last executing test programs: 27m34.490510687s ago: executing program 3 (id=24284): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000040f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e", 0x2a}], 0x2) 27m34.317927902s ago: executing program 3 (id=24288): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200650000000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c0) 27m34.192758337s ago: executing program 3 (id=24293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x147, 0x0, 0x0, {{}, {}, {0x3}}}, 0x30}}, 0x0) 27m33.991296951s ago: executing program 3 (id=24297): creat(&(0x7f0000000c40)='./file0\x00', 0x100) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x91450, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6) 27m33.839895652s ago: executing program 3 (id=24299): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x4) close(r0) 27m33.233174088s ago: executing program 3 (id=24307): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) 27m32.990111513s ago: executing program 32 (id=24307): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) 2m46.693095674s ago: executing program 0 (id=40124): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x1, 0xff, 0x64}, 0x2c) 2m46.264464141s ago: executing program 0 (id=40127): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, 0x0, 0x1) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) 2m45.935869525s ago: executing program 0 (id=40132): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0xc, 0x1, 0x2, 0x1, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x9, 0x0, 0x1, 0x3}) 2m45.774814729s ago: executing program 0 (id=40134): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 2m44.71017083s ago: executing program 0 (id=40140): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x60000009}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 2m44.189503366s ago: executing program 0 (id=40143): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), 0x47, 0x1000000, 0x0}) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 2m43.362102775s ago: executing program 33 (id=40143): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0), 0x47, 0x1000000, 0x0}) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) 5.16165657s ago: executing program 6 (id=40608): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e25, @private=0xa010102}], 0x10) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6d1}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000002c0)='n', 0x1}], 0x1}}], 0x2, 0x20004801) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x74e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0xfffffffc, 0x1, 0x2, 0x2, 0x11, 0xf7, 0xfd}, &(0x7f0000000080)=0x9c) 4.83973852s ago: executing program 6 (id=40611): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in=@local, 0x0, 0x56, 0x4e23, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1ff, 0x800000000000, 0x4, 0xffffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3504, 0x4, 0x0, 0x0, 0xffffffff, 0x6, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 4.700857351s ago: executing program 1 (id=40612): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x5, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x20, 0x2}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0xc4, @lang_id={0x0, 0x3, 0x100a}}}, 0x0) 3.731484084s ago: executing program 6 (id=40618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x2}) 3.372409451s ago: executing program 6 (id=40621): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001200)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080"]}, @subvolid=0x8}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 3.216652557s ago: executing program 6 (id=40623): openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000086666048800000000000109022400010000100809040090010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f0000000040)={0x0, 0x24, 0x23, {0x23, 0x22, "0f041bb29777140dbc4b57ad4b760abd1c4ba734e8671ad4b401061e814ccbcb7a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x420) 3.090157759s ago: executing program 5 (id=40624): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a240100f9ff0201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701040000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x9, &(0x7f0000000540)={0x40, 0x31, 0x1, 'U'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f0000000580)={0x0, 0x17, 0x2, "f52c"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.88560095s ago: executing program 1 (id=40626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014110000600000000308"], 0xfdef) 2.690266975s ago: executing program 1 (id=40628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x5fe, 0x0, 0x1c, {[@window={0xb, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 2.430013043s ago: executing program 1 (id=40630): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) 2.340888361s ago: executing program 1 (id=40633): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.295368474s ago: executing program 5 (id=40636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)={0x1, 0x0, [{0xc0000001, 0x7, 0x2, 0x100, 0xb, 0x9, 0x9}]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000480)) 1.051904666s ago: executing program 5 (id=40638): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000001, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x4}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) 836.634585ms ago: executing program 5 (id=40641): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000580)=0x8) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x1) 801.477737ms ago: executing program 2 (id=40642): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x0, "fa00114001000000000000000000000000000500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1}) 736.9066ms ago: executing program 4 (id=40643): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x2, 0x4, 0x3, 0xff, 0x1, 0x4, 0xb6, 0x4, 0x2, 0x2, 0x65, 0xf1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x8, 0xc, 0xffffffff}, 0x10) 727.169008ms ago: executing program 5 (id=40644): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r0 = inotify_init1(0x80000) inotify_add_watch(r0, &(0x7f0000000040)='./file1\x00', 0x60002b1) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 634.958182ms ago: executing program 4 (id=40645): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 629.779554ms ago: executing program 2 (id=40646): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80)=[{0x10, 0x1, 0xc9}], 0x10}}], 0x1, 0x600c001) 581.939223ms ago: executing program 5 (id=40647): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x8f, 0xf1, 0xc7, 0x10, 0x471, 0x30b, 0xcb80, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xae, 0x5, 0x10, 0x2}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x40045506, &(0x7f00000000c0)=0x18) 470.17543ms ago: executing program 2 (id=40648): socketpair$unix(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ff) 459.756991ms ago: executing program 4 (id=40649): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f1) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0x0, 0x101000, 0x8}) 364.173031ms ago: executing program 2 (id=40650): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffccf}, 0x40000060) 275.986254ms ago: executing program 2 (id=40651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) 231.979356ms ago: executing program 4 (id=40652): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, r0}, 0xc) 145.054772ms ago: executing program 1 (id=40653): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="db"]}]}, 0x2c}], 0x1}, 0x0) socket$kcm(0x2, 0x2, 0x84) 144.500183ms ago: executing program 4 (id=40654): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0100000800000002", 0x8) 82.431311ms ago: executing program 2 (id=40655): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000100)='\x9c\x10\x03@\xc4-\xeb6\xa7V\xbf\xb8h\x98\xd2\x00\x00\x00\x00\xa7m\b\x95\'\xc0D\x81\x1fj\xcd\x8a\n\xd5\xa3qZD|\x18+\x97\xee\x04\xc2+\x89SI=\xad1\xa4!\xaeq\r\xee&\xaa\xdah\xcf0\x04\x8b\x96\xee\x9f7\x8d\xbc\xab\x98\xd5.\xe9q\xb5[\xc2M9\xd6\x16\xff\x04R\xdej6\xcf\xde\x1dU\x9c\xc9\\&[\x82&\xda\xb1\xb2\x04\x00\x00\x82\xddi\xca\x05\xb1Vi>\xd6H', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac2(0x0, 0xc2, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x9, 0x80, 0x7, {0x8, 0xb, 0x1, 0x2, 0x1, 0x8, 0x20, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x844, 0x8, 0x50, 0xd5}, [@feature_unit={0xf, 0x24, 0x6, 0x1, 0x6, [0x9, 0x7, 0x0, 0x2, 0x3]}, @processing_unit={0x11, 0x24, 0x8, 0x4, 0x5, [0x2, 0x1, 0x1, 0x3, 0x2, 0x2]}, @source_unit={0x8, 0x24, 0xa, 0x10, 0x2, 0x2, 0xfd, 0x3}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x400, 0x72, 0x6, 0x0, 0x0, 0x2}, @effect_unit={0x13, 0x24, 0x7, 0x1, 0x0, 0x1, [0x2, 0x0, 0x0, 0x1, 0x3, 0x1]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0xfb6, 0xff, 0x4, 0x3, {0x8, 0x25, 0x1, 0x2, 0xc0657a05cced196e, 0xc0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x40, 0x2, 0x5, {0x8, 0x25, 0x1, 0x1, 0xc, 0x7, 0x69c8}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 24.660321ms ago: executing program 6 (id=40656): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 4 (id=40657): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000006c0)={&(0x7f0000000280)={{@local}, {@local, 0x8007}, 0x400, "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"}, 0x418, 0x823}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000040)={0x0, 0x0, 0xffffffff}) kernel console output (not intermixed with test programs): 539] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 3038.985274][T18539] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 3039.020509][T18539] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 3039.055166][T18539] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 3039.075690][ T4466] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 3039.090700][T25803] usb 3-1: USB disconnect, device number 44 [ 3039.100528][T18539] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 3039.145822][T18539] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 3039.190042][T18539] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 3039.224180][ T6521] udevd[6521]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3039.245771][ T4466] usb 6-1: Using ep0 maxpacket: 32 [ 3039.254390][T18539] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 3039.259761][ T4466] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 3039.275924][T18539] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 3039.296119][ T4466] usb 6-1: config 0 has no interface number 0 [ 3039.315468][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3039.332255][T18539] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 3039.338324][ T4466] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3039.350291][T26446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39333'. [ 3039.360604][T18539] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3039.377107][ T4466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3039.396122][ T4466] usb 6-1: Product: syz [ 3039.407882][ T4466] usb 6-1: Manufacturer: syz [ 3039.417231][T18539] usb 2-1: USB disconnect, device number 52 [ 3039.417718][ T4466] usb 6-1: SerialNumber: syz [ 3039.468768][ T4466] usb 6-1: config 0 descriptor?? [ 3039.502995][ T4466] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3039.724119][ T4466] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 3039.769456][ T4466] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3039.875764][T13531] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3040.055346][T13531] usb 5-1: Using ep0 maxpacket: 16 [ 3040.071503][T13531] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 3040.104782][T13531] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3040.131541][T13531] usb 5-1: config 0 has no interface number 0 [ 3040.153903][T13531] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 3040.182753][T13531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3040.206689][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3040.220832][T13531] usb 5-1: Product: syz [ 3040.239744][T13531] usb 5-1: Manufacturer: syz [ 3040.254659][T13531] usb 5-1: SerialNumber: syz [ 3040.270237][T18539] usb 6-1: USB disconnect, device number 13 [ 3040.287727][T13531] usb 5-1: config 0 descriptor?? [ 3040.315683][T18539] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 3040.330140][T13531] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 3040.349546][T13531] uvcvideo 5-1:0.105: No valid video chain found. [ 3040.380235][T18539] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3040.407630][T18539] quatech2 6-1:0.51: device disconnected [ 3040.532510][T13531] usb 5-1: USB disconnect, device number 49 [ 3040.675549][ T4466] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 3040.841122][ T4466] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 3040.869695][ T4466] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3040.887893][ T4466] usb 2-1: Product: syz [ 3040.903636][ T4466] usb 2-1: Manufacturer: syz [ 3040.918748][ T4466] usb 2-1: SerialNumber: syz [ 3041.272647][ T4466] rtl8150 2-1:1.0: couldn't reset the device [ 3041.289709][ T4466] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 3041.320094][ T4466] usb 2-1: USB disconnect, device number 53 [ 3042.684929][ T4466] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3042.844627][ T4466] usb 5-1: Using ep0 maxpacket: 16 [ 3042.856640][ T4466] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3042.874799][ T4466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3042.904681][ T4466] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3042.915115][ T4466] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3042.934990][ T4466] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3042.949884][ T4466] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3042.964652][ T4466] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3042.977767][ T4466] usb 5-1: Manufacturer: syz [ 3042.996274][ T4466] usb 5-1: config 0 descriptor?? [ 3043.274710][ T7516] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 3043.364570][ T4466] rc_core: IR keymap rc-hauppauge not found [ 3043.384011][ T4466] Registered IR keymap rc-empty [ 3043.403166][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3043.435113][ T7516] usb 3-1: Using ep0 maxpacket: 8 [ 3043.444746][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3043.459804][ T7516] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3043.482318][ T7516] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3043.498701][ T4466] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3043.532744][ T7516] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 168 [ 3043.563521][ T7516] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3043.581053][ T4466] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input339 [ 3043.619445][ T7516] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3043.671130][ T7516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3043.683943][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3043.738587][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3043.785043][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3043.805689][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3043.835023][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3043.867746][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3043.896383][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3043.944749][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3043.960917][ T7516] usb 3-1: GET_CAPABILITIES returned 0 [ 3043.985124][ T7516] usbtmc 3-1:16.0: can't read capabilities [ 3043.996031][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3044.026304][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3044.064941][ T4466] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 3044.100529][ T4466] mceusb 5-1:0.0: Registered with mce emulator interface version 90 [ 3044.130686][ T4466] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3044.169538][ T4466] usb 5-1: USB disconnect, device number 50 [ 3044.217997][T26692] kvm_intel: kvm [26691]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x2000000000003 [ 3044.234911][T13531] usb 3-1: USB disconnect, device number 45 [ 3044.858084][T26740] netlink: 28 bytes leftover after parsing attributes in process `syz.4.39386'. [ 3045.116453][T26751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39391'. [ 3045.145929][T26751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39391'. [ 3045.320306][T18539] hid-generic 0000:0000:0004.0100: unknown main item tag 0x0 [ 3045.350585][T18539] hid-generic 0000:0000:0004.0100: unknown main item tag 0x0 [ 3045.369656][T18539] hid-generic 0000:0000:0004.0100: unknown main item tag 0x0 [ 3045.383676][T18539] hid-generic 0000:0000:0004.0100: unknown main item tag 0x0 [ 3045.400135][T18539] hid-generic 0000:0000:0004.0100: unknown main item tag 0x0 [ 3045.415906][T18539] hid-generic 0000:0000:0004.0100: unknown main item tag 0x0 [ 3045.430511][T18539] hid-generic 0000:0000:0004.0100: unknown main item tag 0x0 [ 3045.448585][T18539] hid-generic 0000:0000:0004.0100: unknown main item tag 0x0 [ 3045.460725][T18539] hid-generic 0000:0000:0004.0100: unknown main item tag 0x0 [ 3045.472445][T18539] hid-generic 0000:0000:0004.0100: unknown main item tag 0x0 [ 3045.528891][T18539] hid-generic 0000:0000:0004.0100: hidraw0: HID v0.03 Device [syz1] on syz0 [ 3045.710191][T26777] fido_id[26777]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 3045.780371][T26791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39400'. [ 3046.370816][T25764] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 3046.559578][T25764] usb 3-1: config 0 has no interfaces? [ 3046.577425][T25764] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 3046.617232][T25764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3046.653026][T25764] usb 3-1: config 0 descriptor?? [ 3046.921576][T25764] usb 3-1: USB disconnect, device number 46 [ 3047.385235][T25764] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 3047.555286][T25764] usb 2-1: Using ep0 maxpacket: 8 [ 3047.578045][T25764] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 3047.620659][T25764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3047.631293][T25764] usb 2-1: Product: syz [ 3047.637167][T25764] usb 2-1: Manufacturer: syz [ 3047.642099][T25764] usb 2-1: SerialNumber: syz [ 3047.676250][T25764] usb 2-1: config 0 descriptor?? [ 3047.687035][T25764] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 3048.327610][T25764] radio-usb-si4713 2-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 3048.357137][T25764] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3048.433508][T25764] usb 2-1: USB disconnect, device number 54 [ 3048.633487][T26972] netlink: 136 bytes leftover after parsing attributes in process `syz.0.39440'. [ 3048.661536][T26972] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 3048.948623][T26988] netlink: 'syz.0.39446': attribute type 5 has an invalid length. [ 3049.385202][ T7516] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 3049.407106][T27014] loop9: detected capacity change from 0 to 524287871 [ 3049.549869][ T7516] usb 6-1: Using ep0 maxpacket: 32 [ 3049.564384][ T7516] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3049.604312][ T7516] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3049.645007][ T7516] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 3049.674374][ T7516] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3049.711593][ T7516] usb 6-1: config 0 descriptor?? [ 3050.090256][T27045] netlink: 