.853027][ T9195] ----------------------------------------------------- [ 202.859957][ T9195] syz.1.1196/9195 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 202.867592][ T9195] ffff88802c18b7f8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 202.876306][ T9195] [ 202.876306][ T9195] and this task is already holding: [ 202.883649][ T9195] ffff888029503028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 202.893434][ T9195] which would create a new lock dependency: [ 202.899404][ T9195] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 202.907529][ T9195] [ 202.907529][ T9195] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 202.911052][ T5878] DVB: Unable to find symbol mt352_attach() [ 202.916972][ T9195] (&dev->event_lock#2){..-.}-{3:3} [ 202.917000][ T9195] [ 202.917000][ T9195] ... which became SOFTIRQ-irq-safe at: [ 202.917009][ T9195] lock_acquire+0xf0/0x2e0 [ 202.917035][ T9195] _raw_spin_lock_irqsave+0x40/0x60 [ 202.917060][ T9195] input_inject_event+0xa5/0x340 [ 202.917087][ T9195] kd_sound_helper+0x101/0x210 [ 202.917108][ T9195] input_handler_for_each_handle+0x101/0x1c0 [ 202.917125][ T9195] call_timer_fn+0x192/0x640 [ 202.917154][ T9195] __run_timer_base+0x652/0x8b0 [ 202.917169][ T9195] run_timer_softirq+0xb7/0x170 [ 202.917188][ T9195] handle_softirqs+0x22a/0x870 [ 202.917210][ T9195] do_softirq+0x76/0xd0 [ 202.917229][ T9195] __local_bh_enable_ip+0xf8/0x130 [ 202.917251][ T9195] __alloc_skb+0x1aa/0x7d0 [ 202.917270][ T9195] alloc_skb_with_frags+0xca/0x890 [ 202.917294][ T9195] sock_alloc_send_pskb+0x878/0x990 [ 202.917318][ T9195] unix_dgram_sendmsg+0x460/0x18e0 [ 202.917337][ T9195] __sys_sendto+0x709/0x7a0 [ 203.014932][ T9195] __x64_sys_sendto+0xde/0x100 [ 203.019781][ T9195] do_syscall_64+0x14d/0xf80 [ 203.024453][ T9195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.030424][ T9195] [ 203.030424][ T9195] to a SOFTIRQ-irq-unsafe lock: [ 203.037429][ T9195] (tasklist_lock){.+.+}-{3:3} [ 203.037454][ T9195] [ 203.037454][ T9195] ... which became SOFTIRQ-irq-unsafe at: [ 203.050052][ T9195] ... [ 203.050061][ T9195] lock_acquire+0xf0/0x2e0 [ 203.057131][ T9195] _raw_read_lock+0x36/0x50 [ 203.061709][ T9195] __do_wait+0xde/0x740 [ 203.065936][ T9195] do_wait+0x1e7/0x540 [ 203.070073][ T9195] kernel_wait+0xd6/0x1c0 [ 203.074471][ T9195] call_usermodehelper_exec_work+0xbe/0x230 [ 203.080442][ T9195] process_scheduled_works+0xb02/0x1830 [ 203.086060][ T9195] worker_thread+0xa50/0xfc0 [ 203.090732][ T9195] kthread+0x388/0x470 [ 203.094888][ T9195] ret_from_fork+0x51e/0xb90 [ 203.099557][ T9195] ret_from_fork_asm+0x1a/0x30 [ 203.104399][ T9195] [ 203.104399][ T9195] other info that might help us debug this: [ 203.104399][ T9195] [ 203.114609][ T9195] Chain exists of: [ 203.114609][ T9195] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 203.114609][ T9195] [ 203.128161][ T9195] Possible interrupt unsafe locking scenario: [ 203.128161][ T9195] [ 203.136462][ T9195] CPU0 CPU1 [ 203.141811][ T9195] ---- ---- [ 203.147156][ T9195] lock(tasklist_lock); [ 203.151385][ T9195] local_irq_disable(); [ 203.158122][ T9195] lock(&dev->event_lock#2); [ 203.165315][ T9195] lock(&client->buffer_lock); [ 203.172668][ T9195] [ 203.176104][ T9195] lock(&dev->event_lock#2); [ 203.180950][ T9195] [ 203.180950][ T9195] *** DEADLOCK *** [ 203.180950][ T9195] [ 203.189081][ T9195] 7 locks held by syz.1.1196/9195: [ 203.194171][ T9195] #0: ffff88802b99d118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 203.203301][ T9195] #1: ffff88801f3ff230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 