last executing test programs: 15m53.607827337s ago: executing program 0 (id=36): openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20', 0x800, 0x0) 15m53.607142902s ago: executing program 0 (id=38): sched_rr_get_interval(0x0, &(0x7f0000000000)) 15m53.533843674s ago: executing program 0 (id=42): io_destroy(0x0) 15m53.53267584s ago: executing program 0 (id=46): openat(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop-control', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control', 0x800, 0x0) 15m53.471591731s ago: executing program 0 (id=51): alarm(0x0) 15m52.732087509s ago: executing program 0 (id=53): mmap(&(0x7efffffff000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x7, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0001000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 5.062424592s ago: executing program 5 (id=19752): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 2.680233784s ago: executing program 3 (id=19774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="810200000000000014001a80100004800c0001"], 0x34}}, 0x0) 2.653016037s ago: executing program 3 (id=19776): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0xe9) 2.532697302s ago: executing program 3 (id=19781): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x3ff, r0, 0x0, 0x6, 0x0) 2.428106864s ago: executing program 3 (id=19782): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000140)="b4", 0x1) syz_usb_disconnect(r0) 2.099963004s ago: executing program 2 (id=19786): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11129, 0x1020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x4c}, 0x1, 0x600, 0x0, 0x8014}, 0x40040) 1.932134776s ago: executing program 5 (id=19790): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d06, 0x0, 0xffffffffffffc74c}]}) 1.929830896s ago: executing program 2 (id=19791): syz_open_dev$usbfs(0x0, 0x206, 0x8401) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000d80)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c6dd00", 0x28, 0x3a, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @ipv4={'\x00', '\xff\xff', @remote}}}}}}}, 0x0) 1.669142954s ago: executing program 5 (id=19794): r0 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada6853") ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000000)={&(0x7f0000000100)="023a3b32a8530d0648444f138d9c176b04f0f91de6b9fe513adb984dcb636b3f33825c376f2b590f", 0x28}) 1.568941461s ago: executing program 4 (id=19796): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r0, 0x0, 0x2c, 0x0, 0x0) 1.273250804s ago: executing program 5 (id=19798): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000380)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r0, &(0x7f0000000080)="03", 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, 0x0, 0x0) 1.226777392s ago: executing program 2 (id=19799): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0xf0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) 1.069964348s ago: executing program 2 (id=19801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="c71825ef58d10fd5000005000000180001801400020073797a5f74756e000000000000000000500003804c000380100001800800010003000000040003"], 0x7c}}, 0x0) 1.021577088s ago: executing program 4 (id=19802): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100), 0x4, r1}) 1.010283751s ago: executing program 1 (id=19803): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 852.23021ms ago: executing program 2 (id=19804): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x40, 0x0, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xb, 0x1, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x2}, @nop, @sack={0x5, 0x2}, @md5sig={0x13, 0x12, "154dc7a5e72e7237a335ad30c2ca85ff"}]}}}}}}}, 0x0) 848.636321ms ago: executing program 4 (id=19805): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lgetxattr(0x0, 0x0, 0x0, 0x0) 813.893382ms ago: executing program 1 (id=19806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x48, r1, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @key_params=[@NL80211_ATTR_KEY={0x4}]]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 725.378768ms ago: executing program 2 (id=19807): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x5b, 0xa2, 0xd6, 0x40, 0x93a, 0x10e, 0x3754, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x1, 0x0, 0x7, "", [{{0x9, 0x4, 0x21, 0x6, 0x0, 0x1d, 0x65, 0xc9, 0x6}}]}}]}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) 702.245926ms ago: executing program 1 (id=19808): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x7, 0x100200040000000, 0x8, 0x200}) 566.967554ms ago: executing program 1 (id=19809): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2c, 0x9}) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x2, 0x2, 0x400000000000101, 0xfffffffffffffffe}) 461.505052ms ago: executing program 1 (id=19810): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x2, 0x0, [{0x1, 0x7, 0x800004, 0xfffffff7, 0x49e1}, {0x7, 0x3, 0xe8, 0x4fae, 0xfffffffe}]}) 328.15373ms ago: executing program 1 (id=19811): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x1c, 0x0, 0x0) 260.034416ms ago: executing program 4 (id=19812): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070003000000080006"], 0x4c}}, 0x0) 216.557076ms ago: executing program 5 (id=19813): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 207.199875ms ago: executing program 4 (id=19814): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) 99.947591ms ago: executing program 3 (id=19815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x20a02, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 90.629688ms ago: executing program 5 (id=19816): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xdab1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone3(&(0x7f0000000bc0)={0xc00, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) 12.199752ms ago: executing program 4 (id=19817): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x35c3, 0x1000, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000010300)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 0s ago: executing program 3 (id=19818): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10103c, 0x140) fcntl$setlease(r0, 0x400, 0x0) kernel console output (not intermixed with test programs): butes in process `syz.3.18426'. [ 934.060559][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18429'. [ 935.467773][T12298] input: syz1 as /devices/virtual/input/input146 [ 935.827666][T12317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18462'. [ 935.839083][T12317] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18462'. [ 935.946211][T12325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18466'. [ 935.993956][T12325] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18466'. [ 936.728568][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18482'. [ 936.871468][T12368] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 936.882343][T12368] batadv0: entered promiscuous mode [ 936.889963][T12368] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 936.913206][T12368] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 936.938971][T12368] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 937.126738][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18491'. [ 937.237714][T12391] netlink: 'syz.2.18496': attribute type 1 has an invalid length. [ 937.257270][T12391] netlink: 'syz.2.18496': attribute type 2 has an invalid length. [ 937.268006][T12391] netlink: 'syz.2.18496': attribute type 1 has an invalid length. [ 937.277991][T12391] netlink: 'syz.2.18496': attribute type 2 has an invalid length. [ 937.410855][T12402] xt_hashlimit: size too large, truncated to 1048576 [ 937.486346][T12403] bridge_slave_0 (unregistering): left allmulticast mode [ 937.517469][T12403] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.985675][T12430] netlink: 'syz.1.18514': attribute type 14 has an invalid length. [ 938.723920][T12468] netlink: 104 bytes leftover after parsing attributes in process `syz.1.18530'. [ 939.546326][T12514] binder: 12513:12514 ioctl c018620c 200000000240 returned -22 [ 939.582424][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 939.582436][ T29] audit: type=1326 audit(1777461575.357:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12515 comm="syz.3.18551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34c419cdd9 code=0x0 [ 940.070995][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18561'. [ 940.080446][T12538] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18561'. [ 940.099156][T12538] vlan1: entered allmulticast mode [ 940.104679][T12538] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 940.426610][T12556] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18569'. [ 940.703119][ T5358] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 940.792852][ T1774] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 940.854397][ T5358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.866021][ T5358] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.876295][ T5358] usb 2-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 940.885616][ T5358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.895614][ T5358] usb 2-1: config 0 descriptor?? [ 940.944594][ T1774] usb 5-1: config 0 has no interfaces? [ 940.950187][ T1774] usb 5-1: New USB device found, idVendor=093b, idProduct=a005, bcdDevice= 9.81 [ 940.959665][ T1774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.970183][ T1774] usb 5-1: config 0 descriptor?? [ 941.186509][T12563] netlink: 'syz.4.18573': attribute type 12 has an invalid length. [ 941.197909][ T5812] usb 5-1: USB disconnect, device number 88 [ 941.309369][ T5358] lg-g15 0003:046D:0A07.007A: item fetching failed at offset 2/5 [ 941.320273][ T5358] lg-g15 0003:046D:0A07.007A: probe with driver lg-g15 failed with error -22 [ 941.512237][ T5358] usb 2-1: USB disconnect, device number 110 [ 941.965390][ T5812] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 942.026047][ T29] audit: type=1326 audit(1777461577.807:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12594 comm="syz.3.18586" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f34c419cdd9 code=0x0 [ 942.144656][ T5812] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 942.153385][ T5812] usb 3-1: config 0 has no interface number 0 [ 942.159544][ T5812] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 942.184020][ T5812] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 942.206989][ T5812] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 942.233074][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.249872][ T5812] usb 3-1: config 0 descriptor?? [ 942.264902][T12586] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 942.289391][ T5812] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 942.443241][ T1774] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 942.510919][ T5772] usb 3-1: USB disconnect, device number 93 [ 942.575511][ T5805] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 942.604816][ T1774] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.619205][ T1774] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 4 [ 942.630831][T12610] sctp: [Deprecated]: syz.5.18592 (pid 12610) Use of int in max_burst socket option deprecated. [ 942.630831][T12610] Use struct sctp_assoc_value instead [ 942.631349][ T1774] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 942.675153][ T1774] usb 2-1: New USB device found, idVendor=0e41, idProduct=4252, bcdDevice= 0.40 [ 942.686354][ T1774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.699492][ T1774] usb 2-1: Product: syz [ 942.713473][ T1774] usb 2-1: Manufacturer: syz [ 942.718779][ T1774] usb 2-1: SerialNumber: syz [ 942.721418][T12612] macvlan0: entered promiscuous mode [ 942.734311][T12612] netlink: 'syz.5.18593': attribute type 2 has an invalid length. [ 942.744199][ T5805] usb 5-1: Using ep0 maxpacket: 32 [ 942.751580][ T5805] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 942.760509][ T5805] usb 5-1: config 0 has no interface number 0 [ 942.776069][ T5805] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 942.787006][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.795609][ T5805] usb 5-1: Product: syz [ 942.800076][ T5805] usb 5-1: Manufacturer: syz [ 942.805189][ T5805] usb 5-1: SerialNumber: syz [ 942.814305][ T5805] usb 5-1: config 0 descriptor?? [ 942.824710][ T5805] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 942.944351][ T1774] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 942.952043][ T1774] usb 2-1: 0:3 : does not exist [ 942.959654][ T1774] usb 2-1: 0:4 : does not exist [ 942.965112][ T1774] usb 2-1: 0:5 : does not exist [ 943.040114][ T1774] snd_usb_pod 2-1:1.2: Line 6 BassPODxt Pro found [ 943.052181][ T5805] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 943.061826][ T1774] usb 2-1: selecting invalid altsetting 5 [ 943.068695][ T1774] snd_usb_pod 2-1:1.2: set_interface failed [ 943.078771][ T1774] snd_usb_pod 2-1:1.2: Line 6 BassPODxt Pro now disconnected [ 943.088066][ T5805] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 943.098611][ T1774] snd_usb_pod 2-1:1.2: probe with driver snd_usb_pod failed with error -22 [ 943.133692][ T1774] usb 2-1: USB disconnect, device number 111 [ 943.246872][T12629] macsec2: entered allmulticast mode [ 943.256645][T12601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.274040][T12601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.403316][ T5812] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 943.504324][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 943.505619][ T5772] usb 5-1: USB disconnect, device number 89 [ 943.526875][ T5772] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 943.555300][ T5812] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 943.571098][ T5772] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 943.585592][ T5812] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 943.596350][ T5772] quatech2 5-1:0.51: device disconnected [ 943.602551][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.622872][ T5812] usb 3-1: config 0 descriptor?? [ 943.635464][T12627] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 944.012559][T12645] macsec2: entered promiscuous mode [ 944.027216][T12645] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 944.046355][T12645] macsec2: entered allmulticast mode [ 944.064843][ T5812] hid_parser_main: 36 callbacks suppressed [ 944.064866][ T5812] koneplus 0003:1E7D:2E22.007B: unknown main item tag 0x0 [ 944.076481][T12645] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 944.095011][ T5812] koneplus 0003:1E7D:2E22.007B: unknown main item tag 0x0 [ 944.117106][ T5812] koneplus 0003:1E7D:2E22.007B: unknown main item tag 0x0 [ 944.126865][ T5812] koneplus 0003:1E7D:2E22.007B: unknown main item tag 0x0 [ 944.136483][ T5812] koneplus 0003:1E7D:2E22.007B: unknown main item tag 0x0 [ 944.144789][ T5812] koneplus 0003:1E7D:2E22.007B: unknown main item tag 0x0 [ 944.152142][ T5812] koneplus 0003:1E7D:2E22.007B: unknown main item tag 0x0 [ 944.159689][ T5812] koneplus 0003:1E7D:2E22.007B: unknown main item tag 0x0 [ 944.167151][ T5812] koneplus 0003:1E7D:2E22.007B: unknown main item tag 0x0 [ 944.175519][ T5812] koneplus 0003:1E7D:2E22.007B: unknown main item tag 0x0 [ 944.189301][ T5812] koneplus 0003:1E7D:2E22.007B: reserved main item tag 0xe [ 944.197274][ T5812] koneplus 0003:1E7D:2E22.007B: unexpected long global item [ 944.206305][ T5812] koneplus 0003:1E7D:2E22.007B: parse failed [ 944.212483][ T5812] koneplus 0003:1E7D:2E22.007B: probe with driver koneplus failed with error -22 [ 944.332036][ T5805] usb 3-1: USB disconnect, device number 94 [ 945.102804][ T5812] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 945.263906][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 945.274351][ T5812] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 945.293232][ T5812] usb 3-1: config 0 has no interface number 0 [ 945.299395][ T5812] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 945.313032][ T5812] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 945.323603][ T5812] usb 3-1: config 0 interface 41 has no altsetting 0 [ 945.332704][ T5812] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 945.341988][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.350793][ T5812] usb 3-1: Product: syz [ 945.355148][ T5812] usb 3-1: Manufacturer: syz [ 945.359831][ T5812] usb 3-1: SerialNumber: syz [ 945.368722][ T5812] usb 3-1: config 0 descriptor?? [ 945.378287][T12677] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 