128 bytes leftover after parsing attributes in process `syz.1.39464'. [ 3050.206073][ T7516] koneplus 0003:1E7D:2D51.0101: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.5-1/input0 [ 3050.615658][T27068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39470'. [ 3050.642461][T18539] usb 6-1: USB disconnect, device number 14 [ 3050.643776][T27068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39470'. [ 3051.026756][T27094] macvlan2: entered promiscuous mode [ 3051.045536][T27094] bridge0: entered promiscuous mode [ 3051.121119][T27100] loop9: detected capacity change from 0 to 524287936 [ 3051.628409][T27123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39483'. [ 3051.642220][T27124] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 3051.667371][T27123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39483'. [ 3051.680773][T27123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39483'. [ 3052.181084][T27151] netlink: 'syz.1.39491': attribute type 2 has an invalid length. [ 3052.200018][T27151] netlink: 'syz.1.39491': attribute type 2 has an invalid length. [ 3052.224749][ T7515] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 3052.294890][ T7516] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 3052.392672][T27153] bridge0: port 2(bridge_slave_1) entered disabled state [ 3052.400558][T27153] bridge0: port 1(bridge_slave_0) entered disabled state [ 3052.408877][ T7515] usb 6-1: Using ep0 maxpacket: 16 [ 3052.420327][ T7515] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 3052.443318][ T7515] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3052.464918][ T7515] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 3052.492271][ T7516] usb 3-1: config index 0 descriptor too short (expected 1572, got 36) [ 3052.503807][ T7515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.514014][ T7516] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3052.531002][ T7515] usb 6-1: Product: syz [ 3052.540189][ T7515] usb 6-1: Manufacturer: syz [ 3052.550832][ T7515] usb 6-1: SerialNumber: syz [ 3052.559577][ T7516] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 3052.576337][ T7516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3052.591704][ T7515] usb 6-1: config 0 descriptor?? [ 3052.602405][ T7516] usb 3-1: Product: syz [ 3052.608764][ T7516] usb 3-1: Manufacturer: syz [ 3052.614121][ T7516] usb 3-1: SerialNumber: syz [ 3052.626185][ T7515] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 3052.655418][ T7515] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 3052.692222][ T7516] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input342 [ 3052.829855][T27153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3052.882191][T27153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3052.890167][ T4978] bcm5974 3-1:1.0: could not read from device [ 3052.979575][ T7516] usb 3-1: USB disconnect, device number 47 [ 3052.986743][ T4978] bcm5974 3-1:1.0: could not read from device [ 3053.242762][ T7515] em28xx 6-1:0.0: chip ID is em2828X [ 3053.334439][T27154] geneve2: entered promiscuous mode [ 3053.346971][ T6968] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.356553][ T6968] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 52903 - 0 [ 3053.367272][ T6968] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.376898][ T6968] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 52903 - 0 [ 3053.386824][T17021] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.401337][T17021] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 52903 - 0 [ 3053.411164][T17021] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.427537][T17021] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 52903 - 0 [ 3053.472100][ T4466] usb 6-1: USB disconnect, device number 15 [ 3053.493957][ T4466] em28xx 6-1:0.0: Disconnecting em28xx [ 3053.527640][ T4466] em28xx 6-1:0.0: Freeing device [ 3053.592583][T27211] loop3: detected capacity change from 0 to 7 [ 3053.633786][ C1] blk_print_req_error: 11 callbacks suppressed [ 3053.633809][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3053.649311][ C1] buffer_io_error: 10 callbacks suppressed [ 3053.649330][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 3053.664037][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3053.673357][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 3053.684580][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3053.693844][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 3053.705571][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3053.719453][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3053.728714][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 3053.740930][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3053.750220][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 3053.758461][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3053.767732][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 3053.777576][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3053.786830][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 3053.799695][T27211] ldm_validate_partition_table(): Disk read failed. [ 3053.807852][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3053.817124][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 3053.827177][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3053.836475][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 3053.855684][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 3053.864845][T27211] Dev loop3: unable to read RDB block 0 [ 3053.880463][T27211] loop3: unable to read partition table [ 3053.890127][T27211] loop3: partition table beyond EOD, truncated [ 3053.912385][T27211] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 3056.008383][T27305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39529'. [ 3056.025822][T27305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39529'. [ 3056.034681][ T7517] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 3056.218019][ T7517] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3056.247088][ T7517] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3056.279562][ T7517] usb 6-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 3056.300087][ T7517] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3056.320892][ T7517] usb 6-1: config 0 descriptor?? [ 3056.406207][ T4466] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 3056.578410][ T4466] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 3056.595858][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 3056.600466][ T4466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3056.640299][ T4466] usb 3-1: Product: syz [ 3056.646711][ T4466] usb 3-1: Manufacturer: syz [ 3056.651499][ T4466] usb 3-1: SerialNumber: syz [ 3056.664079][ T4466] usb 3-1: config 0 descriptor?? [ 3056.685996][ T4466] hub 3-1:0.0: bad descriptor, ignoring hub [ 3056.697724][ T4466] hub 3-1:0.0: probe with driver hub failed with error -5 [ 3056.900243][ T4466] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 3056.923330][ T4466] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3056.923883][T27351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39541'. [ 3056.939441][ T4466] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 3056.957512][ T4466] usb 3-1: media controller created [ 3056.967198][T27351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39541'. [ 3057.001776][T18539] usb 6-1: USB disconnect, device number 16 [ 3057.004841][ T4466] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3057.171506][ T4466] DVB: Unable to find symbol dib7000p_attach() [ 3057.195990][ T4466] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 3057.344984][ T4466] rc_core: IR keymap rc-dib0700-rc5 not found [ 3057.365255][ T4466] Registered IR keymap rc-empty [ 3057.382266][ T4466] dvb-usb: could not initialize remote control. [ 3057.401666][ T4466] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 3057.445265][ T4466] usb 3-1: USB disconnect, device number 48 [ 3057.577196][ T4466] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 3057.590547][T27393] netlink: 'syz.4.39548': attribute type 2 has an invalid length. [ 3057.641280][T27393] netlink: 'syz.4.39548': attribute type 2 has an invalid length. [ 3058.223418][T27428] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.39556'. [ 3058.759606][T27457] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.39564'. [ 3059.401440][T27480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.39572'. [ 3059.439567][T27480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.39572'. [ 3059.935259][T27503] bond1 (unregistering): Released all slaves [ 3060.073642][T27550] netlink: 136 bytes leftover after parsing attributes in process `syz.2.39580'. [ 3060.084817][T27550] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 3060.174755][ T4466] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 3060.346854][ T4466] usb 6-1: Using ep0 maxpacket: 8 [ 3060.367314][ T4466] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 3060.399437][ T4466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3060.446170][ T4466] usb 6-1: Product: syz [ 3060.473461][ T4466] usb 6-1: Manufacturer: syz [ 3060.505423][ T4466] usb 6-1: SerialNumber: syz [ 3060.544039][ T4466] usb 6-1: config 0 descriptor?? [ 3060.603664][ T4466] gspca_main: se401-2.14.0 probing 047d:5003 [ 3061.007210][ T4466] gspca_se401: Too many frame sizes [ 3061.037257][T27625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39589'. [ 3061.233722][ T7517] usb 6-1: USB disconnect, device number 17 [ 3061.624045][T27664] geneve5: entered promiscuous mode [ 3061.933552][T27685] pim6reg: entered allmulticast mode [ 3061.950244][T27684] pim6reg: left allmulticast mode [ 3062.185586][T27699] loop3: detected capacity change from 0 to 7 [ 3062.193783][ C0] blk_print_req_error: 11 callbacks suppressed [ 3062.193803][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3062.209281][ C0] buffer_io_error: 10 callbacks suppressed [ 3062.209300][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 3062.224326][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3062.233590][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 3062.242145][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3062.251367][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 3062.262917][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3062.272151][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 3062.280995][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3062.303930][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3062.313278][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 3062.322732][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3062.332036][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 3062.350944][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3062.360262][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 3062.371597][T27699] ldm_validate_partition_table(): Disk read failed. [ 3062.391103][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3062.400385][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 3062.408556][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 3062.417828][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 3062.428827][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 3062.445025][T27699] Dev loop3: unable to read RDB block 0 [ 3062.457051][T27699] loop3: unable to read partition table [ 3062.463126][T27699] loop3: partition table beyond EOD, truncated [ 3062.471749][T27699] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 3063.118615][T27744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.39620'. [ 3063.213134][T27744] bond8: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 3063.230009][T27744] bond8 (unregistering): Released all slaves [ 3063.462599][T27821] netlink: 20 bytes leftover after parsing attributes in process `syz.5.39623'. [ 3063.825546][ T4466] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 3064.006291][ T4466] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 3064.028768][ T4466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3064.050375][ T4466] usb 5-1: Product: syz [ 3064.055114][ T4466] usb 5-1: Manufacturer: syz [ 3064.059850][ T4466] usb 5-1: SerialNumber: syz [ 3064.403243][ T4466] rtl8150 5-1:1.0: couldn't reset the device [ 3064.418549][ T4466] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 3064.447521][ T4466] usb 5-1: USB disconnect, device number 51 [ 3065.149186][T27924] bond0: (slave bond_slave_0): Releasing backup interface [ 3065.310364][T27931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39646'. [ 3065.356495][T27931] netlink: 72 bytes leftover after parsing attributes in process `syz.1.39646'. [ 3066.297713][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39667'. [ 3066.763908][T27983] bond0: (slave bridge_slave_0): Enslaving as an active interface with an up link [ 3067.724217][T28021] veth0_to_hsr: left promiscuous mode [ 3067.835132][T18539] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 3067.859273][T13531] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 3067.917643][T28021] sit2: left allmulticast mode [ 3067.923040][T28021] ip6tnl4: left promiscuous mode [ 3067.936915][T28021] ip6tnl4: left allmulticast mode [ 3067.952954][T28021] wireguard0: left allmulticast mode [ 3067.974287][T28021] ip6tnl6: left allmulticast mode [ 3068.005678][T28021] macsec1: left promiscuous mode [ 3068.015569][T28021] macsec1: left allmulticast mode [ 3068.020971][T28021] bridge14: left promiscuous mode [ 3068.026923][T28021] bridge14: left allmulticast mode [ 3068.039921][T18539] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3068.066335][T13531] usb 6-1: Using ep0 maxpacket: 16 [ 3068.072728][T18539] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3068.091154][T13531] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3068.101859][T28021] vlan1: left allmulticast mode [ 3068.110618][T18539] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3068.128046][T13531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3068.146518][T18539] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3068.174608][T13531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 3068.177637][T28031] geneve5: entered promiscuous mode [ 3068.191425][T18539] usb 2-1: SerialNumber: syz [ 3068.209448][T13531] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 3068.242766][ T3302] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3068.246196][T13531] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3068.289438][ T3302] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3068.307818][T13531] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 3068.324158][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 43322 - 0 [ 3068.333495][T13531] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 3068.354214][T13531] usb 6-1: Manufacturer: syz [ 3068.358506][ T3302] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3068.386999][T13531] usb 6-1: config 0 descriptor?? [ 3068.390209][ T3302] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3068.427801][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 43322 - 0 [ 3068.471638][T18539] usb 2-1: 0:2 : does not exist [ 3068.545786][ T3302] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3068.578737][ T3302] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3068.611635][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 43322 - 0 [ 3068.680571][T18539] usb 2-1: USB disconnect, device number 55 [ 3068.767729][ T6521] udevd[6521]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3068.834928][T13531] rc_core: IR keymap rc-hauppauge not found [ 3068.841321][T13531] Registered IR keymap rc-empty [ 3068.859396][T13531] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3068.896111][T13531] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3068.937848][T13531] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 3068.956640][T13531] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input344 [ 3068.980850][T13531] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3069.035321][T13531] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3069.076147][T13531] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3069.125978][T13531] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3069.176171][T13531] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3069.217689][T13531] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3069.267881][T13531] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3069.309507][T13531] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3069.345631][T13531] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3069.374855][T13531] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 3069.404895][T13531] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 3069.422870][T13531] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 3069.464285][T13531] usb 6-1: USB disconnect, device number 18 [ 3069.564982][T28137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39691'. [ 3069.617313][T28137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39691'. [ 3069.674738][T28053] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 3069.839452][T28053] usb 2-1: Using ep0 maxpacket: 8 [ 3069.861087][T28053] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3069.886395][T28053] usb 2-1: config 0 has no interfaces? [ 3069.892970][T28148] bond0: left allmulticast mode [ 3069.906066][T28148] bond0: left promiscuous mode [ 3069.908590][T28053] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 3069.930713][T28053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3069.933388][T28148] bridge0: port 1(bond0) entered disabled state [ 3069.943702][T28053] usb 2-1: Product: syz [ 3069.967851][T28053] usb 2-1: Manufacturer: syz [ 3069.977785][T28053] usb 2-1: SerialNumber: syz [ 3069.998445][T28053] usb 2-1: config 0 descriptor?? [ 3070.149926][T28150] netlink: 56 bytes leftover after parsing attributes in process `syz.4.39695'. [ 3070.309223][T28053] usb 2-1: USB disconnect, device number 56 [ 3070.723758][T28198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39707'. [ 3070.725051][T28197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39705'. [ 3070.737419][T28198] netlink: 72 bytes leftover after parsing attributes in process `syz.4.39707'. [ 3071.348186][ T29] audit: type=1800 audit(1777138360.671:1914): pid=28222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.39714" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 3072.063462][T28250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.39724'. [ 3072.100357][T28250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.39724'. [ 3072.160430][ T5964] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 3072.171222][ T5964] CPU: 1 UID: 0 PID: 5964 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 3072.171258][ T5964] Tainted: [L]=SOFTLOCKUP [ 3072.171266][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3072.171279][ T5964] Workqueue: hci4 hci_rx_work [ 3072.171314][ T5964] Call Trace: [ 3072.171324][ T5964] [ 3072.171334][ T5964] dump_stack_lvl+0xe8/0x150 [ 3072.171362][ T5964] sysfs_create_dir_ns+0x271/0x2a0 [ 3072.171393][ T5964] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 3072.171423][ T5964] ? do_raw_spin_unlock+0xf5/0x210 [ 3072.171461][ T5964] kobject_add_internal+0x62b/0xd00 [ 3072.171499][ T5964] kobject_add+0x163/0x240 [ 3072.171545][ T5964] ? __pfx_kobject_add+0x10/0x10 [ 3072.171574][ T5964] ? _raw_spin_unlock+0x28/0x50 [ 3072.171599][ T5964] ? get_device_parent+0x366/0x3a0 [ 3072.171628][ T5964] device_add+0x408/0xbb0 [ 3072.171658][ T5964] hci_conn_add_sysfs+0xd5/0x210 [ 3072.171687][ T5964] le_conn_complete_evt+0x10e6/0x16b0 [ 3072.171732][ T5964] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 3072.171762][ T5964] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 3072.171788][ T5964] ? __asan_memcpy+0x40/0x70 [ 3072.171819][ T5964] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3072.171844][ T5964] ? skb_pull_data+0xfb/0x200 [ 3072.171881][ T5964] hci_le_conn_complete_evt+0x187/0x470 [ 3072.171922][ T5964] hci_event_packet+0x659/0xef0 [ 3072.171956][ T5964] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 3072.171986][ T5964] ? __pfx_hci_event_packet+0x10/0x10 [ 3072.172019][ T5964] ? kcov_remote_start+0x49a/0x7a0 [ 3072.172051][ T5964] ? hci_send_to_monitor+0xe2/0x590 [ 3072.172077][ T5964] hci_rx_work+0x3ee/0x1040 [ 3072.172113][ T5964] ? process_scheduled_works+0xa70/0x1860 [ 3072.172140][ T5964] process_scheduled_works+0xb5d/0x1860 [ 3072.172198][ T5964] ? __pfx_process_scheduled_works+0x10/0x10 [ 3072.172228][ T5964] ? assign_work+0x3d5/0x5e0 [ 3072.172257][ T5964] worker_thread+0xa53/0xfc0 [ 3072.172312][ T5964] kthread+0x388/0x470 [ 3072.172341][ T5964] ? __pfx_worker_thread+0x10/0x10 [ 3072.172362][ T5964] ? __pfx_kthread+0x10/0x10 [ 3072.172393][ T5964] ret_from_fork+0x514/0xb70 [ 3072.172420][ T5964] ? __pfx_ret_from_fork+0x10/0x10 [ 3072.172444][ T5964] ? __switch_to+0xc79/0x1410 [ 3072.172479][ T5964] ? __pfx_kthread+0x10/0x10 [ 3072.172517][ T5964] ret_from_fork_asm+0x1a/0x30 [ 3072.172568][ T5964] [ 3072.172626][ T5964] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 3072.429449][ T5964] Bluetooth: hci4: failed to register connection device [ 3073.312615][T28295] macvlan0: entered promiscuous mode [ 3073.325325][T28295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.39738'. [ 3073.644293][T28308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39743'. [ 3073.867947][T28319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39746'. [ 3074.384698][T28053] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 3074.485358][T28348] input: syz1 as /devices/virtual/input/input345 [ 3074.559931][T28053] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 3074.587588][T28053] usb 2-1: config 0 has no interface number 0 [ 3074.609148][T28053] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 3074.626385][T28053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3074.645893][T28053] usb 2-1: Product: syz [ 3074.653658][T28053] usb 2-1: Manufacturer: syz [ 3074.668400][T28053] usb 2-1: SerialNumber: syz [ 3074.696861][T28053] usb 2-1: config 0 descriptor?? [ 3074.963665][T28369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.39761'. [ 3074.995390][T28369] netlink: 'syz.5.39761': attribute type 18 has an invalid length. [ 3075.014272][T28369] netlink: 4 bytes leftover after parsing attributes in process `syz.5.39761'. [ 3075.407576][ T29] audit: type=1326 audit(1777138364.731:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28380 comm="syz.4.39764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc501c code=0x7ffc0000 [ 3075.486845][ T29] audit: type=1326 audit(1777138364.761:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28380 comm="syz.4.39764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc501c code=0x7ffc0000 [ 3075.527227][ T29] audit: type=1326 audit(1777138364.761:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28380 comm="syz.4.39764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fc501c code=0x7ffc0000 [ 3075.566785][T28053] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3075.604828][T28053] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 3075.617446][ T29] audit: type=1326 audit(1777138364.761:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28380 comm="syz.4.39764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc501c code=0x7ffc0000 [ 3075.644914][T28053] asix 2-1:0.251: probe with driver asix failed with error -71 [ 3075.688198][T28053] usb 2-1: USB disconnect, device number 57 [ 3075.693008][ T29] audit: type=1326 audit(1777138364.761:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28380 comm="syz.4.39764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc501c code=0x7ffc0000 [ 3075.727868][ T29] audit: type=1326 audit(1777138364.771:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28380 comm="syz.4.39764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fc501c code=0x7ffc0000 [ 3075.755269][ T29] audit: type=1326 audit(1777138364.771:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28380 comm="syz.4.39764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc501c code=0x7ffc0000 [ 3075.816713][ T29] audit: type=1326 audit(1777138364.771:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28380 comm="syz.4.39764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=371 compat=1 ip=0xf7fc501c code=0x7ffc0000 [ 3075.845834][ T29] audit: type=1326 audit(1777138364.771:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28380 comm="syz.4.39764" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc501c code=0x7ffc0000 [ 3076.006744][T28409] netlink: 44 bytes leftover after parsing attributes in process `syz.4.39770'. [ 3076.047684][T28409] netlink: 43 bytes leftover after parsing attributes in process `syz.4.39770'. [ 3076.071834][T28409] netlink: 'syz.4.39770': attribute type 6 has an invalid length. [ 3076.096242][T28409] netlink: 'syz.4.39770': attribute type 5 has an invalid length. [ 3076.113888][T28409] netlink: 43 bytes leftover after parsing attributes in process `syz.4.39770'. [ 3076.576904][T28053] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 3076.699291][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 3076.699313][ T29] audit: type=1804 audit(1777138366.021:1925): pid=28456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.39784" name="/newroot/375/file1" dev="tmpfs" ino=1914 res=1 errno=0 [ 3076.746630][T28053] usb 2-1: Using ep0 maxpacket: 8 [ 3076.763221][T28053] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3076.789127][T28053] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3076.800684][T28053] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3076.804904][T13531] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 3076.812498][T28053] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3076.833084][T28053] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3076.843537][T28053] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3076.977274][T13531] usb 5-1: Using ep0 maxpacket: 16 [ 3076.986860][T13531] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3077.000196][T13531] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 3077.022574][T13531] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3077.058692][T13531] usb 5-1: config 0 descriptor?? [ 3077.071031][T28053] usb 2-1: GET_CAPABILITIES returned 0 [ 3077.085670][T28053] usbtmc 2-1:16.0: can't read capabilities [ 3077.205228][T28476] netlink: 32 bytes leftover after parsing attributes in process `syz.5.39788'. [ 3077.301894][T28053] usb 2-1: USB disconnect, device number 58 [ 3077.517665][T13531] mcp2221 0003:04D8:00DD.0103: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 3077.834672][T28053] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 3077.903833][T28522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39797'. [ 3077.913478][T28522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39797'. [ 3077.975288][ T7515] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 3077.978293][T28034] usb 5-1: USB disconnect, device number 52 [ 3078.005699][T28053] usb 6-1: Using ep0 maxpacket: 32 [ 3078.018977][T28053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 3078.045226][T28053] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 3078.071620][T28053] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3078.102891][T28053] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 3078.123826][T28053] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3078.143766][T28053] usb 6-1: Product: syz [ 3078.151033][ T7515] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 3078.163659][T28053] usb 6-1: Manufacturer: syz [ 3078.173018][ T7515] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3078.182084][T28053] usb 6-1: SerialNumber: syz [ 3078.190728][T28053] usb 6-1: config 0 descriptor?? [ 3078.203573][ T7515] usb 3-1: config 0 descriptor?? [ 3078.222262][ T7515] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 3078.243761][T28053] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input346 [ 3078.268822][ C1] xpad 6-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 3078.296301][T28554] netlink: 32 bytes leftover after parsing attributes in process `syz.1.39801'. [ 3078.558702][T28034] usb 6-1: USB disconnect, device number 19 [ 3078.564851][ C1] xpad 6-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 3078.639007][ T7515] gspca_sunplus: reg_w_riv err -71 [ 3078.646313][ T7515] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 3078.683762][ T7515] usb 3-1: USB disconnect, device number 49 [ 3080.214632][T28034] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 3080.397309][T28034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3080.437628][T28034] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3080.462315][T28034] usb 5-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 3080.481288][T28034] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3080.509290][T28034] usb 5-1: config 0 descriptor?? [ 3080.973386][T28034] hid_parser_main: 84 callbacks suppressed [ 3080.973426][T28034] playstation 0003:054C:0BA0.0104: unknown main item tag 0x0 [ 3081.020525][T28034] playstation 0003:054C:0BA0.0104: unknown main item tag 0x0 [ 3081.035312][T28034] playstation 0003:054C:0BA0.0104: unknown main item tag 0x0 [ 3081.050704][T28034] playstation 0003:054C:0BA0.0104: unknown main item tag 0x0 [ 3081.068438][T28034] playstation 0003:054C:0BA0.0104: unknown main item tag 0x0 [ 3081.086501][T28034] playstation 0003:054C:0BA0.0104: unknown main item tag 0x0 [ 3081.117038][T28034] playstation 0003:054C:0BA0.0104: unknown main item tag 0x0 [ 3081.140192][T28034] playstation 0003:054C:0BA0.0104: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.4-1/input0 [ 3081.241704][T28034] playstation 0003:054C:0BA0.0104: Invalid byte count transferred, expected 16 got 0 [ 3081.266028][T28034] playstation 0003:054C:0BA0.0104: Failed to retrieve DualShock4 pairing info: -22 [ 3081.299802][T28034] playstation 0003:054C:0BA0.0104: Failed to get MAC address from DualShock4 [ 3081.339899][T28034] playstation 0003:054C:0BA0.0104: Failed to create dualshock4. [ 3081.402838][T28034] playstation 0003:054C:0BA0.0104: probe with driver playstation failed with error -22 [ 3081.560221][T28034] usb 5-1: USB disconnect, device number 53 [ 3082.196386][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.202832][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 3083.905726][T28037] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 3084.081368][T28037] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 3084.102967][T28037] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3084.131654][T28037] usb 6-1: config 0 descriptor?? [ 3084.173306][T28037] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 3084.587700][T28037] gspca_sunplus: reg_w_riv err -71 [ 3084.610039][T28037] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 3084.647257][T28037] usb 6-1: USB disconnect, device number 20 [ 3085.311744][T28808] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.39867'. [ 3086.125174][T18539] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 3086.288055][T18539] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3086.313159][T18539] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 3086.334165][T18539] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3086.345167][T18539] usb 5-1: Product: syz [ 3086.353844][T18539] usb 5-1: Manufacturer: syz [ 3086.367989][T18539] usb 5-1: SerialNumber: syz [ 3086.380768][T18539] usb 5-1: config 0 descriptor?? [ 3086.398641][T18539] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 3086.743246][T28882] tipc: Resetting bearer [ 3086.744907][T28885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39896'. [ 3086.783135][T28882] bridge0: port 1(bridge_slave_0) entered disabled state [ 3086.972613][T28882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3087.022160][T18539] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 3087.044152][T18539] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 3087.083989][T18539] usb 5-1: USB disconnect, device number 54 [ 3087.250986][T15439] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3087.295292][T15439] netdevsim netdevsim5 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 3087.312154][T15439] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3087.329493][T15439] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3087.338905][T15439] netdevsim netdevsim5 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 3087.348649][T15439] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3087.358717][T15439] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3087.368043][T15439] netdevsim netdevsim5 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 3087.385970][T15439] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3087.412560][T15439] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 3087.441969][T15439] netdevsim netdevsim5 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 3087.470912][T15439] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3087.504317][T28901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39898'. [ 3087.538172][T28901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39898'. [ 3088.469620][T17021] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 43322 - 0 [ 3088.493396][T17021] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 43322 - 0 [ 3088.522223][T17021] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 43322 - 0 [ 3088.580380][T28954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.39913'. [ 3088.614206][T28954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.39913'. [ 3089.252703][T28984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39922'. [ 3089.288797][T28984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39922'. [ 3090.004751][ T7516] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 3090.089503][T29020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39932'. [ 3090.102042][T29020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.39932'. [ 3090.166744][ T7516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3090.183133][ T7516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3090.194351][ T7516] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3090.211321][ T7516] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3090.220943][ T7516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3090.233534][ T7516] usb 2-1: config 0 descriptor?? [ 3090.499219][T29034] loop8: detected capacity change from 0 to 8 [ 3090.528747][T29034] Dev loop8: unable to read RDB block 8 [ 3090.565736][T29034] loop8: unable to read partition table [ 3090.599180][T29034] loop8: partition table beyond EOD, truncated [ 3090.623743][T29034] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 3090.684922][T29049] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39940'. [ 3090.723054][ T7516] plantronics 0003:047F:FFFF.0105: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 3090.871271][T29066] loop8: detected capacity change from 0 to 8 [ 3090.891708][T29066] Dev loop8: unable to read RDB block 8 [ 3090.908437][T29066] loop8: unable to read partition table [ 3090.932491][T29066] loop8: partition table beyond EOD, truncated [ 3090.954209][T29066] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 3091.009408][T28895] usb 2-1: USB disconnect, device number 59 [ 3091.341360][T29091] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3092.884712][T28895] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 3093.037142][T28895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3093.060174][T28895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3093.087126][T28895] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 3093.112614][T28895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3093.153408][T28895] usb 3-1: config 0 descriptor?? [ 3093.628812][T28895] playstation 0003:054C:0BA0.0106: unknown main item tag 0x0 [ 3093.662533][T28895] playstation 0003:054C:0BA0.0106: unknown main item tag 0x0 [ 3093.690630][T28895] playstation 0003:054C:0BA0.0106: unknown main item tag 0x0 [ 3093.709857][T28895] playstation 0003:054C:0BA0.0106: unknown main item tag 0x0 [ 3093.735441][T28895] playstation 0003:054C:0BA0.0106: unknown main item tag 0x0 [ 3093.746993][T28895] playstation 0003:054C:0BA0.0106: unknown main item tag 0x0 [ 3093.755068][T28895] playstation 0003:054C:0BA0.0106: unknown main item tag 0x0 [ 3093.773814][T28895] playstation 0003:054C:0BA0.0106: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 3093.859353][T28895] playstation 0003:054C:0BA0.0106: Invalid byte count transferred, expected 16 got 0 [ 3093.872374][T28895] playstation 0003:054C:0BA0.0106: Failed to retrieve DualShock4 pairing info: -22 [ 3093.897644][T28895] playstation 0003:054C:0BA0.0106: Failed to get MAC address from DualShock4 [ 3093.921849][T28895] playstation 0003:054C:0BA0.0106: Failed to create dualshock4. [ 3093.956941][T28895] playstation 0003:054C:0BA0.0106: probe with driver playstation failed with error -22 [ 3094.042790][T29245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39975'. [ 3094.151925][T28895] usb 3-1: USB disconnect, device number 50 [ 3094.427071][T29274] netlink: 'syz.5.39980': attribute type 29 has an invalid length. [ 3094.437664][T29274] netlink: 'syz.5.39980': attribute type 29 has an invalid length. [ 3094.448482][T29274] netlink: 592 bytes leftover after parsing attributes in process `syz.5.39980'. [ 3094.525547][T28041] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 3094.546894][T29278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.39982'. [ 3094.601697][T29278] bond4: Invalid ad_actor_system MAC address. [ 3094.608757][T29278] bond4: option ad_actor_system: invalid value (281419142266867) [ 3094.641071][T29278] bond4 (unregistering): Released all slaves [ 3094.690054][T28041] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3094.736793][T28041] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3094.775789][T28041] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3094.790432][T28041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3094.814054][T29266] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3094.861362][T28041] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3095.170581][T29372] trusted_key: syz.5.39987 sent an empty control message without MSG_MORE. [ 3095.174648][T28041] usb 2-1: USB disconnect, device number 60 [ 3095.965666][T28895] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 3096.137343][T28895] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3096.164605][T28895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3096.186512][T28895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3096.201542][T28895] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3096.219538][T28895] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3096.229429][T28895] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3096.240333][T28895] usb 5-1: Manufacturer: syz [ 3096.256228][T28895] usb 5-1: config 0 descriptor?? [ 3096.690067][T28895] appleir 0003:05AC:8243.0107: unknown main item tag 0x0 [ 3096.712518][T28895] appleir 