203.213390][ T9195] #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 203.223051][ T9195] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 203.232613][ T9195] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 203.241740][ T9195] #5: ffff888029503028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 203.251909][ T9195] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 203.260944][ T9195] [ 203.260944][ T9195] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 203.271327][ T9195] -> (&dev->event_lock#2){..-.}-{3:3} { [ 203.276962][ T9195] IN-SOFTIRQ-W at: [ 203.281020][ T9195] lock_acquire+0xf0/0x2e0 [ 203.287246][ T9195] _raw_spin_lock_irqsave+0x40/0x60 [ 203.294256][ T9195] input_inject_event+0xa5/0x340 [ 203.301011][ T9195] kd_sound_helper+0x101/0x210 [ 203.307593][ T9195] input_handler_for_each_handle+0x101/0x1c0 [ 203.315385][ T9195] call_timer_fn+0x192/0x640 [ 203.321789][ T9195] __run_timer_base+0x652/0x8b0 [ 203.328450][ T9195] run_timer_softirq+0xb7/0x170 [ 203.335119][ T9195] handle_softirqs+0x22a/0x870 [ 203.341694][ T9195] do_softirq+0x76/0xd0 [ 203.347656][ T9195] __local_bh_enable_ip+0xf8/0x130 [ 203.354577][ T9195] __alloc_skb+0x1aa/0x7d0 [ 203.360804][ T9195] alloc_skb_with_frags+0xca/0x890 [ 203.367726][ T9195] sock_alloc_send_pskb+0x878/0x990 [ 203.374739][ T9195] unix_dgram_sendmsg+0x460/0x18e0 [ 203.381668][ T9195] __sys_sendto+0x709/0x7a0 [ 203.387992][ T9195] __x64_sys_sendto+0xde/0x100 [ 203.394651][ T9195] do_syscall_64+0x14d/0xf80 [ 203.401054][ T9195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.408763][ T9195] INITIAL USE at: [ 203.412725][ T9195] lock_acquire+0xf0/0x2e0 [ 203.418865][ T9195] _raw_spin_lock_irqsave+0x40/0x60 [ 203.425790][ T9195] input_inject_event+0xa5/0x340 [ 203.432454][ T9195] kbd_led_trigger_activate+0xbc/0x100 [ 203.439636][ T9195] led_trigger_set+0x535/0x960 [ 203.446126][ T9195] led_trigger_set_default+0x260/0x2a0 [ 203.453401][ T9195] led_classdev_register_ext+0x787/0x9c0 [ 203.460757][ T9195] input_leds_connect+0x517/0x790 [ 203.467501][ T9195] input_register_device+0xd00/0x1160 [ 203.474603][ T9195] atkbd_connect+0x731/0xa50 [ 203.480940][ T9195] serio_driver_probe+0x82/0xd0 [ 203.487521][ T9195] really_probe+0x267/0xaf0 [ 203.493746][ T9195] __driver_probe_device+0x18c/0x320 [ 203.500751][ T9195] driver_probe_device+0x4f/0x240 [ 203.507496][ T9195] __driver_attach+0x3e7/0x710 [ 203.513984][ T9195] bus_for_each_dev+0x23b/0x2c0 [ 203.520560][ T9195] serio_handle_event+0x20a/0xdd0 [ 203.527320][ T9195] process_scheduled_works+0xb02/0x1830 [ 203.534591][ T9195] worker_thread+0xa50/0xfc0 [ 203.540907][ T9195] kthread+0x388/0x470 [ 203.546698][ T9195] ret_from_fork+0x51e/0xb90 [ 203.553024][ T9195] ret_from_fork_asm+0x1a/0x30 [ 203.559517][ T9195] } [ 203.562086][ T9195] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 203.571183][ T9195] -> (&client->buffer_lock){....}-{3:3} { [ 203.576912][ T9195] INITIAL USE at: [ 203.580788][ T9195] lock_acquire+0xf0/0x2e0 [ 203.586755][ T9195] _raw_spin_lock+0x2e/0x40 [ 203.592809][ T9195] evdev_pass_values+0xb9/0xbd0 [ 203.599471][ T9195] evdev_events+0x1e6/0x340 [ 203.605528][ T9195] input_pass_values+0x288/0x890 [ 203.612025][ T9195] input_event_dispose+0x3e5/0x6b0 [ 203.618696][ T9195] input_inject_event+0x1dd/0x340 [ 203.625277][ T9195] kd_sound_helper+0x101/0x210 [ 203.631598][ T9195] input_handler_for_each_handle+0x101/0x1c0 [ 203.639126][ T9195] kd_mksound+0x96/0x130 [ 203.644922][ T9195] do_con_write+0x3319/0x5300 [ 203.651151][ T9195] con_write+0x27/0x290 [ 203.656854][ T9195] n_tty_write+0xd84/0x12a0 [ 203.662908][ T9195] file_tty_write+0x559/0xa20 [ 203.669135][ T9195] vfs_write+0x61d/0xb90 [ 203.674922][ T9195] ksys_write+0x150/0x270 [ 203.680795][ T9195] __do_fast_syscall_32+0x20d/0x640 [ 203.687540][ T9195] do_fast_syscall_32+0x33/0x70 [ 203.693940][ T9195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.701817][ T9195] } [ 203.704298][ T9195] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 203.712437][ T9195] ... acquired at: [ 203.716218][ T9195] _raw_spin_lock+0x2e/0x40 [ 203.720884][ T9195] evdev_pass_values+0xb9/0xbd0 [ 203.725893][ T9195] evdev_events+0x1e6/0x340 [ 203.730558][ T9195] input_pass_values+0x288/0x890 [ 203.735653][ T9195] input_event_dispose+0x3e5/0x6b0 [ 203.740928][ T9195] input_inject_event+0x1dd/0x340 [ 203.746114][ T9195] kd_sound_helper+0x101/0x210 [ 203.751039][ T9195] input_handler_for_each_handle+0x101/0x1c0 [ 203.757182][ T9195] kd_mksound+0x96/0x130 [ 203.761584][ T9195] do_con_write+0x3319/0x5300 [ 203.766425][ T9195] con_write+0x27/0x290 [ 203.770743][ T9195] n_tty_write+0xd84/0x12a0 [ 203.775409][ T9195] file_tty_write+0x559/0xa20 [ 203.780245][ T9195] vfs_write+0x61d/0xb90 [ 203.784645][ T9195] ksys_write+0x150/0x270 [ 203.789137][ T9195] __do_fast_syscall_32+0x20d/0x640 [ 203.794491][ T9195] do_fast_syscall_32+0x33/0x70 [ 203.799496][ T9195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.806017][ T9195] [ 203.808320][ T9195] [ 203.808320][ T9195] the dependencies between the lock to be acquired [ 203.808328][ T9195] and SOFTIRQ-irq-unsafe lock: [ 203.821803][ T9195] -> (tasklist_lock){.+.+}-{3:3} { [ 203.827091][ T9195] HARDIRQ-ON-R at: [ 203.831228][ T9195] lock_acquire+0xf0/0x2e0 [ 203.837632][ T9195] _raw_read_lock+0x36/0x50 [ 203.844123][ T9195] __do_wait+0xde/0x740 [ 203.850259][ T9195] do_wait+0x1e7/0x540 [ 203.856310][ T9195] kernel_wait+0xd6/0x1c0 [ 203.862620][ T9195] call_usermodehelper_exec_work+0xbe/0x230 [ 203.870495][ T9195] process_scheduled_works+0xb02/0x1830 [ 203.878024][ T9195] worker_thread+0xa50/0xfc0 [ 203.884605][ T9195] kthread+0x388/0x470 [ 203.890652][ T9195] ret_from_fork+0x51e/0xb90 [ 203.897224][ T9195] ret_from_fork_asm+0x1a/0x30 [ 203.903975][ T9195] SOFTIRQ-ON-R at: [ 203.908115][ T9195] lock_acquire+0xf0/0x2e0 [ 203.914518][ T9195] _raw_read_lock+0x36/0x50 [ 203.921095][ T9195] __do_wait+0xde/0x740 [ 203.927231][ T9195] do_wait+0x1e7/0x540 [ 203.933278][ T9195] kernel_wait+0xd6/0x1c0 [ 203.939590][ T9195] call_usermodehelper_exec_work+0xbe/0x230 [ 203.947469][ T9195] process_scheduled_works+0xb02/0x1830 [ 203.954999][ T9195] worker_thread+0xa50/0xfc0 [ 203.961574][ T9195] kthread+0x388/0x470 [ 203.967619][ T9195] ret_from_fork+0x51e/0xb90 [ 203.974191][ T9195] ret_from_fork_asm+0x1a/0x30 [ 203.980942][ T9195] INITIAL USE at: [ 203.984992][ T9195] lock_acquire+0xf0/0x2e0 [ 203.991308][ T9195] _raw_write_lock_irq+0x3d/0x50 [ 203.998230][ T9195] copy_process+0x247a/0x3cf0 [ 204.004804][ T9195] kernel_clone+0x248/0x8e0 [ 204.011203][ T9195] user_mode_thread+0x110/0x180 [ 204.017948][ T9195] rest_init+0x23/0x300 [ 204.023995][ T9195] start_kernel+0x385/0x3d0 [ 204.030406][ T9195] x86_64_start_reservations+0x24/0x30 [ 204.037758][ T9195] x86_64_start_kernel+0x143/0x1c0 [ 204.044766][ T9195] common_startup_64+0x13e/0x147 [ 204.051596][ T9195] INITIAL READ USE at: [ 204.056081][ T9195] lock_acquire+0xf0/0x2e0 [ 204.062826][ T9195] _raw_read_lock+0x36/0x50 [ 204.069657][ T9195] __do_wait+0xde/0x740 [ 204.076138][ T9195] do_wait+0x1e7/0x540 [ 204.082530][ T9195] kernel_wait+0xd6/0x1c0 [ 204.089183][ T9195] call_usermodehelper_exec_work+0xbe/0x230 [ 204.097405][ T9195] process_scheduled_works+0xb02/0x1830 [ 204.105279][ T9195] worker_thread+0xa50/0xfc0 [ 204.112198][ T9195] kthread+0x388/0x470 [ 204.118590][ T9195] ret_from_fork+0x51e/0xb90 [ 204.125510][ T9195] ret_from_fork_asm+0x1a/0x30 [ 204.132605][ T9195] } [ 204.135259][ T9195] ... key at: [] tasklist_lock+0x18/0x40 [ 204.143143][ T9195] ... acquired at: [ 204.147097][ T9195] _raw_read_lock+0x36/0x50 [ 204.151760][ T9195] send_sigurg+0x12b/0x420 [ 204.156329][ T9195] sk_send_sigurg+0x6c/0x2e0 [ 204.161071][ T9195] queue_oob+0x42c/0x4f0 [ 204.165468][ T9195] unix_stream_sendmsg+0xcb1/0xe80 [ 204.170732][ T9195] ____sys_sendmsg+0xa68/0xad0 [ 204.175658][ T9195] ___sys_sendmsg+0x2a5/0x360 [ 204.180495][ T9195] __sys_sendmmsg+0x2e7/0x4e0 [ 204.185330][ T9195] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 204.191040][ T9195] __do_fast_syscall_32+0x20d/0x640 [ 204.196391][ T9195] do_fast_syscall_32+0x33/0x70 [ 204.201398][ T9195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.207883][ T9195] [ 204.210186][ T9195] -> (&f_owner->lock){....}-{3:3} { [ 204.215470][ T9195] INITIAL USE at: [ 204.219429][ T9195] lock_acquire+0xf0/0x2e0 [ 204.225565][ T9195] _raw_write_lock_irq+0x3d/0x50 [ 204.232224][ T9195] __f_setown+0x67/0x370 [ 204.238183][ T9195] fcntl_dirnotify+0x3f9/0x6a0 [ 204.244667][ T9195] do_fcntl+0x77e/0x1a20 [ 204.250629][ T9195] do_compat_fcntl64+0x51e/0x7e0 [ 204.257282][ T9195] __do_fast_syscall_32+0x20d/0x640 [ 204.264198][ T9195] do_fast_syscall_32+0x33/0x70 [ 204.270765][ T9195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.278811][ T9195] INITIAL READ USE at: [ 204.283204][ T9195] lock_acquire+0xf0/0x2e0 [ 204.289775][ T9195] _raw_read_lock_irqsave+0x48/0x60 [ 204.297130][ T9195] send_sigio+0x38/0x370 [ 204.303521][ T9195] dnotify_handle_event+0x169/0x440 [ 204.310870][ T9195] fsnotify+0x1831/0x1ae0 [ 204.317358][ T9195] fsnotify_mkdir+0x121/0x180 [ 204.324187][ T9195] vfs_mkdir+0x45e/0x630 [ 204.330580][ T9195] filename_mkdirat+0x285/0x510 [ 204.337582][ T9195] __se_sys_mkdirat+0x35/0x150 [ 204.344501][ T9195] __do_fast_syscall_32+0x20d/0x640 [ 204.351854][ T9195] do_fast_syscall_32+0x33/0x70 [ 204.358945][ T9195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.367443][ T9195] } [ 204.370012][ T9195] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 204.378935][ T9195] ... acquired at: [ 204.382803][ T9195] _raw_read_lock_irqsave+0x48/0x60 [ 204.388160][ T9195] send_sigio+0x38/0x370 [ 204.392557][ T9195] kill_fasync+0x24d/0x4d0 [ 204.397126][ T9195] sock_wake_async+0x137/0x160 [ 204.402043][ T9195] sock_def_readable+0x3c1/0x580 [ 204.407132][ T9195] queue_oob+0x45e/0x4f0 [ 204.411528][ T9195] unix_stream_sendmsg+0xcb1/0xe80 [ 204.416792][ T9195] ____sys_sendmsg+0xa68/0xad0 [ 204.421713][ T9195] ___sys_sendmsg+0x2a5/0x360 [ 204.426548][ T9195] __sys_sendmmsg+0x2e7/0x4e0 [ 204.431385][ T9195] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 204.437088][ T9195] __do_fast_syscall_32+0x20d/0x640 [ 204.442438][ T9195] do_fast_syscall_32+0x33/0x70 [ 204.447442][ T9195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.453927][ T9195] [ 204.456228][ T9195] -> (&new->fa_lock){....