945.387298][T12677] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 945.603012][T12677] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 945.610537][T12677] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 945.684016][T12692] netlink: 'syz.4.18624': attribute type 1 has an invalid length. [ 945.692165][T12692] __nla_validate_parse: 5 callbacks suppressed [ 945.692182][T12692] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18624'. [ 945.758243][T12694] netlink: 204 bytes leftover after parsing attributes in process `syz.1.18625'. [ 945.813065][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 945.985422][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 945.993177][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.011326][ T10] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.033393][ T10] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 946.056965][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 946.063922][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 946.073822][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.094192][ T10] usb 4-1: config 0 descriptor?? [ 946.287754][ T5812] sr9700 3-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, 76:25:3d:6e:9a:84 [ 946.309044][ T5812] usb 3-1: USB disconnect, device number 95 [ 946.345162][ T5812] sr9700 3-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet [ 946.537253][ T10] hid (null): usage index exceeded [ 946.543166][ T10] hid (null): unknown global tag 0xd [ 946.548577][ T10] hid (null): global environment stack underflow [ 946.555235][ T10] hid (null): unknown global tag 0xe [ 946.560628][ T10] hid (null): usage index exceeded [ 946.632971][ T5805] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 946.751464][ T5812] usb 4-1: USB disconnect, device number 57 [ 946.794009][ T5805] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 946.816901][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.833895][ T5805] usb 5-1: Product: syz [ 946.842567][ T5805] usb 5-1: Manufacturer: syz [ 946.853034][ T5805] usb 5-1: SerialNumber: syz [ 947.084275][ T5805] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 947.124677][ T5805] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 947.153608][ T5805] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 947.170474][ T5805] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 947.203938][ T5805] usb 5-1: USB disconnect, device number 90 [ 947.448008][T12754] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 947.487852][T12754] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 947.973626][ T5358] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 948.143863][ T5358] usb 5-1: Using ep0 maxpacket: 16 [ 948.155071][ T5358] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.169248][ T5358] usb 5-1: config 0 interface 0 has no altsetting 0 [ 948.176891][ T5358] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 948.187070][ T5358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.210339][ T5358] usb 5-1: config 0 descriptor?? [ 948.303099][ T5805] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 948.343137][ T5812] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 948.454605][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 948.466138][ T5805] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 948.475722][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.486084][ T5805] usb 4-1: config 0 descriptor?? [ 948.492192][T12790] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 948.503133][ T5812] usb 3-1: Using ep0 maxpacket: 8 [ 948.515032][ T5812] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 948.524154][ T5812] usb 3-1: config 0 has no interface number 0 [ 948.530280][ T5812] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 948.541571][ T5812] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 948.553882][ T5812] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 948.565079][ T5812] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 948.580494][ T5812] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 948.589681][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.597966][ T5812] usb 3-1: Product: syz [ 948.602133][ T5812] usb 3-1: Manufacturer: syz [ 948.606792][ T5812] usb 3-1: SerialNumber: syz [ 948.614099][ T5812] usb 3-1: config 0 descriptor?? [ 948.652495][ T5358] mcp2221 0003:04D8:00DD.007D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 948.827801][ T5812] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 948.938713][ T5805] koneplus 0003:1E7D:2E22.007E: hidraw0: USB HID v7b.fd Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 949.040300][ T5812] usb 3-1: USB disconnect, device number 96 [ 949.080359][ T5805] usb 5-1: USB disconnect, device number 91 [ 949.145134][ T10] usb 4-1: USB disconnect, device number 58 [ 950.432747][ T10] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 950.595434][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 950.605881][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 950.623675][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 950.643498][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 950.658481][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 950.674049][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 950.686106][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 950.694793][ T10] usb 5-1: Product: syz [ 950.704795][ T10] usb 5-1: Manufacturer: syz [ 950.719242][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 950.726266][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 950.734286][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 950.740427][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 950.794938][ T29] audit: type=1326 audit(1777461586.577:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12878 comm="syz.2.18710" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bd959cdd9 code=0x0 [ 950.934591][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 950.941244][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 950.947754][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 950.954370][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 950.960854][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 950.967469][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 950.974906][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 950.981522][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 950.988133][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 950.994740][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 951.001422][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 951.008039][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 951.014881][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 951.021488][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 951.027854][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 951.034462][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 951.040960][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 951.047566][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 951.054095][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 951.060721][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 951.076100][ T10] usb 5-1: USB disconnect, device number 92 [ 951.082067][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 952.157767][T12930] cifs: Unknown parameter 'f,' [ 953.517280][T13004] syzkaller1: tun_chr_ioctl cmd 21731 [ 954.493581][T13039] netlink: 'syz.2.18780': attribute type 10 has an invalid length. [ 954.586014][T13039] team0: Port device geneve0 added [ 954.601567][ T1043] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.626609][ T1043] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.658944][ T1043] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.683114][ T1043] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.848547][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18785'. [ 955.113043][ T10] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 955.273082][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 955.288741][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 955.299899][ T10] usb 2-1: config 0 has no interface number 0 [ 955.313945][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 955.323667][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.331749][ T10] usb 2-1: Product: syz [ 955.337080][ T10] usb 2-1: Manufacturer: syz [ 955.341775][ T10] usb 2-1: SerialNumber: syz [ 955.351573][ T10] usb 2-1: config 0 descriptor?? [ 955.374788][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 955.448493][ T29] audit: type=1326 audit(1777461591.227:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13043 comm="syz.4.18783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7cd9cdd9 code=0x7fc00000 [ 955.587878][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 955.606201][T13084] netlink: 72 bytes leftover after parsing attributes in process `syz.4.18801'. [ 955.621541][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 955.811102][T13093] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18806'. [ 955.824784][T13053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.844609][T13053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.088328][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 956.098420][ T10] usb 2-1: USB disconnect, device number 112 [ 956.120667][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 956.158497][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 956.188429][ T10] quatech2 2-1:0.51: device disconnected [ 957.202273][T13150] 8021q: adding VLAN 0 to HW filter on device bond7 [ 957.225877][T13150] bond0: (slave bond7): Enslaving as an active interface with an up link [ 957.375604][ T5812] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 957.544361][ T5812] usb 5-1: Using ep0 maxpacket: 16 [ 957.551872][ T5812] usb 5-1: unable to get BOS descriptor or descriptor too short [ 957.566177][ T5812] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 957.590502][ T5812] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 957.610630][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.629630][ T5812] usb 5-1: Product: syz [ 957.638823][ T5812] usb 5-1: Manufacturer: syz [ 957.648798][ T5812] usb 5-1: SerialNumber: syz [ 957.751104][ T5827] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 957.885664][ T5812] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 957.904557][ T5812] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 957.945114][ T5827] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 957.958632][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.985177][ T5827] usb 3-1: config 0 descriptor?? [ 958.004190][ T5827] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 958.056714][T13175] netlink: 'syz.1.18843': attribute type 1 has an invalid length. [ 958.065734][T13175] netlink: 'syz.1.18843': attribute type 7 has an invalid length. [ 958.074517][T13175] netlink: 'syz.1.18843': attribute type 8 has an invalid length. [ 958.082375][T13175] netlink: 132 bytes leftover after parsing attributes in process `syz.1.18843'. [ 958.205961][ T5827] gp8psk: usb in 128 operation failed. [ 958.213053][ T5827] gp8psk: usb in 137 operation failed. [ 958.219432][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 958.230885][ T5827] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 958.240325][ T5827] usb 3-1: media controller created [ 958.264172][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 958.300238][ T5827] gp8psk_fe: Frontend attached [ 958.310106][ T5827] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 958.328623][ T5827] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 958.387063][ T5812] usb 5-1: USB disconnect, device number 93 [ 958.457724][T27872] udevd[27872]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 958.675275][T13180] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 958.704397][T13180] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 958.786732][ T5827] gp8psk: usb in 137 operation failed. [ 958.799209][ T5827] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 958.817139][ T5827] gp8psk: found Genpix USB device pID = 203 (hex) [ 958.835205][ T5827] usb 3-1: USB disconnect, device number 97 [ 959.039031][ T5827] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 959.052579][T13195] xt_hashlimit: size too large, truncated to 1048576 [ 959.822760][ T5805] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 960.006928][ T5805] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 960.026253][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.042429][ T5805] usb 3-1: Product: syz [ 960.053653][ T5805] usb 3-1: Manufacturer: syz [ 960.063561][ T5805] usb 3-1: SerialNumber: syz [ 960.087341][ T5805] usb 3-1: config 0 descriptor?? [ 960.271320][ T29] audit: type=1326 audit(1777461596.047:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13206 comm="syz.1.18856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7c6b9cdd9 code=0x7fc00000 [ 960.313996][T13112] syz.2.18813 (13112) used greatest stack depth: 17880 bytes left [ 960.583239][ T5827] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 960.583754][ T5805] usb 3-1: Firmware: major: 0, minor: 224, hardware type: UNKNOWN (223) [ 960.685810][ T5740] Bluetooth: hci2: command 0x0406 tx timeout [ 960.737338][ T5827] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 960.747093][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.764350][ T5827] usb 4-1: Product: syz [ 960.768577][ T5827] usb 4-1: Manufacturer: syz [ 960.773454][ T5827] usb 4-1: SerialNumber: syz [ 960.786462][ T5827] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 960.803731][ T5805] usb 3-1: failed to fetch extended address, random address set [ 960.823461][ T5812] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 960.829999][ T5805] usb 3-1: atusb_probe: initialization failed, error = -524 [ 960.869195][ T5805] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 960.883105][ T5358] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 960.909291][ T5805] usb 3-1: USB disconnect, device number 98 [ 961.042976][ T5358] usb 2-1: Using ep0 maxpacket: 32 [ 961.055764][ T5358] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 961.064832][ T5358] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 961.074222][ T5358] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 961.091683][ T5358] usb 2-1: config 1 has no interface number 0 [ 961.101041][ T5358] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 961.120399][ T5358] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 961.142470][ T5358] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 961.151648][ T5358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.197870][ T5358] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 961.273090][ T5827] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 961.376931][ T5358] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 961.436641][ T5827] usb 5-1: Using ep0 maxpacket: 32 [ 961.466451][ T5827] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 961.478735][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.487658][ T5827] usb 5-1: Product: syz [ 961.494423][ T5827] usb 5-1: Manufacturer: syz [ 961.502455][ T5827] usb 5-1: SerialNumber: syz [ 961.512678][ T5827] usb 5-1: config 0 descriptor?? [ 961.531529][ T5827] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 961.682213][ T5772] usb 4-1: USB disconnect, device number 59 [ 961.753027][ T5358] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 961.803214][ T7063] usb 2-1: USB disconnect, device number 113 [ 961.812347][ T7063] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 961.906657][ T5358] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 961.916966][ T5358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.925140][ T5358] usb 3-1: Product: syz [ 961.929333][ T5358] usb 3-1: Manufacturer: syz [ 961.934263][ T5358] usb 3-1: SerialNumber: syz [ 961.941843][ T5358] usb 3-1: config 0 descriptor?? [ 962.153938][ T5358] usb 3-1: ignoring: probably an ADSL modem [ 962.343195][ T5827] gspca_ov534_9: reg_w failed -71 [ 962.531294][T13289] tc_dump_action: action bad kind [ 962.532860][ T5812] usb 4-1: Service connection timeout for: 258 [ 962.546360][ T5812] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 962.555081][ T5812] ath9k_htc: Failed to initialize the device [ 962.560878][ T5358] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 962.561631][ T5772] usb 4-1: ath9k_htc: USB layer deinitialized [ 962.663216][ T5827] gspca_ov534_9: Unknown