0003:05AC:8243.0107: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 3096.815246][T28041] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 3096.986687][T28041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3096.988367][T28038] usb 5-1: USB disconnect, device number 55 [ 3097.019171][T28041] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3097.032656][T28041] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 3097.044337][T28041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3097.090280][T28041] usb 2-1: config 0 descriptor?? [ 3097.446732][T29509] netlink: 44 bytes leftover after parsing attributes in process `syz.5.40008'. [ 3097.552994][T28041] elan 0003:04F3:0755.0108: unknown main item tag 0x0 [ 3097.593653][T28041] elan 0003:04F3:0755.0108: unknown main item tag 0x0 [ 3097.626843][T28041] elan 0003:04F3:0755.0108: failed to start in urb: -90 [ 3097.662276][T28041] elan 0003:04F3:0755.0108: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 3097.779318][T29524] netlink: 'syz.4.40011': attribute type 2 has an invalid length. [ 3097.802892][T29524] netlink: 40 bytes leftover after parsing attributes in process `syz.4.40011'. [ 3097.858056][T28041] usb 2-1: USB disconnect, device number 61 [ 3097.941165][T29523] fido_id[29523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 3098.635363][T28893] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 3098.805041][T28893] usb 6-1: Using ep0 maxpacket: 16 [ 3098.819297][T28893] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 3098.845625][T28893] usb 6-1: config 0 has no interface number 0 [ 3098.860049][T28893] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3098.880023][T28893] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3098.900484][T28893] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 3098.929261][T28893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3098.957850][T28893] usb 6-1: config 0 descriptor?? [ 3099.005114][T28895] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 3099.159220][T29595] tipc: Enabling of bearer rejected, already enabled [ 3099.167243][T28895] usb 2-1: Using ep0 maxpacket: 32 [ 3099.179398][T29595] tipc: New replicast peer: 100.1.1.0 [ 3099.189906][T28895] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 3099.201525][T28895] usb 2-1: config 0 has no interface number 0 [ 3099.213111][T28895] usb 2-1: config 0 interface 184 has no altsetting 0 [ 3099.233757][T28895] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 3099.255529][T28895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3099.275559][T28895] usb 2-1: Product: syz [ 3099.280404][T28895] usb 2-1: Manufacturer: syz [ 3099.287134][T28895] usb 2-1: SerialNumber: syz [ 3099.304315][T28895] usb 2-1: config 0 descriptor?? [ 3099.594721][T28038] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 3099.597387][T28893] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0109/input/input348 [ 3099.693383][T28893] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0109/input/input349 [ 3099.709502][T28041] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 3099.744029][T28893] uclogic 0003:28BD:0071.0109: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1 [ 3099.760221][T28038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3099.781598][T28038] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 3099.802537][T28038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3099.829481][ T7519] usb 6-1: USB disconnect, device number 21 [ 3099.881559][T28038] usb 5-1: config 0 descriptor?? [ 3099.903169][T28041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3099.927023][T28041] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3099.947386][T28895] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 3099.960770][T28895] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3099.973592][T28041] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 3099.986847][T28041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3100.003317][T28041] usb 3-1: config 0 descriptor?? [ 3100.107296][T28038] usbhid 5-1:0.0: can't add hid device: -71 [ 3100.113479][T28038] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3100.127759][T28038] usb 5-1: USB disconnect, device number 56 [ 3100.199639][T28895] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 3100.211463][T28895] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 3100.221904][T28895] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 3100.233082][T28895] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 3100.248254][T28895] usb 2-1: USB disconnect, device number 62 [ 3100.442922][T28041] playstation 0003:054C:0DF2.010A: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 3100.564732][T28048] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 3100.640022][T28041] playstation 0003:054C:0DF2.010A: Invalid reportID received, expected 9 got 114 [ 3100.651812][T28041] playstation 0003:054C:0DF2.010A: Failed to retrieve DualSense pairing info: -22 [ 3100.662535][T28041] playstation 0003:054C:0DF2.010A: Failed to get MAC address from DualSense [ 3100.672471][T28041] playstation 0003:054C:0DF2.010A: Failed to create dualsense. [ 3100.698387][T28041] playstation 0003:054C:0DF2.010A: probe with driver playstation failed with error -22 [ 3100.725212][T28048] usb 5-1: Using ep0 maxpacket: 32 [ 3100.735509][T28048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3100.763107][T28048] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 3100.777743][T28048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3100.792322][T28048] usb 5-1: config 0 descriptor?? [ 3100.816442][T28048] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3100.841724][T28048] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3100.896466][T28048] usb 3-1: USB disconnect, device number 51 [ 3101.223854][T28048] usb 5-1: USB disconnect, device number 57 [ 3101.243776][T28048] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 3101.649433][T28038] IPVS: starting estimator thread 0... [ 3101.658857][T29719] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3101.755364][T29721] IPVS: using max 26 ests per chain, 62400 per kthread [ 3103.104669][T28048] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 3103.112411][T28041] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 3103.278754][T28048] usb 3-1: Using ep0 maxpacket: 16 [ 3103.291471][T28041] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3103.322301][T28048] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3103.339656][T28041] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3103.350195][T28048] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3103.364200][T28041] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3103.375013][T28048] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3103.386951][T28041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3103.397026][T28048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3103.418205][T29779] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3103.428779][T28048] usb 3-1: config 0 descriptor?? [ 3103.442338][T28041] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 3103.801051][T28041] usb 6-1: USB disconnect, device number 22 [ 3103.887746][T28048] microsoft 0003:045E:07DA.010B: ignoring exceeding usage max [ 3103.921826][T28048] hid_parser_main: 3 callbacks suppressed [ 3103.921854][T28048] microsoft 0003:045E:07DA.010B: unknown main item tag 0x0 [ 3103.941899][T28048] microsoft 0003:045E:07DA.010B: unknown main item tag 0x0 [ 3103.951881][T28048] microsoft 0003:045E:07DA.010B: unknown main item tag 0x0 [ 3103.963367][T28048] microsoft 0003:045E:07DA.010B: unknown main item tag 0x0 [ 3103.971031][T28048] microsoft 0003:045E:07DA.010B: unknown main item tag 0x0 [ 3103.979325][T28048] microsoft 0003:045E:07DA.010B: unknown main item tag 0x0 [ 3103.988062][T28048] microsoft 0003:045E:07DA.010B: unknown main item tag 0x0 [ 3104.005167][T28048] microsoft 0003:045E:07DA.010B: unknown main item tag 0x0 [ 3104.022817][T28048] microsoft 0003:045E:07DA.010B: unknown main item tag 0x0 [ 3104.031171][T28048] microsoft 0003:045E:07DA.010B: unknown main item tag 0x0 [ 3104.049649][T28048] HID 045e:07da: Invalid code 65791 type 1 [ 3104.058951][T28048] HID 045e:07da: Invalid code 768 type 1 [ 3104.065239][T28048] HID 045e:07da: Invalid code 769 type 1 [ 3104.072317][T28048] HID 045e:07da: Invalid code 770 type 1 [ 3104.086765][T28048] HID 045e:07da: Invalid code 771 type 1 [ 3104.094274][T28048] HID 045e:07da: Invalid code 772 type 1 [ 3104.102571][T28048] HID 045e:07da: Invalid code 773 type 1 [ 3104.110047][T28048] HID 045e:07da: Invalid code 774 type 1 [ 3104.116745][T28048] HID 045e:07da: Invalid code 775 type 1 [ 3104.123077][T28048] HID 045e:07da: Invalid code 776 type 1 [ 3104.160721][T28048] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.010B/input/input350 [ 3104.262677][T28048] microsoft 0003:045E:07DA.010B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 3104.643074][T29866] netlink: 4532 bytes leftover after parsing attributes in process `syz.4.40075'. [ 3104.695033][ T7519] usb 3-1: USB disconnect, device number 52 [ 3105.586668][T28041] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 3105.707265][T29942] binder: 29941:29942 ioctl c018620b 80000100 returned -14 [ 3105.755471][T28041] usb 3-1: Using ep0 maxpacket: 8 [ 3105.768286][T28041] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3105.788981][T28041] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3105.804800][T28041] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 3105.817072][T28041] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 3105.828937][T28041] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 3105.838272][T28041] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3105.863814][T28041] hub 3-1:1.0: bad descriptor, ignoring