}-{3:3} { [ 204.461334][ T9195] INITIAL USE at: [ 204.465208][ T9195] lock_acquire+0xf0/0x2e0 [ 204.471169][ T9195] _raw_write_lock_irq+0x3d/0x50 [ 204.477654][ T9195] fasync_remove_entry+0xf1/0x1c0 [ 204.484221][ T9195] sock_fasync+0x85/0xf0 [ 204.490007][ T9195] __fput+0x8a5/0xa70 [ 204.495543][ T9195] task_work_run+0x1d9/0x270 [ 204.501677][ T9195] exit_to_user_mode_loop+0xed/0x480 [ 204.508506][ T9195] __do_fast_syscall_32+0x415/0x640 [ 204.515249][ T9195] do_fast_syscall_32+0x33/0x70 [ 204.521642][ T9195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.529515][ T9195] INITIAL READ USE at: [ 204.533821][ T9195] lock_acquire+0xf0/0x2e0 [ 204.540216][ T9195] _raw_read_lock_irqsave+0x48/0x60 [ 204.547400][ T9195] kill_fasync+0x199/0x4d0 [ 204.553795][ T9195] sock_wake_async+0x137/0x160 [ 204.560540][ T9195] sk_send_sigurg+0x1f1/0x2e0 [ 204.567195][ T9195] queue_oob+0x42c/0x4f0 [ 204.573416][ T9195] unix_stream_sendmsg+0xcb1/0xe80 [ 204.580502][ T9195] ____sys_sendmsg+0xa68/0xad0 [ 204.587251][ T9195] ___sys_sendmsg+0x2a5/0x360 [ 204.593910][ T9195] __sys_sendmmsg+0x2e7/0x4e0 [ 204.600567][ T9195] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 204.608103][ T9195] __do_fast_syscall_32+0x20d/0x640 [ 204.615278][ T9195] do_fast_syscall_32+0x33/0x70 [ 204.622106][ T9195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.630423][ T9195] } [ 204.632910][ T9195] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 204.641576][ T9195] ... acquired at: [ 204.645360][ T9195] _raw_read_lock_irqsave+0x48/0x60 [ 204.650728][ T9195] kill_fasync+0x199/0x4d0 [ 204.655305][ T9195] evdev_pass_values+0x627/0xbd0 [ 204.660408][ T9195] evdev_events+0x1e6/0x340 [ 204.665076][ T9195] input_pass_values+0x288/0x890 [ 204.670170][ T9195] input_event_dispose+0x330/0x6b0 [ 204.675444][ T9195] input_inject_event+0x1dd/0x340 [ 204.680633][ T9195] evdev_write+0x325/0x4c0 [ 204.685209][ T9195] vfs_write+0x29a/0xb90 [ 204.689606][ T9195] ksys_write+0x150/0x270 [ 204.694088][ T9195] __do_fast_syscall_32+0x20d/0x640 [ 204.699443][ T9195] do_fast_syscall_32+0x33/0x70 [ 204.704447][ T9195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.710933][ T9195] [ 204.713235][ T9195] [ 204.713235][ T9195] stack backtrace: [ 204.719125][ T9195] CPU: 1 UID: 0 PID: 9195 Comm: syz.1.1196 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.719148][ T9195] Tainted: [L]=SOFTLOCKUP [ 204.719154][ T9195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.719168][ T9195] Call Trace: [ 204.719175][ T9195] [ 204.719183][ T9195] dump_stack_lvl+0xe8/0x150 [ 204.719203][ T9195] __lock_acquire+0x2a94/0x2cf0 [ 204.719228][ T9195] lock_acquire+0xf0/0x2e0 [ 204.719244][ T9195] ? kill_fasync+0x199/0x4d0 [ 204.719261][ T9195] _raw_read_lock_irqsave+0x48/0x60 [ 204.719281][ T9195] ? kill_fasync+0x199/0x4d0 [ 204.719294][ T9195] kill_fasync+0x199/0x4d0 [ 204.719307][ T9195] ? kill_fasync+0x53/0x4d0 [ 204.719322][ T9195] evdev_pass_values+0x627/0xbd0 [ 204.719341][ T9195] ? evdev_pass_values+0x661/0xbd0 [ 204.719359][ T9195] evdev_events+0x1e6/0x340 [ 204.719375][ T9195] ? evdev_events+0x79/0x340 [ 204.719390][ T9195] ? input_pass_values+0x8d/0x890 [ 204.719405][ T9195] input_pass_values+0x288/0x890 [ 204.719422][ T9195] ? input_handle_event+0x70c/0xf30 [ 204.719443][ T9195] input_event_dispose+0x330/0x6b0 [ 204.719465][ T9195] input_inject_event+0x1dd/0x340 [ 204.719486][ T9195] ? input_inject_event+0xb6/0x340 [ 204.719507][ T9195] evdev_write+0x325/0x4c0 [ 204.719525][ T9195] ? __pfx_evdev_write+0x10/0x10 [ 204.719542][ T9195] ? bpf_lsm_file_permission+0x9/0x20 [ 204.719559][ T9195] ? security_file_permission+0x75/0x260 [ 204.719581][ T9195] ? rw_verify_area+0x255/0x4d0 [ 204.719594][ T9195] ? __pfx_evdev_write+0x10/0x10 [ 204.719610][ T9195] vfs_write+0x29a/0xb90 [ 