sensor 0000 [ 962.663328][ T5827] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 962.693201][ T5827] usb 5-1: USB disconnect, device number 94 [ 962.765397][ T5740] Bluetooth: hci2: command 0x0406 tx timeout [ 962.791186][ T5358] usb 3-1: USB disconnect, device number 99 [ 962.815041][T13301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18899'. [ 962.825525][T13301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 962.832811][T13301] IPv6: NLM_F_CREATE should be set when creating new route [ 962.840130][T13301] IPv6: NLM_F_CREATE should be set when creating new route [ 963.212867][ T10] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 963.388756][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 963.409051][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 963.434573][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 963.464832][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 963.481036][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 963.504600][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 963.514003][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 963.522057][ T10] usb 5-1: Product: syz [ 963.527089][ T10] usb 5-1: Manufacturer: syz [ 963.545941][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 963.555350][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 963.586870][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 963.593588][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 963.767232][ T5827] usb 5-1: USB disconnect, device number 95 [ 963.768517][T13336] kvm: kvm [13335]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 963.863033][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 964.033091][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 964.039629][T13350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18922'. [ 964.054781][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 964.064719][T13350] bond0: Unable to set up delay as MII monitoring is disabled [ 964.072284][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.089061][ T10] usb 4-1: config 0 descriptor?? [ 964.519577][ T10] hid_parser_main: 823 callbacks suppressed [ 964.519600][ T10] lenovo 0003:17EF:6067.007F: unknown main item tag 0x0 [ 964.559354][ T10] lenovo 0003:17EF:6067.007F: unknown main item tag 0x0 [ 964.577694][ T10] lenovo 0003:17EF:6067.007F: unknown main item tag 0x0 [ 964.595119][ T10] lenovo 0003:17EF:6067.007F: unknown main item tag 0x0 [ 964.615395][ T10] lenovo 0003:17EF:6067.007F: unknown main item tag 0x0 [ 964.629647][ T10] lenovo 0003:17EF:6067.007F: unknown main item tag 0x0 [ 964.642697][ T10] lenovo 0003:17EF:6067.007F: unknown main item tag 0x0 [ 964.656446][ T10] lenovo 0003:17EF:6067.007F: unknown main item tag 0x0 [ 964.670393][ T10] lenovo 0003:17EF:6067.007F: unknown main item tag 0x0 [ 964.684818][ T10] lenovo 0003:17EF:6067.007F: unknown main item tag 0x0 [ 964.714809][ T10] lenovo 0003:17EF:6067.007F: hidraw0: USB HID v0.20 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0 [ 964.755706][ T10] usb 4-1: USB disconnect, device number 60 [ 964.870378][T13374] fido_id[13374]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 965.624515][ T10] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 965.799009][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 965.829604][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.852415][ T10] usb 2-1: Product: syz [ 965.857511][ T10] usb 2-1: Manufacturer: syz [ 965.862157][ T10] usb 2-1: SerialNumber: syz [ 966.063071][ T5805] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 966.213822][ T5805] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 966.248010][ T5805] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 966.269614][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.276764][T13417] netlink: 104 bytes leftover after parsing attributes in process `syz.5.18953'. [ 966.289284][ T5805] usb 5-1: Product: syz [ 966.295279][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 966.303039][ T5805] usb 5-1: Manufacturer: syz [ 966.314625][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 966.323243][ T5805] usb 5-1: SerialNumber: syz [ 966.341905][ T5805] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 966.365259][ T5358] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 966.412755][ T5827] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 966.542079][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 966.567103][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 966.595048][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 966.599196][T13405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 966.608089][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.616910][T13405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 966.636324][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 966.653042][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.672702][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 966.673466][ T5805] usb 5-1: USB disconnect, device number 96 [ 966.698912][ T5827] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 966.712422][ T10] usb 2-1: USB disconnect, device number 114 [ 966.729333][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.763743][ T5827] usb 4-1: config 0 descriptor?? [ 967.200352][ T5827] steelseries 0003:1038:1410.0080: not enough fields in HID_OUTPUT_REPORT 0 [ 967.437286][ T7063] usb 4-1: USB disconnect, device number 61 [ 967.483695][ T5358] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 967.491007][ T5358] ath9k_htc: Failed to initialize the device [ 967.501633][ T5805] usb 5-1: ath9k_htc: USB layer deinitialized [ 967.812749][ T5805] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 967.964675][ T5805] usb 5-1: Using ep0 maxpacket: 16 [ 967.977148][ T5805] usb 5-1: too many configurations: 158, using maximum allowed: 8 [ 968.010465][ T5805] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.08 [ 968.031861][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.063573][ T5805] usb 5-1: Product: syz [ 968.073909][ T5805] usb 5-1: Manufacturer: syz [ 968.083935][ T5805] usb 5-1: SerialNumber: syz [ 968.106248][ T5805] usbtest 5-1:1.0: Linux gadget zero [ 968.111618][ T5805] usbtest 5-1:1.0: high-speed {control in/out bulk-in bulk-out int-in int-out} tests (+alt) [ 968.184793][T13437] binder: 13436:13437 ioctl c018620c 200000000000 returned -22 [ 968.330066][ T5805] usb 5-1: USB disconnect, device number 97 [ 968.401409][T13448] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.947798][T13466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18973'. [ 968.987982][T13466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18973'. [ 969.373456][T13483] bridge0: port 2(bridge_slave_1) entered listening state [ 969.395908][T13483] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.695619][T13542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19008'. [ 970.804197][ T5358] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 970.983208][ T5358] usb 5-1: Using ep0 maxpacket: 16 [ 970.998783][ T5358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.036418][ T5358] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.070386][ T5358] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 971.098658][ T5358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.119479][ T5358] usb 5-1: config 0 descriptor?? [ 971.412831][ T5805] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 971.442757][ T5827] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 971.550216][ T5358] apple 0003:05AC:024B.0081: unknown global tag 0xe [ 971.557165][ T5358] apple 0003:05AC:024B.0081: item 0 1 1 14 parsing failed [ 971.564985][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 971.570530][ T5358] apple 0003:05AC:024B.0081: parse failed [ 971.576832][ T5358] apple 0003:05AC:024B.0081: probe with driver apple failed with error -22 [ 971.587289][ T5805] usb 2-1: unable to get BOS descriptor or descriptor too short [ 971.599045][ T5805] usb 2-1: config 1 interface 0 has no altsetting 0 [ 971.602987][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 971.608588][ T5805] usb 2-1: New USB device found, idVendor=056a, idProduct=0343, bcdDevice= 0.40 [ 971.624100][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.633272][ T5805] usb 2-1: Product: syz [ 971.633948][ T5827] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 971.637677][ T5805] usb 2-1: Manufacturer: syz [ 971.650703][ T5827] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 971.653854][ T5805] usb 2-1: SerialNumber: syz [ 971.668114][ T5827] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 971.682747][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.690784][ T5827] usb 4-1: Product: syz [ 971.695313][ T5827] usb 4-1: Manufacturer: syz [ 971.699937][ T5827] usb 4-1: SerialNumber: syz [ 971.762005][ T5358] usb 5-1: USB disconnect, device number 98 [ 971.803086][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 971.809827][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 971.818871][ T10] usb 3-1: config 0 has no interface number 0 [ 971.825539][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 971.836522][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 971.846694][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 971.855818][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.867010][ T10] usb 3-1: config 0 descriptor?? [ 971.917142][ T5827] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 971.925114][ T5827] usb 4-1: unit 6 not found! [ 971.929774][ T5827] usb 4-1: unit 4 not found! [ 971.969315][ T5827] usb 4-1: invalid MIDI EP [ 971.977938][ T5827] usb 4-1: snd-bcd2000: error during probing [ 971.984689][ T5827] snd-bcd2000 4-1:1.2: probe with driver snd-bcd2000 failed with error -22 [ 971.996635][ T5827] usb 4-1: USB disconnect, device number 62 [ 972.038458][T27962] udevd[27962]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.394093][T13569] sysfs: cannot create duplicate filename '/class/ieee80211/1ща^!' [ 972.403543][T13569] CPU: 1 UID: 0 PID: 13569 Comm: syz.4.19019 Tainted: G L syzkaller #0 PREEMPT(full) [ 972.403575][T13569] Tainted: [L]=SOFTLOCKUP [ 972.403587][T13569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 972.403601][T13569] Call Trace: [ 972.403609][T13569] [ 972.403619][T13569] dump_stack_lvl+0xe8/0x150 [ 972.403649][T13569] sysfs_warn_dup+0x8e/0xa0 [ 972.403676][T13569] sysfs_do_create_link_sd+0xc0/0x110 [ 972.403704][T13569] device_add_class_symlinks+0x1cf/0x240 [ 972.403732][T13569] device_add+0x475/0xbb0 [ 972.403759][T13569] wiphy_register+0x1dc5/0x2dc0 [ 972.403802][T13569] ? __pfx_wiphy_register+0x10/0x10 [ 972.403825][T13569] ? __pfx_netdev_run_todo+0x10/0x10 [ 972.403854][T13569] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 972.403892][T13569] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 972.403921][T13569] ieee80211_register_hw+0x3d82/0x4a70 [ 972.403971][T13569] ? ieee80211_register_hw+0x19c1/0x4a70 [ 972.404023][T13569] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 972.404054][T13569] ? __asan_memset+0x22/0x50 [ 972.404082][T13569] ? __hrtimer_setup+0x1b7/0x260 [ 972.404106][T13569] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 972.404133][T13569] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 972.404181][T13569] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 972.404201][T13569] ? kstrndup+0xbf/0x160 [ 972.404232][T13569] hwsim_new_radio_nl+0xf6a/0x1c00 [ 972.404273][T13569] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 972.404304][T13569] ? rcu_is_watching+0x15/0xb0 [ 972.404331][T13569] ? trace_kmalloc+0x2a/0xf0 [ 972.404366][T13569] ? __nla_parse+0x40/0x60 [ 972.404386][T13569] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 972.404404][T13569] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 972.404425][T13569] genl_family_rcv_msg_doit+0x22a/0x330 [ 972.404460][T13569] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 972.404505][T13569] ? bpf_lsm_capable+0x9/0x20 [ 972.404523][T13569] ? security_capable+0x7e/0x2c0 [ 972.404541][T13569] genl_rcv_msg+0x61c/0x7a0 [ 972.404560][T13569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 972.404575][T13569] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 972.404607][T13569] netlink_rcv_skb+0x232/0x4b0 [ 972.404640][T13569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 972.404673][T13569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 972.404697][T13569] ? down_read+0x270/0x2e0 [ 972.404710][T13569] ? genl_rcv+0xd/0x40 [ 972.404726][T13569] genl_rcv+0x28/0x40 [ 972.404748][T13569] netlink_unicast+0x75c/0x8e0 [ 972.404783][T13569] netlink_sendmsg+0x813/0xb40 [ 972.404819][T13569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 972.404837][T13569] ? timerqueue_linked_add+0x2b6/0x2e0 [ 972.404852][T13569] ? aa_sock_msg_perm+0xf1/0x1b0 [ 972.404867][T13569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 972.404883][T13569] ____sys_sendmsg+0x972/0x9f0 [ 972.404909][T13569] ? __might_fault+0xaf/0x130 [ 972.404942][T13569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 972.404981][T13569] ? import_iovec+0x73/0xa0 [ 972.404999][T13569] ___sys_sendmsg+0x2a5/0x360 [ 972.405013][T13569] ? __lock_acquire+0x6b5/0x2cf0 [ 972.405028][T13569] ? __pfx____sys_sendmsg+0x10/0x10 [ 972.405088][T13569] ? __fget_files+0x2a/0x420 [ 972.405113][T13569] ? __fget_files+0x3a0/0x420 [ 972.405137][T13569] __x64_sys_sendmsg+0x1bd/0x2a0 [ 972.405153][T13569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 972.405172][T13569] ? handle_softirqs+0x715/0x840 [ 972.405191][T13569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.405214][T13569] do_syscall_64+0x15f/0xf80 [ 972.405240][T13569] ? clear_bhb_loop+0x40/0x90 [ 972.405266][T13569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.405283][T13569] RIP: 0033:0x7f1f7cd9cdd9 [ 972.405296][T13569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.405306][T13569] RSP: 002b:00007f1f7dbec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 972.405319][T13569] RAX: ffffffffffffffda RBX: 00007f1f7d015fa0 RCX: 00007f1f7cd9cdd9 [ 972.405327][T13569] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 972.405335][T13569] RBP: 00007f1f7ce32d69 R08: 0000000000000000 R09: 0000000000000000 [ 972.405344][T13569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 972.405356][T13569] R13: 00007f1f7d016038 R14: 00007f1f7d015fa0 R15: 00007f1f7d13fa48 [ 972.405391][T13569] [ 972.854840][ T10] uclogic 0003:28BD:0071.0082: pen parameters not found [ 972.864450][ T10] uclogic 0003:28BD:0071.0082: interface is invalid, ignoring [ 972.872084][ T5805] usbhid 2-1:1.0: can't add hid device: -71 [ 972.878521][ T5805] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 972.894600][ T5805] usb 2-1: USB disconnect, device number 115 [ 972.908415][ T10] usb 3-1: USB disconnect, device number 100 [ 973.199197][T13586] input: syz1 as /devices/virtual/input/input151 [ 973.432741][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 973.488886][T13595] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19031'. [ 973.571210][T13599] kvm: user requested TSC rate below hardware speed [ 973.605908][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 973.617187][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 973.629288][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.639737][ T10] usb 4-1: Product: syz [ 973.644510][ T10] usb 4-1: Manufacturer: syz [ 973.649194][ T10] usb 4-1: SerialNumber: syz [ 973.665998][ T10] r8152-cfgselector 4-1: Unknown version 0x0000 [ 973.683268][ T10] r8152-cfgselector 4-1: config 0 descriptor?? [ 973.906717][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19039'. [ 974.115845][ T10] r8152-cfgselector 4-1: USB disconnect, device number 63 [ 975.003139][T13666] netlink: 1744 bytes leftover after parsing attributes in process `syz.3.19064'. [ 975.217961][T13679] loop7: detected capacity change from 0 to 7 [ 975.308048][T13679] Dev loop7: unable to read RDB block 7 [ 975.417100][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 975.427044][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2 [ 975.503334][T13679] loop7: unable to read partition table [ 975.509281][T13679] loop7: partition table beyond EOD, truncated [ 975.516116][T13679] loop_reread_partitions: partition scan of loop7 (ъщѓеЎ™‰ьЌѕCоjМ–гўP=ГЅ?