204.719626][ T9195] ? __pfx_vfs_write+0x10/0x10 [ 204.719639][ T9195] ? __fget_files+0x2a/0x420 [ 204.719659][ T9195] ? __fget_files+0x2a/0x420 [ 204.719677][ T9195] ? __fget_files+0x3a0/0x420 [ 204.719695][ T9195] ? __fget_files+0x2a/0x420 [ 204.719716][ T9195] ksys_write+0x150/0x270 [ 204.719731][ T9195] ? __pfx_ksys_write+0x10/0x10 [ 204.719746][ T9195] __do_fast_syscall_32+0x20d/0x640 [ 204.719761][ T9195] ? do_fast_syscall_32+0x33/0x70 [ 204.719774][ T9195] ? asm_int80_emulation+0x1a/0x20 [ 204.719787][ T9195] ? do_int80_emulation+0x274/0x4d0 [ 204.719800][ T9195] ? trace_irq_disable+0x3b/0x150 [ 204.719822][ T9195] do_fast_syscall_32+0x33/0x70 [ 204.719836][ T9195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.719853][ T9195] RIP: 0023:0xf701ef6c [ 204.719873][ T9195] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 204.719886][ T9195] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 204.719902][ T9195] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 204.719913][ T9195] RDX: 0000000000001068 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.719922][ T9195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.719931][ T9195] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.719940][ T9195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.719953][ T9195] [ 204.727627][ T5878] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 204.894338][ T5808] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 204.899640][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 205.057823][ T5808] usb 3-1: Using ep0 maxpacket: 32 [ 205.066062][ T5808] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 205.091465][ T5808] usb 3-1: config 0 has no interface number 0 [ 205.116108][ T5808] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 205.129347][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.139644][ T5808] usb 3-1: Product: syz [ 205.141504][ T5878] dvb-usb: schedule remote query interval to 100 msecs. [ 205.144484][ T5808] usb 3-1: Manufacturer: syz [ 205.151304][ T5878] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 205.156293][ T5808] usb 3-1: SerialNumber: syz [ 205.177436][ T5808] usb 3-1: config 0 descriptor?? [ 205.373947][ T5878] dvb_usb_m920x 5-1:118.0: probe with driver dvb_usb_m920x failed with error -71 [ 205.383976][ T9] m920x_read = error: -71 [ 205.392304][ T5878] usb 5-1: USB disconnect, device number 21 [ 205.401567][ T9] dvb-usb: error while querying for an remote control event. [ 205.514402][ T5885] m920x_read = error: -19 [ 205.518854][ T5885] dvb-usb: error while querying for an remote control event. [ 205.634423][ T5878] m920x_read = error: -19 [ 205.638813][ T5878] dvb-usb: error while querying for an remote control event. [ 205.754873][ T5878] m920x_read = error: -19 [ 205.759214][ T5878] dvb-usb: error while querying for an remote control event. [ 205.874915][ T5885] m920x_read = error: -19 [ 205.879888][ T5885] dvb-usb: error while querying for an remote control event. [ 205.995034][ T5885] m920x_read = error: -19 [ 205.999425][ T5885] dvb-usb: error while querying for an remote control event. [ 206.114539][ T5878] m920x_read = error: -19 [ 206.118916][ T5878] dvb-usb: error while querying for an remote control event. [ 206.234652][ T5878] m920x_read = error: -19 [ 206.239060][ T5878] dvb-usb: error while querying for an remote control event. [ 206.354407][ T5878] m920x_read = error: -19 [ 206.358776][ T5878] dvb-usb: error while querying for an remote control event. [ 206.415946][ T5808] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 