г}X‹єР њлЬ%х«`µ4FLQkЭЉ5) failed (rc=-5) [ 975.863753][ T5805] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 976.023082][ T5805] usb 5-1: Using ep0 maxpacket: 8 [ 976.036029][ T5805] usb 5-1: unable to get BOS descriptor or descriptor too short [ 976.056245][ T5805] usb 5-1: config 117 has an invalid interface number: 163 but max is 0 [ 976.080888][ T5805] usb 5-1: config 117 has no interface number 0 [ 976.088291][ T5805] usb 5-1: config 117 interface 163 has no altsetting 0 [ 976.099110][ T5805] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 976.109773][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.118489][ T5805] usb 5-1: Product: syz [ 976.125181][ T5805] usb 5-1: Manufacturer: syz [ 976.129893][ T5805] usb 5-1: SerialNumber: syz [ 976.792426][T13742] program syz.3.19099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 976.872939][ T5358] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 976.956256][ T5805] f81534a_ctrl 5-1:117.163: failed to enable ports: -71 [ 976.976601][ T5805] f81534a_ctrl 5-1:117.163: probe with driver f81534a_ctrl failed with error -71 [ 976.996583][ T5805] usb 5-1: USB disconnect, device number 99 [ 977.037392][ T5358] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 977.061231][ T5358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.108087][ T5358] usb 3-1: config 0 descriptor?? [ 977.135985][ T5358] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 977.444763][T13767] veth1_to_hsr: left allmulticast mode [ 977.451456][T13767] veth1_to_hsr: left promiscuous mode [ 977.459210][T13767] erspan0: left promiscuous mode [ 977.470949][T13768] netlink: 'syz.5.19111': attribute type 10 has an invalid length. [ 977.483215][ T10] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 977.496414][ T6895] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 977.518799][T13768] `: Port device geneve0 added [ 977.524199][ T6895] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 977.532816][ T5772] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 977.545635][ T6895] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 977.561536][ T6895] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 977.572177][ T6895] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 977.581773][ T6895] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.650339][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 977.665695][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 977.678051][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 977.703413][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 977.717679][ T5772] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.733700][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 977.747469][ T5772] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 977.757496][ T5772] usb 4-1: config 0 interface 0 has no altsetting 0 [ 977.764498][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 977.773739][ T5772] usb 4-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 977.783258][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.791471][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.821991][ T5772] usb 4-1: config 0 descriptor?? [ 977.947954][ T5358] gspca_sunplus: reg_w_riv err -71 [ 977.958199][ T5358] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 977.982127][ T5358] usb 3-1: USB disconnect, device number 101 [ 978.009890][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 978.020994][ T10] usbtmc 2-1:16.0: can't read capabilities [ 978.224523][ T7063] usb 2-1: USB disconnect, device number 116 [ 978.268136][ T5772] chicony 0003:04F2:1236.0083: unexpected long global item [ 978.279146][ T5772] chicony 0003:04F2:1236.0083: Chicony hid parse failed: -22 [ 978.286986][ T5772] chicony 0003:04F2:1236.0083: probe with driver chicony failed with error -22 [ 978.470416][ T7063] usb 4-1: USB disconnect, device number 64 [ 979.343009][ T5772] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 979.382890][ T5358] psmouse serio4: Failed to reset mouse on : -5 [ 979.494953][ T5772] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 979.503938][ T5772] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 979.513327][ T5772] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 979.524095][ T5772] usb 2-1: config 220 has no interface number 2 [ 979.530430][ T5772] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 979.544053][ T5772] usb 2-1: config 220 interface 0 has no altsetting 0 [ 979.550849][ T5772] usb 2-1: config 220 interface 76 has no altsetting 0 [ 979.557986][ T5772] usb 2-1: config 220 interface 1 has no altsetting 0 [ 979.567506][ T5772] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 979.576871][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.585138][ T5772] usb 2-1: Product: syz [ 979.589456][ T5772] usb 2-1: Manufacturer: syz [ 979.594156][ T5772] usb 2-1: SerialNumber: syz [ 979.811905][ T5772] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 979.820051][ T5772] uvcvideo 2-1:220.0: No valid video chain found. [ 979.827000][ T5772] usb 2-1: selecting invalid altsetting 0 [ 979.857888][ T5772] usb 2-1: selecting invalid altsetting 0 [ 979.872850][ T5772] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 979.888524][ T5772] usb 2-1: USB disconnect, device number 117 [ 980.203050][ T10] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 980.353014][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 980.368474][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 980.394152][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 980.419497][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 980.429583][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.438272][ T10] usb 5-1: Product: syz [ 980.442577][ T10] usb 5-1: Manufacturer: syz [ 980.447891][ T10] usb 5-1: SerialNumber: syz [ 980.457950][ T10] usb 5-1: config 0 descriptor?? [ 980.470410][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 980.480405][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 980.732803][ T7063] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 980.847607][T13842] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19146'. [ 980.883291][ T7063] usb 3-1: Using ep0 maxpacket: 16 [ 980.890639][ T7063] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.903641][ T7063] usb 3-1: config 0 interface 0 has no altsetting 0 [ 980.910904][ T7063] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 980.924495][ T7063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.936264][ T7063] usb 3-1: config 0 descriptor?? [ 981.072229][ T10] em28xx 5-1:0.0: chip ID is em2860 [ 981.203416][ T5805] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 981.273555][ T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 981.281371][ T10] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 981.288458][ T10] em28xx 5-1:0.0: No AC97 audio processor [ 981.300601][ T10] usb 5-1: USB disconnect, device number 100 [ 981.311592][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 981.335132][ T10] em28xx 5-1:0.0: Freeing device [ 981.356424][ T5805] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 981.371288][ T7063] mcp2221 0003:04D8:00DD.0084: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 981.382565][ T5805] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.395602][ T5805] usb 2-1: config 0 has no interface number 0 [ 981.405832][ T5805] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 981.418428][ T5805] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 981.432329][ T5805] usb 2-1: config 0 interface 52 has no altsetting 0 [ 981.441866][ T5805] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 981.451691][ T5805] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 981.461263][ T5805] usb 2-1: Manufacturer: syz [ 981.469730][ T5805] usb 2-1: config 0 descriptor?? [ 981.494570][ T5805] hub 2-1:0.52: bad descriptor, ignoring hub [ 981.506995][ T5805] hub 2-1:0.52: probe with driver hub failed with error -5 [ 981.705396][ T5805] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input153 [ 981.784418][ T10] usb 3-1: USB disconnect, device number 102 [ 982.033024][ T5772] usb 2-1: USB disconnect, device number 118 [ 982.449725][T13886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19167'. [ 982.873386][ T5772] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 982.973441][ T5358] misc userio: Buffer overflowed, userio client isn't keeping up [ 983.033104][ T5772] usb 5-1: Using ep0 maxpacket: 32 [ 983.040144][ T5772] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.050930][ T5772] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x3 has invalid wMaxPacketSize 0 [ 983.061326][ T5772] usb 5-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 983.075244][ T5772] usb 5-1: config 0 interface 0 has no altsetting 0 [ 983.081993][ T5772] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 983.091480][ T5772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.103046][ T5772] usb 5-1: config 0 descriptor?? [ 983.183125][ T5805] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 983.353117][ T5805] usb 2-1: Using ep0 maxpacket: 32 [ 983.360323][ T5805] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 983.370559][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.382573][ T5805] usb 2-1: config 0 descriptor?? [ 983.517357][ T5772] hid_parser_main: 32 callbacks suppressed [ 983.517379][ T5772] hid-thrustmaster 0003:044F:B65D.0085: unknown main item tag 0x0 [ 983.532110][ T5772] hid-thrustmaster 0003:044F:B65D.0085: unknown main item tag 0x0 [ 983.540460][ T5772] hid-thrustmaster 0003:044F:B65D.0085: unknown main item tag 0x0 [ 983.548676][ T5772] hid-thrustmaster 0003:044F:B65D.0085: unknown main item tag 0x0 [ 983.556921][ T5772] hid-thrustmaster 0003:044F:B65D.0085: unknown main item tag 0x0 [ 983.570644][ T5772] hid-thrustmaster 0003:044F:B65D.0085: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 983.583486][ T5772] hid-thrustmaster 0003:044F:B65D.0085: Unexpected non-int endpoint [ 983.601893][ T5805] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 983.636236][ T5805] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 983.664171][ T5805] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 983.676538][ T5805] usb 2-1: media controller created [ 983.699069][ T5805] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 983.721681][ C0] hid-thrustmaster 0003:044F:B65D.0085: URB to get model id failed with error -71 [ 983.722143][ T7063] usb 5-1: USB disconnect, device number 101 [ 983.810222][T13915] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 983.826619][ T5805] az6027: usb out operation failed. (-71) [ 983.833167][ T5805] az6027: usb out operation failed. (-71) [ 983.844421][ T5805] stb0899_attach: Driver disabled by Kconfig [ 983.853405][ T5805] az6027: no front-end attached [ 983.853405][ T5805] [ 983.861024][ T5805] az6027: usb out operation failed. (-71) [ 983.867446][ T5805] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 983.876872][ T5805] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input154 [ 983.891271][ T5805] dvb-usb: schedule remote query interval to 400 msecs. [ 983.899365][ T5805] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 983.911570][ T5805] usb 2-1: USB disconnect, device number 119 [ 983.955789][ T5805] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 984.093115][ T5772] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 984.253043][ T5772] usb 3-1: Using ep0 maxpacket: 16 [ 984.266415][ T5772] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 984.279689][ T5772] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 984.296241][ T5772] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 984.302001][ T5358] input: PS/2 Generic Mouse as /devices/serio4/input/input152 [ 984.322258][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.335165][ T5772] usb 3-1: Product: syz [ 984.346025][ T5772] usb 3-1: Manufacturer: syz [ 984.351465][ T5772] usb 3-1: SerialNumber: syz [ 984.363218][ T5772] usb 3-1: config 0 descriptor?? [ 984.392102][ T5772] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 984.407054][ T5772] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 984.428166][T13931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19188'. [ 984.447503][T13931] erspan0: entered promiscuous mode [ 984.454762][T13931] erspan0: left promiscuous mode [ 984.553083][ T5358] psmouse serio4: Failed to enable mouse on [ 984.684887][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19193'. [ 984.953179][ T10] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 985.007608][ T5772] em28xx 3-1:0.0: chip ID is em2828X [ 985.112998][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 985.125047][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 985.144537][ T10] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 985.162768][ T10] usb 2-1: config 7 has no interface number 0 [ 985.171351][ T10] usb 2-1: config 7 interface 187 altsetting 6 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 985.192945][ T10] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x8F has invalid maxpacket 32 [ 985.243299][ T10] usb 2-1: config 7 interface 187 has no altsetting 0 [ 985.255135][ T5772] usb 3-1: USB disconnect, device number 103 [ 985.326031][ T10] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 985.336708][ T5772] em28xx 3-1:0.0: Disconnecting em28xx [ 985.343036][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.358308][ T10] usb 2-1: Product: syz [ 985.365869][ T5772] em28xx 3-1:0.0: Freeing device [ 985.373531][ T10] usb 2-1: Manufacturer: syz [ 985.378181][ T10] usb 2-1: SerialNumber: syz [ 985.396234][T13944] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 985.626748][ T10] usb 2-1: Unknown endpoint type found, address 0x07 [ 985.643225][ T10] usb 2-1: Not enough endpoints found in device, aborting! [ 985.824232][ T5772] usb 2-1: USB disconnect, device number 120 [ 985.878809][T13969] kvm_intel: kvm [13968]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2 [ 986.012999][ T10] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 986.174700][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 986.183485][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 986.194323][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 986.205010][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 986.216622][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 986.229311][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 986.238622][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 986.246737][ T10] usb 5-1: Product: syz [ 986.250939][ T10] usb 5-1: Manufacturer: syz [ 986.261370][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 986.266683][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 986.273575][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 986.279510][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 986.522933][ C0] wdm_int_callback: 50 callbacks suppressed [ 986.522960][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 986.535558][ C0] wdm_int_callback: 50 callbacks suppressed [ 986.535574][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 986.548089][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 986.554714][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 986.561005][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 986.567613][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 986.574126][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 986.580724][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 986.587033][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 986.593652][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 986.600208][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 986.606814][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 986.613663][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 986.620297][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 986.626647][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 986.633275][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 986.639823][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 986.646444][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 986.657407][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 986.664161][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 986.672682][ T10] usb 5-1: USB disconnect, device number 102 [ 986.672743][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 987.929628][T14015] kvm: kvm [14014]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x1 [ 989.027932][T14051] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 989.213167][ T10] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 989.373177][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 989.389465][ T10] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 