206.426879][ T5808] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 206.436224][ T5808] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 206.447133][ T5808] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 206.458566][ T5808] usb 3-1: USB disconnect, device number 26 [ 206.474641][ T5878] m920x_read = error: -19 [ 206.479022][ T5878] dvb-usb: error while querying for an remote control event. [ 206.594379][ T5878] m920x_read = error: -19 [ 206.598742][ T5878] dvb-usb: error while querying for an remote control event. [ 206.714456][ T5878] m920x_read = error: -19 [ 206.718837][ T5878] dvb-usb: error while querying for an remote control event. [ 206.834434][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 206.835319][ T5878] m920x_read = error: -19 [ 206.845982][ T5878] dvb-usb: error while querying for an remote control event. [ 206.955817][ T5878] m920x_read = error: -19 [ 206.960198][ T5878] dvb-usb: error while querying for an remote control event. [ 207.074893][ T5878] m920x_read = error: -19 [ 207.079296][ T5878] dvb-usb: error while querying for an remote control event. [ 207.194857][ T5878] m920x_read = error: -19 [ 207.199234][ T5878] dvb-usb: error while querying for an remote control event. [ 207.314758][ T5878] m920x_read = error: -19 [ 207.319108][ T5878] dvb-usb: error while querying for an remote control event. [ 207.434361][ T5878] m920x_read = error: -19 [ 207.438727][ T5878] dvb-usb: error while querying for an remote control event. [ 207.554886][ T5878] m920x_read = error: -19 [ 207.559232][ T5878] dvb-usb: error while querying for an remote control event. [ 207.674379][ T5878] m920x_read = error: -19 [ 207.678731][ T5878] dvb-usb: error while querying for an remote control event. [ 207.795101][ T5878] m920x_read = error: -19 [ 207.799454][ T5878] dvb-usb: error while querying for an remote control event. [ 207.914823][ T5878] m920x_read = error: -19 [ 207.919172][ T5878] dvb-usb: error while querying for an remote control event. [ 208.034730][ T5878] m920x_read = error: -19 [ 208.039078][ T5878] dvb-usb: error while querying for an remote control event. [ 208.154584][ T5878] m920x_read = error: -19 [ 208.158954][ T5878] dvb-usb: error while querying for an remote control event. [ 208.274455][ T5878] m920x_read = error: -19 [ 208.278828][ T5878] dvb-usb: error while querying for an remote control event. [ 208.394827][ T5808] m920x_read = error: -19 [ 208.399179][ T5808] dvb-usb: error while querying for an remote control event. [ 208.514796][ T5808] m920x_read = error: -19 [ 208.519252][ T5808] dvb-usb: error while querying for an remote control event. [ 208.634668][ T5808] m920x_read = error: -19 [ 208.639035][ T5808] dvb-usb: error while querying for an remote control event. [ 208.754734][ T5808] m920x_read = error: -19 [ 208.759094][ T5808] dvb-usb: error while querying for an remote control event. [ 208.874921][ T5878] m920x_read = error: -19 [ 208.879281][ T5878] dvb-usb: error while querying for an remote control event. [ 208.994528][ T5878] m920x_read = error: -19 [ 208.998892][ T5878] dvb-usb: error while querying for an remote control event. [ 209.115119][ T5878] m920x_read = error: -19 [ 209.119487][ T5878] dvb-usb: error while querying for an remote control event. [ 209.234687][ T5885] m920x_read = error: -19 [ 209.239071][ T5885] dvb-usb: error while querying for an remote control event. [ 209.354558][ T5878] m920x_read = error: -19 [ 209.359263][ T5878] dvb-usb: error while querying for an remote control event. [ 209.477839][ T797] m920x_read = error: -19 [ 209.482197][ T797] dvb-usb: error while querying for an remote control event. [ 209.594983][ T5878] m920x_read = error: -19 [ 209.599356][ T5878] dvb-usb: error while querying for an remote control event. [ 209.724488][ T5878] m920x_read = error: -19 [ 209.728859][ T5878] dvb-usb: error while querying for an remote control event. [ 209.845267][ T5878] m920x_read = error: -19 [ 209.849641][ T5878] dvb-usb: error while querying for an remote control event. [ 209.965038][ T5878] m920x_read = error: -19 [ 209.969477][ T5878] dvb-usb: error while querying for an remote control event. [ 210.094576][ T5878] m920x_read = error: -19 [ 210.098955][ T5878] dvb-usb: error while querying for an remote control event. [ 210.214827][ T5808] m920x_read = error: -19 [ 210.219194][ T5808] dvb-usb: error while querying for an remote control event. [ 210.334592][ T5808] m920x_read = error: -19 [ 210.338940][ T5808] dvb-usb: error while querying for an remote control event. [ 210.454610][ T5808] m920x_read = error: -19 [ 210.458977][ T5808] dvb-usb: error while querying for an remote control event. [ 210.574669][ T5808] m920x_read = error: -19 [ 210.579027][ T5808] dvb-usb: error while querying for an remote control event. [ 210.694763][ T5808] m920x_read = error: -19 [ 210.699119][ T5808] dvb-usb: error while querying for an remote control event. [ 210.824742][ T5808] m920x_read = error: -19 [ 210.829102][ T5808] dvb-usb: error while querying for an remote control event. [ 210.944433][ T5808] m920x_read = error: -19 [ 210.948807][ T5808] dvb-usb: error while querying for an remote control event. [ 211.065090][ T24] m920x_read = error: -19 [ 211.069438][ T24] dvb-usb: error while querying for an remote control event. [ 211.185101][ T5878] m920x_read = error: -19 [ 211.189449][ T5878] dvb-usb: error while querying for an remote control event. [ 211.315380][ T5878] m920x_read = error: -19 [ 211.319763][ T5878] dvb-usb: error while querying for an remote control event. [ 211.444772][ T5878] m920x_read = error: -19 [ 211.449141][ T5878] dvb-usb: error while querying for an remote control event. [ 211.565279][ T5878] m920x_read = error: -19 [ 211.569636][ T5878] dvb-usb: error while querying for an remote control event. [ 211.684494][ T5878] m920x_read = error: -19 [ 211.688879][ T5878] dvb-usb: error while querying for an remote control event. [ 211.804707][ T5878] m920x_read = error: -19 [ 211.809062][ T5878] dvb-usb: error while querying for an remote control event. [ 211.934436][ T5878] m920x_read = error: -19 [ 211.938795][ T5878] dvb-usb: error while querying for an remote control event. [ 212.064464][ T5878] m920x_read = error: -19 [ 212.068846][ T5878] dvb-usb: error while querying for an remote control event. [ 212.184461][ T5878] m920x_read = error: -19 [ 212.188846][ T5878] dvb-usb: error while querying for an remote control event. [ 212.304841][ T5878] m920x_read = error: -19 [ 212.309212][ T5878] dvb-usb: error while querying for an remote control event. [ 212.435046][ T5878] m920x_read = error: -19 [ 212.439406][ T5878] dvb-usb: error while querying for an remote control event. [ 212.554460][ T5878] m920x_read = error: -19 [ 212.558809][ T5878] dvb-usb: error while querying for an remote control event. [ 212.684473][ T5878] m920x_read = error: -19 [ 212.688943][ T5878] dvb-usb: error while querying for an remote control event. [ 212.804755][ T5878] m920x_read = error: -19 [ 212.809104][ T5878] dvb-usb: error while querying for an remote control event.