989.406711][ T10] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 989.433014][ T10] usb 5-1: config 0 has no interface number 0 [ 989.440691][ T10] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 989.453221][ T10] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 989.473475][ T10] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 989.486844][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 989.496919][ T10] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 989.505317][ T10] usb 5-1: Product: syz [ 989.509541][ T10] usb 5-1: Manufacturer: syz [ 989.525119][ T10] usb 5-1: config 0 descriptor?? [ 989.748807][T14048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.775548][T14048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.801546][ T10] usb 5-1: USB disconnect, device number 103 [ 989.883363][ T5358] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 990.042844][ T5358] usb 3-1: Using ep0 maxpacket: 8 [ 990.049831][ T5358] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 990.061812][ T5358] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 990.075990][ T5358] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 990.086097][ T5358] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 990.097309][ T5358] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 990.119852][ T5358] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 990.129690][ T5358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.293004][ T10] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 990.356120][ T5358] usb 3-1: GET_CAPABILITIES returned 0 [ 990.362106][ T5358] usbtmc 3-1:16.0: can't read capabilities [ 990.473033][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 990.479530][ T10] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.491648][ T10] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 990.503238][ T10] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 990.513158][ T10] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 990.522386][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.537614][ T10] hub 5-1:32.0: bad descriptor, ignoring hub [ 990.547544][ T10] hub 5-1:32.0: probe with driver hub failed with error -5 [ 990.577657][ T5772] usb 3-1: USB disconnect, device number 104 [ 990.843524][ T10] usb 5-1: USB disconnect, device number 104 [ 991.513530][ T5358] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 991.673103][ T5358] usb 5-1: Using ep0 maxpacket: 8 [ 991.683833][ T5358] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 991.695670][ T5358] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 991.707518][ T5358] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 991.718128][ T5358] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 991.723027][ T10] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 991.732094][ T5358] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 991.748658][ T5358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.895118][ T10] usb 2-1: config 0 has no interfaces? [ 991.905528][ T10] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 991.915056][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.923616][ T10] usb 2-1: Product: syz [ 991.927971][ T10] usb 2-1: Manufacturer: syz [ 991.933288][ T10] usb 2-1: SerialNumber: syz [ 991.944141][ T10] usb 2-1: config 0 descriptor?? [ 991.969328][ T5358] usb 5-1: GET_CAPABILITIES returned 0 [ 991.977699][ T5358] usbtmc 5-1:16.0: can't read capabilities [ 991.988805][T14144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 992.205424][T14121] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 992.221179][ T5772] usb 2-1: USB disconnect, device number 121 [ 992.224545][ T5358] usb 5-1: USB disconnect, device number 105 [ 992.336586][T14158] syz_tun: entered allmulticast mode [ 992.346605][T14158] syz_tun: left allmulticast mode [ 992.363436][ T10] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 992.533847][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 992.541016][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.554298][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 992.564216][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.582871][ T10] usb 3-1: config 0 descriptor?? [ 992.904334][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19299'. [ 992.926018][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19299'. [ 993.014225][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.028426][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.067039][ T10] mcp2221 0003:04D8:00DD.0086: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 993.200199][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19305'. [ 993.246972][ T29] audit: type=1326 audit(1777461629.027:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14191 comm="syz.4.19306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7cd9cdd9 code=0x7ffc0000 [ 993.326985][ T29] audit: type=1326 audit(1777461629.047:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14191 comm="syz.4.19306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7cd9cdd9 code=0x7ffc0000 [ 993.368948][T14194] netlink: 60 bytes leftover after parsing attributes in process `syz.5.19307'. [ 993.377907][ T29] audit: type=1326 audit(1777461629.057:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14191 comm="syz.4.19306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1f7cd9cdd9 code=0x7ffc0000 [ 993.419756][ T29] audit: type=1326 audit(1777461629.057:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14191 comm="syz.4.19306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7cd9cdd9 code=0x7ffc0000 [ 993.470335][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19309'. [ 993.488459][ T5805] usb 3-1: USB disconnect, device number 105 [ 993.510098][ T29] audit: type=1326 audit(1777461629.057:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14191 comm="syz.4.19306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f7cd9cdd9 code=0x7ffc0000 [ 993.539939][ T29] audit: type=1326 audit(1777461629.057:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14191 comm="syz.4.19306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7cd9cdd9 code=0x7ffc0000 [ 993.579731][ T29] audit: type=1326 audit(1777461629.057:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14191 comm="syz.4.19306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1f7cd9cdd9 code=0x7ffc0000 [ 993.607410][ T29] audit: type=1326 audit(1777461629.057:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14191 comm="syz.4.19306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f7cd9cdd9 code=0x7ffc0000 [ 994.293036][ T5805] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 994.444256][ T5805] usb 4-1: Using ep0 maxpacket: 32 [ 994.452968][ T5805] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 994.465318][ T5805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 994.472210][ T5805] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 994.489428][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.504601][ T5805] usb 4-1: config 0 descriptor?? [ 994.626659][T14230] netlink: 'syz.2.19321': attribute type 8 has an invalid length. [ 994.638298][T14230] sch_fq: defrate 0 ignored. [ 995.280299][ T5805] corsair-cpro 0003:1B1C:0C10.0087: unknown main item tag 0x0 [ 995.304844][ T5805] corsair-cpro 0003:1B1C:0C10.0087: unknown main item tag 0x0 [ 995.324023][ T5805] corsair-cpro 0003:1B1C:0C10.0087: unknown main item tag 0x0 [ 995.341866][ T5805] corsair-cpro 0003:1B1C:0C10.0087: unknown main item tag 0x0 [ 995.368033][ T5805] corsair-cpro 0003:1B1C:0C10.0087: unknown main item tag 0x0 [ 995.382465][ T5805] corsair-cpro 0003:1B1C:0C10.0087: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 995.584868][ T5772] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 995.756445][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 995.767968][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 995.778800][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 995.790560][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 995.802210][ T5805] corsair-cpro 0003:1B1C:0C10.0087: probe with driver corsair-cpro failed with error -110 [ 995.805391][ T5772] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 995.822461][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.833240][ T5805] usb 4-1: USB disconnect, device number 65 [ 995.841100][ T5772] usb 2-1: Product: syz [ 995.845845][ T5772] usb 2-1: Manufacturer: syz [ 995.850483][ T5772] usb 2-1: SerialNumber: syz [ 995.871740][ T5772] usb 2-1: config 0 descriptor?? [ 996.008107][T14287] sock: sock_set_timeout: `syz.4.19347' (pid 14287) tries to set negative timeout [ 996.099684][ T5772] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 996.325426][T14296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 996.327684][T14263] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 996.339864][T14296] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 996.354136][ T5805] usb 2-1: USB disconnect, device number 122 [ 996.389162][ T5772] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 996.562925][ T5772] usb 5-1: Using ep0 maxpacket: 16 [ 996.571080][ T5772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.584038][ T5772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.595173][ T5772] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 996.604647][ T5772] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 996.613571][ T5772] usb 5-1: Manufacturer: syz [ 996.620134][ T5772] usb 5-1: config 0 descriptor?? [ 996.642782][ T7063] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 996.793503][ T7063] usb 3-1: Using ep0 maxpacket: 32 [ 996.801640][ T7063] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 996.810495][ T7063] usb 3-1: config 0 has no interface number 0 [ 996.827046][ T7063] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 996.857872][ T7063] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 996.867954][ T7063] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 996.878088][ T7063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.903114][ T7063] usb 3-1: config 0 descriptor?? [ 997.042830][ T5772] hid (null): unknown global tag 0xe [ 997.078661][ T5772] creative-sb0540 0003:041E:3100.0088: unknown global tag 0xe [ 997.106067][ T5772] creative-sb0540 0003:041E:3100.0088: item 0 1 1 14 parsing failed [ 997.134114][ T5772] creative-sb0540 0003:041E:3100.0088: parse failed [ 997.141523][ T5772] creative-sb0540 0003:041E:3100.0088: probe with driver creative-sb0540 failed with error -22 [ 997.274403][ T5772] usb 5-1: USB disconnect, device number 106 [ 997.537092][ T7063] uclogic 0003:28BD:0094.0089: pen parameters not found [ 997.574353][ T7063] uclogic 0003:28BD:0094.0089: interface is invalid, ignoring [ 997.745814][T14344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19374'. [ 997.752011][ T5772] usb 3-1: USB disconnect, device number 106 [ 997.899268][T14348] netlink: 'syz.4.19376': attribute type 11 has an invalid length. [ 997.916604][T14348] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.19376'. [ 998.498061][T14375] netlink: 'syz.2.19389': attribute type 6 has an invalid length. [ 998.645283][T14385] bond5: invalid ARP target 0.0.0.0 specified for addition [ 998.653120][T14385] bond5: option arp_ip_target: invalid value (0) [ 998.663877][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19394'. [ 998.664205][T14385] bond5 (unregistering): Released all slaves [ 998.767042][T14392] sctp: [Deprecated]: syz.1.19397 (pid 14392) Use of int in maxseg socket option. [ 998.767042][T14392] Use struct sctp_assoc_value instead [ 998.833261][ T7063] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 999.003571][ T7063] usb 3-1: Using ep0 maxpacket: 16 [ 999.016375][ T7063] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 999.033624][ T7063] usb 3-1: config 0 has no interface number 0 [ 999.039860][ T7063] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 999.061755][ T7063] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 999.085120][ T7063] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 999.102781][ T7063] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.116354][ T7063] usb 3-1: Product: syz [ 999.129777][ T7063] usb 3-1: Manufacturer: syz [ 999.135490][ T7063] usb 3-1: SerialNumber: syz [ 999.151018][ T7063] usb 3-1: config 0 descriptor?? [ 999.172401][T14383] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 999.182501][T14383] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 999.397438][T14383] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 999.418874][T14383] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 999.840917][ T7063] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 999.854060][ T7063] asix 3-1:0.251: probe with driver asix failed with error -524 [ 999.953031][ T5772] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 999.973095][ T5358] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1000.045299][ T10] usb 3-1: USB disconnect, device number 107 [ 1000.113003][ T5772] usb 5-1: Using ep0 maxpacket: 16 [ 1000.123134][ T5358] usb 2-1: Using ep0 maxpacket: 16 [ 1000.130435][ T5772] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.134856][ T5358] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.146355][ T5772] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1000.154294][ T5358] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1000.161423][ T5772] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1000.181543][ T5358] usb 2-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 1000.183096][ T5772] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.198086][ T5358] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.209622][ T5358] usb 2-1: Product: syz [ 1000.210454][ T5772] usb 5-1: config 0 descriptor?? [ 1000.224213][ T5358] usb 2-1: Manufacturer: syz [ 1000.230663][ T5358] usb 2-1: SerialNumber: syz [ 1000.250352][ T5358] usb 2-1: config 0 descriptor?? [ 1000.493083][T14438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.507747][T14438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.519814][ T10] usb 2-1: USB disconnect, device number 123 [ 1000.647480][ T5772] mcp2221 0003:04D8:00DD.008A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1000.923559][ T5358] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1001.049119][ T5772] usb 5-1: USB disconnect, device number 107 [ 1001.056998][ T10] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 1001.073341][ T5358] usb 4-1: Using ep0 maxpacket: 16 [ 1001.082501][ T5358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 1001.096133][ T5358] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1001.107641][ T5358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.118692][ T5358] usb 4-1: config 0 descriptor?? [ 1001.225069][ T10] usb 2-1: config 0 has an invalid interface number: 229 but max is 0 [ 1001.234551][ T10] usb 2-1: config 0 has no interface number 0 [ 1001.240788][ T10] usb 2-1: config 0 interface 229 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1001.256433][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 1001.267028][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.275870][ T10] usb 2-1: Product: syz [ 1001.281482][ T10] usb 2-1: Manufacturer: syz [ 1001.287316][ T10] usb 2-1: SerialNumber: syz [ 1001.298292][ T10] usb 2-1: config 0 descriptor?? [ 1001.537487][ T5358] hid (null): unknown global tag 0xf5 [ 1001.551397][ T10] usb 2-1: USB disconnect, device number 124 [ 1001.554269][ T5358] hid (null): report_id 1370199724 is invalid [ 1001.595160][ T5358] macally 0003:060B:0001.008B: unknown main item tag 0x0 [ 1001.614423][ T5358] macally 0003:060B:0001.008B: unknown main item tag 0x0 [ 1001.629154][ T5358] macally 0003:060B:0001.008B: unknown main item tag 0x0 [ 1001.656800][ T5358] macally 0003:060B:0001.008B: unknown main item tag 0x0 [ 1001.675598][ T5358] macally 0003:060B:0001.008B: unknown main item tag 0x0 [ 1001.691998][T14477] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 1001.691998][T14477] program syz.4.19437 not setting count and/or reply_len properly [ 1001.695458][ T5358] macally 0003:060B:0001.008B: unknown main item tag 0x0 [ 1001.753942][ T5358] macally 0003:060B:0001.008B: unknown main item tag 0x0 [ 1001.775570][ T5358] macally 0003:060B:0001.008B: unknown main item tag 0x0 [ 1001.782757][ T5358] macally 0003:060B:0001.008B: unknown main item tag 0x0 [ 1001.789817][ T5358] macally 0003:060B:0001.008B: unknown main item tag 0x0 [ 1001.809860][ T5358] macally 0003:060B:0001.008B: reserved main item tag 0xe [ 1001.825762][ T5358] macally 0003:060B:0001.008B: unexpected long global item [ 1001.840221][ T5358] macally 0003:060B:0001.008B: probe with driver macally failed with error -22 [ 1001.873480][ T5358] usb 4-1: USB disconnect, device number 66 [ 1002.063136][ T10] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1002.163480][ T5772] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1002.235248][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.247387][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.261226][ T10] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1002.270907][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.286677][ T10] usb 3-1: config 0 descriptor?? [ 1002.323055][ T5772] usb 5-1: Using ep0 maxpacket: 8 [ 1002.330146][ T5772] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 1002.339762][ T5772] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 1002.348850][ T5772] usb 5-1: config 0 has no interface number 0 [ 1002.357734][ T5772] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1002.371338][ T5772] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1002.384750][ T5772] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1002.398823][ T5772] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1002.409008][ T5772] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1002.417585][ T5772] usb 5-1: Product: syz [ 1002.428354][ T5772] usb 5-1: config 0 descriptor?? [ 1002.439842][T14483] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1002.486192][ T29] audit: type=1326 audit(1777461638.267:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.3.19448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c419cdd9 code=0x7ffc0000 [ 1002.517295][ T29] audit: type=1326 audit(1777461638.267:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.3.19448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c419cdd9 code=0x7ffc0000 [ 1002.542420][ T29] audit: type=1326 audit(1777461638.287:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.3.19448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f34c419cdd9 code=0x7ffc0000 [ 1002.574463][ T29] audit: type=1326 audit(1777461638.297:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.3.19448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c419cdd9 code=0x7ffc0000 [ 1002.598907][ T29] audit: type=1326 audit(1777461638.297:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.3.19448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c419cdd9 code=0x7ffc0000 [ 1002.625942][ T29] audit: type=1326 audit(1777461638.297:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.3.19448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f34c419cdd9 code=0x7ffc0000 [ 1002.658018][ T29] audit: type=1800 audit(1777461638.297:1184): pid=14502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19448" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1002.687090][ T29] audit: type=1326 audit(1777461638.347:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.3.19448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c419cdd9 code=0x7ffc0000 [ 1002.713921][ T29] audit: type=1326 audit(1777461638.347:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.3.19448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34c419cdd9 code=0x7ffc0000 [ 1002.747802][ T29] audit: type=1326 audit(1777461638.357:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz.3.19448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f34c419cdd9 code=0x7ffc0000 [ 1002.943507][ T10] hid-led 0003:1D34:000A.008C: hidraw0: USB HID v0.00 Device [HID 1d34:000a] on usb-dummy_hcd.2-1/input0 [ 1002.995289][ T10] hid-led 0003:1D34:000A.008C: Dream Cheeky Webmail Notifier initialized [ 1003.062266][ T5772] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.21/input/input156 [ 1003.111615][T14511] netlink: 27 bytes leftover after parsing attributes in process `syz.1.19451'. [ 1003.145807][ T10] usb 3-1: USB disconnect, device number 108 [ 1003.328911][ T5805] usb 5-1: USB disconnect, device number 108 [ 1003.329029][ C0] keyspan_remote 5-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1004.533321][ T5772] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1004.694425][ T5772] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 1004.703309][ T5772] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.719698][ T5772] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 1004.729796][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.737998][ T5772] usb 5-1: Product: syz [ 1004.742220][ T5772] usb 5-1: Manufacturer: syz [ 1004.747168][ T5772] usb 5-1: SerialNumber: syz [ 1004.766804][ T5772] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input157 [ 1004.844138][ T5805] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1004.876025][T14586] vivid-004: disconnect [ 1004.881196][T14583] vivid-004: reconnect [ 1004.971161][ T5772] bcm5974 5-1:1.0: could not read from device [ 1004.982300][ T4977] bcm5974 5-1:1.0: could not read from device [ 1004.995089][ T5772] input: failed to attach handler mousedev to device input157, error: -5 [ 1005.005967][ T4977] bcm5974 5-1:1.0: could not read from device [ 1005.008754][ T5772] usb 5-1: USB disconnect, device number 109 [ 1005.019409][ T5805] usb 4-1: config 6 has an invalid interface number: 20 but max is 0 [ 1005.029671][ T5805] usb 4-1: config 6 has no interface number 0 [ 1005.049691][ T5805] usb 4-1: config 6 interface 20 has no altsetting 0 [ 1005.076439][ T5805] usb 4-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=21.86 [ 1005.096539][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.106350][ T5805] usb 4-1: Product: syz [ 1005.111007][ T5805] usb 4-1: Manufacturer: syz [ 1005.112952][ T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1005.116945][ T5805] usb 4-1: SerialNumber: syz [ 1005.162805][ T5358] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1005.305874][ T10] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1005.323691][ T5358] usb 3-1: Using ep0 maxpacket: 16 [ 1005.330649][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1005.344797][ T5358] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.352716][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1005.369576][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1005.381343][ T5805] usb 4-1: Could not find all expected endpoints [ 1005.390073][ T5358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1005.402580][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1005.415593][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1005.421090][T14596] netlink: 'syz.5.19489': attribute type 5 has an invalid length. [ 1005.427549][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1005.437654][ T5805] usb 4-1: USB disconnect, device number 67 [ 1005.443973][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1005.448148][ T5358] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1005.467068][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1005.467102][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1005.468380][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1005.512760][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1005.515423][ T5358] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1005.547978][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1005.555383][ T5358] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1005.575279][ T5358] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1005.582046][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1005.585011][ T5358] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1005.598539][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1005.616433][ T5358] usb 3-1: Manufacturer: syz [ 1005.635396][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1005.648971][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1005.650745][ T5358] usb 3-1: config 0 descriptor?? [ 1005.658625][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1005.676888][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1005.686360][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1005.697124][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1005.709029][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1005.717765][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1005.734659][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1005.746403][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1005.756650][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1005.766748][ T10] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1005.775721][ T10] usb 2-1: Product: syz [ 1005.780003][ T10] usb 2-1: Manufacturer: syz [ 1005.785411][ T10] usb 2-1: SerialNumber: syz [ 1005.802190][ T10] usb 2-1: config 0 descriptor?? [ 1005.823038][ T10] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1005.953410][ T5358] rc_core: IR keymap rc-hauppauge not found [ 1005.969619][ T5358] Registered IR keymap rc-empty [ 1005.979904][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.013243][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.034374][ T5358] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1006.075464][ T5358] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input158 [ 1006.114736][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.154015][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.173966][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.186850][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 1006.197509][ T10] usb 2-1: USB disconnect, device number 125 [ 1006.213383][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.219199][ T10] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1006.245281][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.283048][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.313466][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.342924][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.373139][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.403113][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.428658][ T5358] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1006.467132][ T5358] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 1006.493485][ T5358] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1006.518694][ T5358] usb 3-1: USB disconnect, device number 109 [ 1007.142849][ T5358] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1007.214161][ T10] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1007.292954][ T5358] usb 5-1: Using ep0 maxpacket: 32 [ 1007.300099][ T5358] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.310471][ T5358] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1007.325314][ T5358] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1007.331950][ T5358] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1007.341174][ T5358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.351700][ T5358] usb 5-1: config 0 descriptor?? [ 1007.384878][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1007.394223][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.405117][ T10] usb 2-1: config 0 descriptor?? [ 1007.416657][ T10] cp210x 2-1:0.0: cp210x converter detected [ 1007.605557][ T5772] hid_parser_main: 50 callbacks suppressed [ 1007.605579][ T5772] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 1007.620651][ T5772] hid-generic 0000:0000:0000.008D: unknown main item tag 0x0 [ 1007.630857][ T5772] hid-generic 0000:0000:0000.008D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1007.704557][T14652] fido_id[14652]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1007.779676][ T5358] corsair-psu 0003:1B1C:1C09.008E: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 1007.829286][ T10] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1007.863369][ T5358] corsair-psu 0003:1B1C:1C09.008E: unable to initialize device (-38) [ 1007.874388][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1007.877933][ T5358] corsair-psu 0003:1B1C:1C09.008E: probe with driver corsair-psu failed with error -38 [ 1008.055739][ T5358] usb 2-1: USB disconnect, device number 126 [ 1008.068697][ T5358] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1008.102458][ T5358] cp210x 2-1:0.0: device disconnected [ 1008.186142][ T5805] usb 5-1: USB disconnect, device number 110 [ 1008.224455][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1008.352886][ T7063] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1008.394517][ T10] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1008.404851][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1008.419985][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1008.429121][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.437284][ T10] usb 4-1: Product: syz [ 1008.441427][ T10] usb 4-1: Manufacturer: syz [ 1008.446308][ T10] usb 4-1: SerialNumber: syz [ 1008.455885][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1008.478596][ T5772] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1008.504690][ T7063] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.515706][ T7063] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1008.526377][ T7063] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1008.536114][ T7063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1008.544897][ T7063] usb 3-1: SerialNumber: syz [ 1008.764499][ T10] usb 4-1: USB disconnect, device number 68 [ 1008.784089][ T7063] usb 3-1: 0:2 : does not exist [ 1008.882526][ T7063] usb 3-1: USB disconnect, device number 110 [ 1008.978062][T27872] udevd[27872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.308203][T14689] netlink: 48 bytes leftover after parsing attributes in process `syz.4.19529'. [ 1009.322513][T14689] netem: unknown loss type 11 [ 1009.336856][T14689] netem: change failed [ 1009.565410][ T5772] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1009.602494][ T5772] ath9k_htc: Failed to initialize the device [ 1009.629958][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 1009.789227][T14710] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1009.807272][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19538'. [ 1009.952783][ T10] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1010.072443][T14729] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.103708][T14731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19547'. [ 1010.133083][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1010.144794][ T10] usb 4-1: config index 0 descriptor too short (expected 69, got 27) [ 1010.162245][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1010.192959][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 1010.202321][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.210758][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19548'. [ 1010.220508][ T10] usb 4-1: Product: syz [ 1010.225698][ T10] usb 4-1: Manufacturer: syz [ 1010.230542][ T10] usb 4-1: SerialNumber: syz [ 1010.242918][ T10] ldusb 4-1:1.0: Interrupt in endpoint not found [ 1010.460537][ T5772] usb 4-1: USB disconnect, device number 69 [ 1010.543057][ T10] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1010.714192][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1010.724917][ T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1010.742713][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.754160][ T10] usb 2-1: Product: syz [ 1010.761093][ T10] usb 2-1: Manufacturer: syz [ 1010.768592][ T10] usb 2-1: SerialNumber: syz [ 1011.594516][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1011.624015][ T10] usb 2-1: USB disconnect, device number 127 [ 1011.683627][ T7063] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1011.843137][ T7063] usb 4-1: Using ep0 maxpacket: 8 [ 1011.850097][ T7063] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1011.860878][ T7063] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1011.870728][ T7063] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.879156][ T7063] usb 4-1: Product: syz [ 1011.884019][ T7063] usb 4-1: Manufacturer: syz [ 1011.888632][ T7063] usb 4-1: SerialNumber: syz [ 1011.897070][ T7063] usb 4-1: config 0 descriptor?? [ 1011.906003][ T7063] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1011.914506][ T7063] usb 4-1: setting power ON [ 1011.919045][ T7063] dvb-usb: bulk message failed: -22 (2/0) [ 1011.922721][ T5772] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1011.933990][ T7063] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1011.944610][ T7063] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1011.953891][ T7063] usb 4-1: media controller created [ 1011.966860][ T7063] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1011.983597][ T7063] usb 4-1: selecting invalid altsetting 6 [ 1011.989407][ T7063] usb 4-1: digital interface selection failed (-22) [ 1011.996096][ T7063] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1012.005694][ T7063] usb 4-1: setting power OFF [ 1012.010297][ T7063] dvb-usb: bulk message failed: -22 (2/0) [ 1012.016181][ T7063] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1012.026006][ T7063] (NULL device *): no alternate interface [ 1012.045221][ T7063] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1012.093433][ T5772] usb 5-1: Using ep0 maxpacket: 32 [ 1012.101019][ T5772] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1012.109307][ T5772] usb 5-1: config 0 has no interface number 0 [ 1012.116175][ T5772] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1012.137763][ T5772] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1012.147248][ T7063] usb 4-1: USB disconnect, device number 70 [ 1012.157842][ T5772] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1012.178087][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.192852][ T5772] usb 5-1: Product: syz [ 1012.197085][ T5772] usb 5-1: Manufacturer: syz [ 1012.206485][ T5772] usb 5-1: SerialNumber: syz [ 1012.217613][ T5772] usb 5-1: config 0 descriptor?? [ 1012.616554][T14813] netdevsim netdevsim1 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 1012.853545][ T5772] appletouch 5-1:0.85: Geyser mode initialized. [ 1012.862268][ T5772] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input159 [ 1013.118588][ T7063] usb 5-1: USB disconnect, device number 111 [ 1013.157195][ T7063] appletouch 5-1:0.85: input: appletouch disconnected [ 1013.260571][T14846] erspan0: entered promiscuous mode [ 1013.323306][ T5772] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1013.484898][ T5772] usb 4-1: Using ep0 maxpacket: 16 [ 1013.506977][ T5772] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1013.535134][ T5772] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1013.555563][ T5772] usb 4-1: can't read configurations, error -71 [ 1013.649915][T14863] input: syz0 as /devices/virtual/input/input160 [ 1014.359453][T14901] bridge0: port 1(veth0_to_bridge) entered blocking state [ 1014.367602][T14901] bridge0: port 1(veth0_to_bridge) entered disabled state [ 1014.376077][T14901] veth0_to_bridge: entered allmulticast mode [ 1014.383034][ T5827] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1014.387378][T14901] veth0_to_bridge: entered promiscuous mode [ 1014.558358][ T5827] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1014.590601][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.617654][ T5827] usb 5-1: Product: syz [ 1014.643407][ T5827] usb 5-1: Manufacturer: syz [ 1014.651579][ T5827] usb 5-1: SerialNumber: syz [ 1014.668693][ T5827] usb 5-1: config 0 descriptor?? [ 1015.006134][T14925] netlink: 'syz.3.19632': attribute type 1 has an invalid length. [ 1015.018114][T14925] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.094116][ T5827] usb 5-1: Firmware version (0.0) predates our first public release. [ 1015.104543][ T5827] usb 5-1: Please update to version 0.2 or newer [ 1015.265574][T14937] input: syz0 as /devices/virtual/input/input161 [ 1015.396182][ T5827] usb 5-1: USB disconnect, device number 112 [ 1015.529904][T14948] sch_tbf: burst 0 is lower than device vcan0 mtu (2060) ! [ 1015.703242][ T7063] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1015.863490][ T7063] usb 3-1: Using ep0 maxpacket: 8 [ 1015.875287][ T7063] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1015.893252][ T7063] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1015.916271][ T7063] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1015.936605][ T7063] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1015.947933][ T7063] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1015.961304][ T7063] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1015.976318][ T7063] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.173174][ T5792] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1016.214785][ T7063] usb 3-1: GET_CAPABILITIES returned 0 [ 1016.221823][ T7063] usbtmc 3-1:16.0: can't read capabilities [ 1016.332818][ T5792] usb 5-1: Using ep0 maxpacket: 16 [ 1016.341381][ T5792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.356682][ T5792] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1016.366488][ T5792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.380330][ T5792] usb 5-1: config 0 descriptor?? [ 1016.425944][ T7063] usb 3-1: USB disconnect, device number 111 [ 1016.612764][ T5772] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1016.763198][ T5772] usb 4-1: Using ep0 maxpacket: 16 [ 1016.770082][ T5772] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1016.782245][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1016.796967][ T5772] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1016.806402][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.813938][ T5792] mcp2221 0003:04D8:00DD.008F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1016.818814][ T5772] usb 4-1: Product: syz [ 1016.829271][ T5772] usb 4-1: Manufacturer: syz [ 1016.834424][ T5772] usb 4-1: SerialNumber: syz [ 1016.843614][ T5772] usb 4-1: config 0 descriptor?? [ 1016.855289][ T5772] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1016.864979][ T5772] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1017.237356][ T5827] usb 5-1: USB disconnect, device number 113 [ 1017.464597][ T5772] em28xx 4-1:0.0: chip ID is em2710 [ 1017.528758][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19666'. [ 1017.549416][T15001] trusted_key: encrypted_key: keyword 'upd' not recognized [ 1017.672054][ T5772] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1017.702154][ T5772] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1017.721500][ T5772] em28xx 4-1:0.0: No AC97 audio processor [ 1017.865813][ T5772] usb 4-1: USB disconnect, device number 73 [ 1017.891190][ T5772] em28xx 4-1:0.0: Disconnecting em28xx [ 1018.002581][ T5772] em28xx 4-1:0.0: Freeing device [ 1018.313467][ T5792] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1018.475566][ T5792] usb 5-1: Using ep0 maxpacket: 16 [ 1018.483631][ T5792] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1018.507763][ T5792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1018.546606][ T5792] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1018.594648][ T5792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.607072][ T5792] usb 5-1: Product: syz [ 1018.614914][ T5792] usb 5-1: Manufacturer: syz [ 1018.620037][ T5792] usb 5-1: SerialNumber: syz [ 1018.636953][ T5792] usb 5-1: config 0 descriptor?? [ 1018.660405][ T5792] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1018.694373][ T5792] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1018.958419][T15058] vcan0: tx address claim with dlc 0 [ 1019.269024][ T5792] em28xx 5-1:0.0: chip ID is em2870 [ 1019.518677][ T5827] usb 5-1: USB disconnect, device number 114 [ 1019.537823][ T5827] em28xx 5-1:0.0: Disconnecting em28xx [ 1019.577541][ T5827] em28xx 5-1:0.0: Freeing device [ 1019.819011][T15090] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 1020.213101][ T5827] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1020.398213][ T5827] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 1020.426818][ T5827] usb 4-1: config 0 has no interface number 0 [ 1020.446786][ T5827] usb 4-1: config 0 interface 22 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.466231][ T5827] usb 4-1: config 0 interface 22 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1020.479572][ T5827] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1020.493014][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.516371][ T5827] usb 4-1: config 0 descriptor?? [ 1020.968807][ T5827] elo 0003:04E7:0030.0090: item fetching failed at offset 6/7 [ 1021.001624][ T5827] elo 0003:04E7:0030.0090: parse failed [ 1021.019075][T15123] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19721'. [ 1021.022841][ T5827] elo 0003:04E7:0030.0090: probe with driver elo failed with error -22 [ 1021.257791][ T5827] usb 4-1: USB disconnect, device number 74 [ 1021.376857][T15129] bond4 (unregistering): Released all slaves [ 1021.948698][T15150] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.19732'. [ 1022.941211][T15195] C: renamed from veth1_to_team [ 1022.954841][T15195] netlink: 'syz.2.19753': attribute type 2 has an invalid length. [ 1022.984439][T15195] netlink: 128 bytes leftover after parsing attributes in process `syz.2.19753'. [ 1023.003417][T15195] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1023.513065][ T5792] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1023.623024][ T5827] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1023.653416][ T5772] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1023.661074][ T10] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1023.663122][ T5792] usb 2-1: Using ep0 maxpacket: 32 [ 1023.675911][ T5792] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 1023.687382][ T5792] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1023.700460][ T5792] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1023.709878][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1023.718730][ T5792] usb 2-1: Product: syz [ 1023.723298][ T5792] usb 2-1: Manufacturer: syz [ 1023.727922][ T5792] usb 2-1: SerialNumber: syz [ 1023.735490][ T5792] usb 2-1: config 0 descriptor?? [ 1023.741324][T15208] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1023.784658][ T5827] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1023.794910][ T5827] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1023.805731][ T5827] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1023.815212][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1023.820423][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1023.829909][ T5827] usb 5-1: Product: syz [ 1023.834766][ T5827] usb 5-1: Manufacturer: syz [ 1023.839617][ T5827] usb 5-1: SerialNumber: syz [ 1023.844510][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.856752][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1023.866706][ T5827] usb 5-1: config 0 descriptor?? [ 1023.871875][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.882147][ T5772] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1023.898498][ T5827] usb 5-1: selecting invalid altsetting 0 [ 1023.905178][ T5772] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.10 [ 1023.916574][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.924780][ T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1023.935779][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.945023][ T10] usb 3-1: Product: syz [ 1023.973341][ T10] usb 3-1: Manufacturer: syz [ 1023.978349][ T10] usb 3-1: SerialNumber: syz [ 1023.978853][ T5792] usb 2-1: USB disconnect, device number 2 [ 1023.991164][ T5772] usb 4-1: config 0 descriptor?? [ 1024.000424][ T10] usb 3-1: config 0 descriptor?? [ 1024.024842][ T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1024.073745][ T10] usb 3-1: Detected FT232R [ 1024.101621][ T7063] usb 5-1: USB disconnect, device number 115 [ 1024.216143][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1024.420463][ T5772] dragonrise 0003:0079:0011.0091: unknown main item tag 0x0 [ 1024.431870][ T5772] dragonrise 0003:0079:0011.0091: unknown main item tag 0x0 [ 1024.439684][ T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1024.448183][ T5772] dragonrise 0003:0079:0011.0091: unknown main item tag 0x0 [ 1024.460561][ T5772] dragonrise 0003:0079:0011.0091: unknown main item tag 0x0 [ 1024.470087][ T5772] dragonrise 0003:0079:0011.0091: unknown main item tag 0x0 [ 1024.478520][ T5772] dragonrise 0003:0079:0011.0091: unknown main item tag 0x0 [ 1024.486401][ T5772] dragonrise 0003:0079:0011.0091: unknown main item tag 0x0 [ 1024.493866][ T5772] dragonrise 0003:0079:0011.0091: unknown main item tag 0x0 [ 1024.501321][ T5772] dragonrise 0003:0079:0011.0091: unknown main item tag 0x0 [ 1024.509714][ T5772] dragonrise 0003:0079:0011.0091: unknown main item tag 0x0 [ 1024.526743][ T5772] dragonrise 0003:0079:0011.0091: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 1024.621721][ T5772] usb 4-1: USB disconnect, device number 75 [ 1024.635439][ T5805] usb 3-1: USB disconnect, device number 112 [ 1024.653320][ T5805] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1024.664017][ T5805] ftdi_sio 3-1:0.0: device disconnected [ 1025.673976][ T5772] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1025.818644][T15267] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 1025.835048][ T5772] usb 4-1: Using ep0 maxpacket: 8 [ 1025.848991][ T5772] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1025.867021][ T5772] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1025.902291][ T5772] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1025.905227][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19788'. [ 1025.951923][ T5772] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1025.965907][ T5772] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1025.998178][ T5772] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1026.032730][ T5772] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1026.042267][T15277] xt_hashlimit: size too large, truncated to 1048576 [ 1026.083109][ T5772] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1026.091811][ T5772] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1026.099569][ T5772] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1026.139112][ T5772] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1026.164037][ T5772] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1026.195366][ T5772] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1026.231910][ T5772] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1026.281915][ T5772] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1026.325093][ T5772] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1026.353527][ T5772] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1026.373418][ T5772] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1026.409531][ T5772] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1026.449765][ T5772] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1026.494903][ T5772] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1026.526753][ T5772] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1026.561084][ T5772] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1026.591145][ T5772] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1026.619697][ T5772] usb 4-1: string descriptor 0 read error: -22 [ 1026.640092][ T5772] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1026.665719][ T5772] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.698510][ T5772] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1027.009601][ T5772] usb 4-1: USB disconnect, device number 76 [ 1027.483175][ T5805] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1027.646700][ T5805] usb 3-1: config 4 has an invalid interface number: 33 but max is 0 [ 1027.663852][ T5805] usb 3-1: config 4 has no interface number 0 [ 1027.681288][ T5805] usb 3-1: config 4 interface 33 has no altsetting 0 [ 1027.697992][ T5805] usb 3-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=37.54 [ 1027.710913][ T5805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.719518][ T5805] usb 3-1: Product: syz [ 1027.724812][ T5805] usb 3-1: Manufacturer: syz [ 1027.729774][ T5805] usb 3-1: SerialNumber: syz [ 1027.944723][T15340] [ 1027.947099][T15340] ===================================================== [ 1027.953745][ T5805] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 1027.954031][T15340] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1027.954054][T15340] syzkaller #0 Tainted: G L [ 1027.973694][T15340] ----------------------------------------------------- [ 1027.980622][T15340] syz.3.19818/15340 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1027.988422][T15340] ffff88807482b0a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1027.997045][T15340] [ 1027.997045][T15340] and this task is already holding: [ 1028.004417][T15340] ffff88807715f4b0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1028.013132][T15340] which would create a new lock dependency: [ 1028.019008][T15340] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 1028.026667][T15340] [ 1028.026667][T15340] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1028.036104][T15340] (&client->buffer_lock){..-.}-{3:3} [ 1028.036132][T15340] [ 1028.036132][T15340] ... which became SOFTIRQ-irq-safe at: [ 1028.049168][T15340] lock_acquire+0x106/0x350 [ 1028.053758][T15340] _raw_spin_lock+0x2e/0x40 [ 1028.058344][T15340] evdev_pass_values+0xb9/0xbd0 [ 1028.063289][T15340] evdev_events+0x1e6/0x340 [ 1028.067875][T15340] input_pass_values+0x288/0x890 [ 1028.072896][T15340] input_event_dispose+0x330/0x6b0 [ 1028.078088][T15340] input_event+0x84/0xc0 [ 1028.082406][T15340] xpad360_process_packet+0x641/0xdc0 [ 1028.087858][T15340] xpad_irq_in+0x14e/0x25c0 [ 1028.092438][T15340] __usb_hcd_giveback_urb+0x376/0x540 [ 1028.097891][T15340] dummy_timer+0xbc0/0x4650 [ 1028.102486][T15340] __hrtimer_run_queues+0x3c0/0xa20 [ 1028.107764][T15340] hrtimer_run_softirq+0x17a/0x240 [ 1028.112969][T15340] handle_softirqs+0x22a/0x840 [ 1028.117820][T15340] __irq_exit_rcu+0xca/0x220 [ 1028.122485][T15340] irq_exit_rcu+0x9/0x30 [ 1028.126800][T15340] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1028.132597][T15340] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1028.138654][T15340] filter_irq_stacks+0x49/0xa0 [ 1028.143504][T15340] stack_depot_save_flags+0x33/0x810 [ 1028.148887][T15340] kasan_save_track+0x4f/0x80 [ 1028.153644][T15340] __kasan_kmalloc+0x93/0xb0 [ 1028.158344][T15340] __kmalloc_noprof+0x35c/0x760 [ 1028.163282][T15340] tomoyo_encode+0x28b/0x550 [ 1028.167952][T15340] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1028.173665][T15340] tomoyo_path_perm+0x283/0x560 [ 1028.178595][T15340] tomoyo_path_symlink+0xab/0xf0 [ 1028.183618][T15340] security_path_symlink+0x16f/0x360 [ 1028.188995][T15340] filename_symlinkat+0x134/0x410 [ 1028.194094][T15340] __se_sys_symlinkat+0x4e/0x2b0 [ 1028.199109][T15340] do_syscall_64+0x15f/0xf80 [ 1028.203788][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.209758][T15340] [ 1028.209758][T15340] to a SOFTIRQ-irq-unsafe lock: [ 1028.216759][T15340] (tasklist_lock){.+.+}-{3:3} [ 1028.216784][T15340] [ 1028.216784][T15340] ... which became SOFTIRQ-irq-unsafe at: [ 1028.229383][T15340] ... [ 1028.229391][T15340] lock_acquire+0x106/0x350 [ 1028.236540][T15340] _raw_read_lock+0x36/0x50 [ 1028.241127][T15340] __do_wait+0xde/0x740 [ 1028.245368][T15340] do_wait+0x1e7/0x510 [ 1028.249515][T15340] kernel_wait+0xd6/0x1c0 [ 1028.253924][T15340] call_usermodehelper_exec_work+0xbe/0x230 [ 1028.259892][T15340] process_scheduled_works+0xb5d/0x1860 [ 1028.265572][T15340] worker_thread+0xa53/0xfc0 [ 1028.270239][T15340] kthread+0x388/0x470 [ 1028.274384][T15340] ret_from_fork+0x514/0xb70 [ 1028.279049][T15340] ret_from_fork_asm+0x1a/0x30 [ 1028.283902][T15340] [ 1028.283902][T15340] other info that might help us debug this: [ 1028.283902][T15340] [ 1028.294121][T15340] Chain exists of: [ 1028.294121][T15340] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1028.294121][T15340] [ 1028.307236][T15340] Possible interrupt unsafe locking scenario: [ 1028.307236][T15340] [ 1028.315540][T15340] CPU0 CPU1 [ 1028.320892][T15340] ---- ---- [ 1028.326242][T15340] lock(tasklist_lock); [ 1028.330476][T15340] local_irq_disable(); [ 1028.337215][T15340] lock(&client->buffer_lock); [ 1028.344578][T15340] lock(&new->fa_lock); [ 1028.351329][T15340] [ 1028.354770][T15340] lock(&client->buffer_lock); [ 1028.359783][T15340] [ 1028.359783][T15340] *** DEADLOCK *** [ 1028.359783][T15340] [ 1028.367919][T15340] 4 locks held by syz.3.19818/15340: [ 1028.373189][T15340] #0: ffffffff8eb03db0 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4e1/0x1ea0 [ 1028.382352][T15340] #1: ffff888033a45a68 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4eb/0x1ea0 [ 1028.391870][T15340] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1028.400945][T15340] #3: ffff88807715f4b0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1028.410102][T15340] [ 1028.410102][T15340] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1028.420501][T15340] -> (&client->buffer_lock){..-.}-{3:3} { [ 1028.426336][T15340] IN-SOFTIRQ-W at: [ 1028.430395][T15340] lock_acquire+0x106/0x350 [ 1028.436716][T15340] _raw_spin_lock+0x2e/0x40 [ 1028.443048][T15340] evdev_pass_values+0xb9/0xbd0 [ 1028.449733][T15340] evdev_events+0x1e6/0x340 [ 1028.456062][T15340] input_pass_values+0x288/0x890 [ 1028.462819][T15340] input_event_dispose+0x330/0x6b0 [ 1028.469749][T15340] input_event+0x84/0xc0 [ 1028.475809][T15340] xpad360_process_packet+0x641/0xdc0 [ 1028.483000][T15340] xpad_irq_in+0x14e/0x25c0 [ 1028.489326][T15340] __usb_hcd_giveback_urb+0x376/0x540 [ 1028.496518][T15340] dummy_timer+0xbc0/0x4650 [ 1028.502851][T15340] __hrtimer_run_queues+0x3c0/0xa20 [ 1028.509873][T15340] hrtimer_run_softirq+0x17a/0x240 [ 1028.516802][T15340] handle_softirqs+0x22a/0x840 [ 1028.523380][T15340] __irq_exit_rcu+0xca/0x220 [ 1028.529783][T15340] irq_exit_rcu+0x9/0x30 [ 1028.535837][T15340] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1028.543459][T15340] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1028.551254][T15340] filter_irq_stacks+0x49/0xa0 [ 1028.557845][T15340] stack_depot_save_flags+0x33/0x810 [ 1028.564949][T15340] kasan_save_track+0x4f/0x80 [ 1028.571453][T15340] __kasan_kmalloc+0x93/0xb0 [ 1028.577885][T15340] __kmalloc_noprof+0x35c/0x760 [ 1028.584571][T15340] tomoyo_encode+0x28b/0x550 [ 1028.590989][T15340] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1028.598481][T15340] tomoyo_path_perm+0x283/0x560 [ 1028.605332][T15340] tomoyo_path_symlink+0xab/0xf0 [ 1028.612098][T15340] security_path_symlink+0x16f/0x360 [ 1028.619205][T15340] filename_symlinkat+0x134/0x410 [ 1028.626044][T15340] __se_sys_symlinkat+0x4e/0x2b0 [ 1028.632800][T15340] do_syscall_64+0x15f/0xf80 [ 1028.639215][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.646922][T15340] INITIAL USE at: [ 1028.650889][T15340] lock_acquire+0x106/0x350 [ 1028.657119][T15340] _raw_spin_lock+0x2e/0x40 [ 1028.663344][T15340] evdev_handle_get_val+0x70/0x9f0 [ 1028.670188][T15340] evdev_ioctl_handler+0x127b/0x1fe0 [ 1028.677211][T15340] __se_sys_ioctl+0xfc/0x170 [ 1028.683664][T15340] do_syscall_64+0x15f/0xf80 [ 1028.689995][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.697613][T15340] } [ 1028.700184][T15340] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1028.708417][T15340] -> (&new->fa_lock){....}-{3:3} { [ 1028.713537][T15340] INITIAL USE at: [ 1028.717418][T15340] lock_acquire+0x106/0x350 [ 1028.723474][T15340] _raw_write_lock_irq+0x3d/0x50 [ 1028.729964][T15340] fasync_remove_entry+0xf1/0x1c0 [ 1028.736545][T15340] __fput+0x890/0xa60 [ 1028.742079][T15340] task_work_run+0x1d9/0x270 [ 1028.748221][T15340] exit_to_user_mode_loop+0xed/0x480 [ 1028.755056][T15340] do_syscall_64+0x33e/0xf80 [ 1028.761198][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.768645][T15340] INITIAL READ USE at: [ 1028.772964][T15340] lock_acquire+0x106/0x350 [ 1028.779461][T15340] _raw_read_lock_irqsave+0x48/0x60 [ 1028.786643][T15340] kill_fasync+0x199/0x4d0 [ 1028.793048][T15340] pipe_release+0x19c/0x330 [ 1028.799536][T15340] __fput+0x44f/0xa60 [ 1028.805510][T15340] task_work_run+0x1d9/0x270 [ 1028.812091][T15340] exit_to_user_mode_loop+0xed/0x480 [ 1028.819360][T15340] do_syscall_64+0x33e/0xf80 [ 1028.825940][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.833819][T15340] } [ 1028.836301][T15340] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1028.844981][T15340] ... acquired at: [ 1028.848773][T15340] _raw_read_lock_irqsave+0x48/0x60 [ 1028.854141][T15340] kill_fasync+0x199/0x4d0 [ 1028.858733][T15340] evdev_pass_values+0x627/0xbd0 [ 1028.863840][T15340] evdev_events+0x1e6/0x340 [ 1028.868516][T15340] input_pass_values+0x288/0x890 [ 1028.873616][T15340] input_event_dispose+0x330/0x6b0 [ 1028.878890][T15340] input_inject_event+0x1dc/0x330 [ 1028.884082][T15340] evdev_write+0x325/0x4c0 [ 1028.888666][T15340] vfs_write+0x29a/0xb90 [ 1028.893079][T15340] ksys_write+0x150/0x270 [ 1028.897583][T15340] do_syscall_64+0x15f/0xf80 [ 1028.902337][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.908390][T15340] [ 1028.910698][T15340] [ 1028.910698][T15340] the dependencies between the lock to be acquired [ 1028.910706][T15340] and SOFTIRQ-irq-unsafe lock: [ 1028.924189][T15340] -> (tasklist_lock){.+.+}-{3:3} { [ 1028.929394][T15340] HARDIRQ-ON-R at: [ 1028.933447][T15340] lock_acquire+0x106/0x350 [ 1028.939797][T15340] _raw_read_lock+0x36/0x50 [ 1028.946115][T15340] __do_wait+0xde/0x740 [ 1028.952089][T15340] do_wait+0x1e7/0x510 [ 1028.957972][T15340] kernel_wait+0xd6/0x1c0 [ 1028.964120][T15340] call_usermodehelper_exec_work+0xbe/0x230 [ 1028.971837][T15340] process_scheduled_works+0xb5d/0x1860 [ 1028.979223][T15340] worker_thread+0xa53/0xfc0 [ 1028.985644][T15340] kthread+0x388/0x470 [ 1028.991537][T15340] ret_from_fork+0x514/0xb70 [ 1028.997943][T15340] ret_from_fork_asm+0x1a/0x30 [ 1029.004533][T15340] SOFTIRQ-ON-R at: [ 1029.008593][T15340] lock_acquire+0x106/0x350 [ 1029.014911][T15340] _raw_read_lock+0x36/0x50 [ 1029.021230][T15340] __do_wait+0xde/0x740 [ 1029.027203][T15340] do_wait+0x1e7/0x510 [ 1029.033091][T15340] kernel_wait+0xd6/0x1c0 [ 1029.039237][T15340] call_usermodehelper_exec_work+0xbe/0x230 [ 1029.046956][T15340] process_scheduled_works+0xb5d/0x1860 [ 1029.054314][T15340] worker_thread+0xa53/0xfc0 [ 1029.060714][T15340] kthread+0x388/0x470 [ 1029.066596][T15340] ret_from_fork+0x514/0xb70 [ 1029.073004][T15340] ret_from_fork_asm+0x1a/0x30 [ 1029.079602][T15340] INITIAL USE at: [ 1029.083574][T15340] lock_acquire+0x106/0x350 [ 1029.089803][T15340] _raw_write_lock_irq+0x3d/0x50 [ 1029.096463][T15340] copy_process+0x2b5e/0x4450 [ 1029.102866][T15340] kernel_clone+0x284/0x8f0 [ 1029.109101][T15340] user_mode_thread+0x110/0x180 [ 1029.115695][T15340] rest_init+0x23/0x300 [ 1029.121579][T15340] start_kernel+0x38a/0x3e0 [ 1029.127804][T15340] x86_64_start_reservations+0x24/0x30 [ 1029.134996][T15340] x86_64_start_kernel+0x143/0x1c0 [ 1029.141859][T15340] common_startup_64+0x13e/0x147 [ 1029.148527][T15340] INITIAL READ USE at: [ 1029.152930][T15340] lock_acquire+0x106/0x350 [ 1029.159593][T15340] _raw_read_lock+0x36/0x50 [ 1029.166258][T15340] __do_wait+0xde/0x740 [ 1029.172575][T15340] do_wait+0x1e7/0x510 [ 1029.178811][T15340] kernel_wait+0xd6/0x1c0 [ 1029.185310][T15340] call_usermodehelper_exec_work+0xbe/0x230 [ 1029.193366][T15340] process_scheduled_works+0xb5d/0x1860 [ 1029.201072][T15340] worker_thread+0xa53/0xfc0 [ 1029.207823][T15340] kthread+0x388/0x470 [ 1029.214054][T15340] ret_from_fork+0x514/0xb70 [ 1029.220804][T15340] ret_from_fork_asm+0x1a/0x30 [ 1029.227730][T15340] } [ 1029.230305][T15340] ... key at: [] tasklist_lock+0x18/0x40 [ 1029.238104][T15340] ... acquired at: [ 1029.241977][T15340] _raw_read_lock+0x36/0x50 [ 1029.246644][T15340] send_sigurg+0x12b/0x420 [ 1029.251226][T15340] sk_send_sigurg+0x6c/0x2e0 [ 1029.255985][T15340] queue_oob+0x42c/0x4f0 [ 1029.260391][T15340] unix_stream_sendmsg+0xcb1/0xe80 [ 1029.265668][T15340] ____sys_sendmsg+0x972/0x9f0 [ 1029.270595][T15340] ___sys_sendmsg+0x2a5/0x360 [ 1029.275437][T15340] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1029.280549][T15340] do_syscall_64+0x15f/0xf80 [ 1029.285309][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.291366][T15340] [ 1029.293674][T15340] -> (&f_owner->lock){....}-{3:3} { [ 1029.298890][T15340] INITIAL USE at: [ 1029.302784][T15340] lock_acquire+0x106/0x350 [ 1029.308858][T15340] _raw_write_lock_irq+0x3d/0x50 [ 1029.315368][T15340] __f_setown+0x67/0x370 [ 1029.321193][T15340] do_fcntl+0x171c/0x1a20 [ 1029.327119][T15340] __se_sys_fcntl+0xc8/0x150 [ 1029.333278][T15340] do_syscall_64+0x15f/0xf80 [ 1029.339441][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.346908][T15340] INITIAL READ USE at: [ 1029.351236][T15340] lock_acquire+0x106/0x350 [ 1029.357762][T15340] _raw_read_lock_irqsave+0x48/0x60 [ 1029.364954][T15340] send_sigurg+0x55/0x420 [ 1029.371283][T15340] sk_send_sigurg+0x6c/0x2e0 [ 1029.377880][T15340] queue_oob+0x42c/0x4f0 [ 1029.384111][T15340] unix_stream_sendmsg+0xcb1/0xe80 [ 1029.391215][T15340] ____sys_sendmsg+0x972/0x9f0 [ 1029.397971][T15340] ___sys_sendmsg+0x2a5/0x360 [ 1029.404652][T15340] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1029.411600][T15340] do_syscall_64+0x15f/0xf80 [ 1029.418198][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.426085][T15340] } [ 1029.428574][T15340] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1029.437423][T15340] ... acquired at: [ 1029.441213][T15340] _raw_read_lock_irqsave+0x48/0x60 [ 1029.446576][T15340] send_sigio+0x38/0x370 [ 1029.450997][T15340] kill_fasync+0x24d/0x4d0 [ 1029.455585][T15340] lease_break_callback+0x26/0x30 [ 1029.460776][T15340] __break_lease+0x81f/0x1ea0 [ 1029.465622][T15340] do_dentry_open+0x1010/0x14e0 [ 1029.470634][T15340] vfs_open+0x3b/0x340 [ 1029.474862][T15340] path_openat+0x2e08/0x3860 [ 1029.479619][T15340] do_file_open+0x23e/0x4a0 [ 1029.484289][T15340] do_sys_openat2+0x113/0x200 [ 1029.489131][T15340] __x64_sys_openat+0x138/0x170 [ 1029.494145][T15340] do_syscall_64+0x15f/0xf80 [ 1029.498900][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.504952][T15340] [ 1029.507257][T15340] [ 1029.507257][T15340] stack backtrace: [ 1029.513136][T15340] CPU: 0 UID: 0 PID: 15340 Comm: syz.3.19818 Tainted: G L syzkaller #0 PREEMPT(full) [ 1029.513160][T15340] Tainted: [L]=SOFTLOCKUP [ 1029.513166][T15340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1029.513177][T15340] Call Trace: [ 1029.513186][T15340] [ 1029.513194][T15340] dump_stack_lvl+0xe8/0x150 [ 1029.513219][T15340] __lock_acquire+0x2a94/0x2cf0 [ 1029.513245][T15340] ? send_sigio+0x38/0x370 [ 1029.513267][T15340] lock_acquire+0x106/0x350 [ 1029.513283][T15340] ? send_sigio+0x38/0x370 [ 1029.513304][T15340] ? kill_fasync+0x199/0x4d0 [ 1029.513325][T15340] ? lock_acquire+0x106/0x350 [ 1029.513341][T15340] ? kill_fasync+0x199/0x4d0 [ 1029.513363][T15340] _raw_read_lock_irqsave+0x48/0x60 [ 1029.513380][T15340] ? send_sigio+0x38/0x370 [ 1029.513400][T15340] send_sigio+0x38/0x370 [ 1029.513422][T15340] kill_fasync+0x24d/0x4d0 [ 1029.513443][T15340] ? kill_fasync+0x53/0x4d0 [ 1029.513465][T15340] lease_break_callback+0x26/0x30 [ 1029.513489][T15340] __break_lease+0x81f/0x1ea0 [ 1029.513514][T15340] ? __pfx___break_lease+0x10/0x10 [ 1029.513534][T15340] ? __pfx_apparmor_file_open+0x10/0x10 [ 1029.513551][T15340] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 1029.513575][T15340] do_dentry_open+0x1010/0x14e0 [ 1029.513597][T15340] vfs_open+0x3b/0x340 [ 1029.513612][T15340] ? path_openat+0x2df0/0x3860 [ 1029.513634][T15340] path_openat+0x2e08/0x3860 [ 1029.513660][T15340] ? __pfx_stack_trace_save+0x10/0x10 [ 1029.513686][T15340] ? stack_depot_save_flags+0x33/0x810 [ 1029.513709][T15340] ? __pfx_path_openat+0x10/0x10 [ 1029.513729][T15340] ? __x64_sys_openat+0x138/0x170 [ 1029.513749][T15340] ? __lock_acquire+0x6b5/0x2cf0 [ 1029.513768][T15340] do_file_open+0x23e/0x4a0 [ 1029.513791][T15340] ? __pfx_do_file_open+0x10/0x10 [ 1029.513819][T15340] ? _raw_spin_unlock+0x28/0x50 [ 1029.513832][T15340] ? alloc_fd+0x64b/0x6c0 [ 1029.513853][T15340] do_sys_openat2+0x113/0x200 [ 1029.513870][T15340] ? __se_sys_futex+0x3a8/0x450 [ 1029.513890][T15340] ? __pfx_do_sys_openat2+0x10/0x10 [ 1029.513908][T15340] ? __fget_files+0x2a/0x420 [ 1029.513925][T15340] ? __pfx___se_sys_futex+0x10/0x10 [ 1029.513946][T15340] __x64_sys_openat+0x138/0x170 [ 1029.513965][T15340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.513981][T15340] do_syscall_64+0x15f/0xf80 [ 1029.514005][T15340] ? trace_irq_disable+0x3b/0x140 [ 1029.514029][T15340] ? clear_bhb_loop+0x40/0x90 [ 1029.514046][T15340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.514063][T15340] RIP: 0033:0x7f34c419cdd9 [ 1029.514078][T15340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.514093][T15340] RSP: 002b:00007f34c512a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1029.514111][T15340] RAX: ffffffffffffffda RBX: 00007f34c4415fa0 RCX: 00007f34c419cdd9 [ 1029.514123][T15340] RDX: 000000000010103c RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1029.514135][T15340] RBP: 00007f34c4232d69 R08: 0000000000000000 R09: 0000000000000000 [ 1029.514146][T15340] R10: 0000000000000140 R11: 0000000000000246 R12: 0000000000000000 [ 1029.514157][T15340] R13: 00007f34c4416038 R14: 00007f34c4415fa0 R15: 00007f34c453fa48 [ 1029.514173][T15340] [ 1029.529613][ T5805] gspca_mr97310a: reg write [21] error -22 [ 1029.840738][ T5805] mr97310a 3-1:4.33: probe with driver mr97310a failed with error -22 [ 1029.851592][ T5805] usb 3-1: USB disconnect, device number 113 [ 1029.864400][T27872] udevd[27872]: setting owner of /dev/bus/usb/003/113 to uid=0, gid=0 failed: No such file or directory