hub [ 3105.885955][T28041] hub 3-1:1.0: probe with driver hub failed with error -5 [ 3105.912826][T28041] cdc_wdm 3-1:1.0: skipping garbage [ 3105.921946][T28041] cdc_wdm 3-1:1.0: skipping garbage [ 3105.937671][T28041] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 3105.961003][T28041] cdc_wdm 3-1:1.0: Unknown control protocol [ 3106.115273][ T29] audit: type=1804 audit(1777138395.431:1926): pid=29959 uid=0 auid=0 ses=2 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.40094" name="/newroot/224/file1" dev="tmpfs" ino=1147 res=1 errno=0 [ 3106.273071][T29965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3106.289089][T29965] 8021q: adding VLAN 0 to HW filter on device team0 [ 3106.301667][T29965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3106.407309][T29965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3106.443505][T29965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3106.485807][T29965] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 3106.512325][T29915] IPVS: You probably need to specify IP address on multicast interface. [ 3106.529728][T29915] IPVS: Error connecting to the multicast addr [ 3106.561389][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 3106.568648][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3106.590428][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 3106.597699][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3106.802554][T29903] usb 3-1: reset high-speed USB device number 53 using dummy_hcd [ 3106.872889][T29983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.40098'. [ 3106.908309][T29983] netlink: 'syz.5.40098': attribute type 30 has an invalid length. [ 3106.972882][T29988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.40098'. [ 3106.988513][T29988] netlink: 'syz.5.40098': attribute type 30 has an invalid length. [ 3107.021975][T15439] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3107.086583][T15439] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3107.110259][T15439] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3107.218343][T29993] Invalid argument reading file caps for ./file0 [ 3107.253313][ T3302] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3107.576886][T30011] netlink: 40 bytes leftover after parsing attributes in process `syz.5.40104'. [ 3107.705267][T28048] usb 3-1: USB disconnect, device number 53 [ 3107.801990][T30011] netlink: 40 bytes leftover after parsing attributes in process `syz.5.40104'. [ 3108.704677][ T7517] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 3108.729804][T28895] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 3108.877626][ T7517] usb 6-1: Using ep0 maxpacket: 32 [ 3108.897753][T28895] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3108.898758][ T7517] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3108.909827][T28895] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3108.957795][T28895] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3108.977091][ T7517] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 3108.982481][T28895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3109.002954][T30094] input: syz0 as /devices/virtual/input/input351 [ 3109.018405][ T7517] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3109.057527][ T7517] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 3109.069641][T30075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3109.090666][ T7517] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3109.094976][T28895] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3109.121757][ T7517] usb 6-1: Product: syz [ 3109.141084][ T7517] usb 6-1: Manufacturer: syz [ 3109.163107][ T7517] usb 6-1: SerialNumber: syz [ 3109.237279][ T7517] usb 6-1: config 0 descriptor?? [ 3109.393851][T30125] loop3: detected capacity change from 0 to 7 [ 3109.418588][T30122] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 3109.429622][T30125] Dev loop3: unable to read RDB block 7 [ 3109.433188][T28041] IPVS: starting estimator thread 0... [ 3109.454659][T30125] loop3: AHDI p3 p4 [ 3109.467430][T30125] loop3: partition table partially beyond EOD, truncated [ 3109.469653][T28038] usb 3-1: USB disconnect, device number 54 [ 3109.484916][T30125] loop3: p3 start 1702000233 is beyond EOD, truncated [ 3109.547230][T30130] IPVS: using max 25 ests per chain, 60000 per kthread [ 3109.698559][ T7517] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 3110.295461][T28041] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 3110.362224][ T7517] usb 6-1: USB disconnect, device number 23 [ 3110.459537][T28041] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 3110.476353][T28041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3110.512609][T28041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3110.532992][T28041] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 3110.560677][T28041] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 3110.572656][T28041] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 3110.586628][T28041] usb 5-1: Manufacturer: syz [ 3110.607530][T28041] usb 5-1: config 0 descriptor?? [ 3110.636754][T30207] sctp: [Deprecated]: syz.2.40135 (pid 30207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 3110.636754][T30207] Use struct sctp_sack_info instead [ 3111.079510][T28041] appleir 0003:05AC:8243.010C: unknown main item tag 0x0 [ 3111.109440][T28041] appleir 0003:05AC:8243.010C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 3111.403873][T28041] usb 5-1: USB disconnect, device number 58 [ 3112.214258][T17021] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3112.669867][T17021] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3112.914685][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 3113.034095][T24627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3113.051625][T24627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3113.073973][T24627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3113.098910][T24627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3113.140612][T24627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3113.231597][T17021] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3113.518508][T30313] binder: 30311:30313 ioctl c018620b 80000100 returned -14 [ 3113.913814][T17021] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3114.046919][T28048] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 3114.224645][T28048] usb 3-1: Using ep0 maxpacket: 8 [ 3114.255751][T28048] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 3114.303098][T28048] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3114.371496][T28048] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3114.412421][T28048] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3114.448331][T28048] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3114.467130][T28048] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3114.477409][T28048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3114.704793][ T7519] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 3114.736314][T28048] usb 3-1: GET_CAPABILITIES returned 0 [ 3114.752172][T28048] usbtmc 3-1:16.0: can't read capabilities [ 3114.886241][ T7519] usb 2-1: Using ep0 maxpacket: 8 [ 3114.899112][ T7519] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3114.932545][ T7519] usb 2-1: config 117 has an invalid interface number: 163 but max is 0 [ 3114.958638][ T7519] usb 2-1: config 117 has no interface number 0 [ 3114.983793][ T7519] usb 2-1: config 117 interface 163 has no altsetting 0 [ 3114.991613][T30330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3115.009501][T30330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3115.049011][ T7519] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 3115.076198][ T7519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3115.081446][T28048] usb 3-1: USB disconnect, device number 55 [ 3115.113671][ T7519] usb 2-1: Product: syz [ 3115.121407][ T7519] usb 2-1: Manufacturer: syz [ 3115.141887][ T7519] usb 2-1: SerialNumber: syz [ 3115.238410][ T5964] Bluetooth: hci0: command tx timeout [ 3115.307994][T30452] netlink: 9 bytes leftover after parsing attributes in process `syz.5.40159'. [ 3115.338004][T17021] bridge_slave_1: left allmulticast mode [ 3115.354854][T17021] bridge_slave_1: left promiscuous mode [ 3115.362383][T17021] bridge0: port 2(bridge_slave_1) entered disabled state [ 3115.393950][T17021] bridge_slave_0: left allmulticast mode [ 3115.413125][T17021] bridge_slave_0: left promiscuous mode [ 3115.421872][T17021] bridge0: port 1(bridge_slave_0) entered disabled state [ 3115.433459][T30456] netlink: 5 bytes leftover after parsing attributes in process `syz.5.40159'. [ 3116.187693][T17021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3116.201302][T17021] bond0 (unregistering): Released all slaves [ 3116.251155][ T7519] usb 2-1: USB disconnect, device number 63 [ 3116.268803][ T7519] f81534a_ctrl 2-1:117.163: failed to enable ports: -19 [ 3116.271086][T30456] 0{X: renamed from gretap0 [ 3116.326425][T30456] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 3116.393767][T30471] syzkaller1: entered promiscuous mode [ 3116.407137][T30471] syzkaller1: entered allmulticast mode [ 3116.508262][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 3116.627048][T30301] bridge0: port 1(bridge_slave_0) entered blocking state [ 3116.652164][T30301] bridge0: port 1(bridge_slave_0) entered disabled state [ 3116.665711][T30301] bridge_slave_0: entered allmulticast mode [ 3116.684049][T30301] bridge_slave_0: entered promiscuous mode [ 3116.694071][T30301] bridge0: port 2(bridge_slave_1) entered blocking state [ 3116.701863][T30301] bridge0: port 2(bridge_slave_1) entered disabled state [ 3116.710137][T30301] bridge_slave_1: entered allmulticast mode [ 3116.719741][T30301] bridge_slave_1: entered promiscuous mode [ 3117.070954][T30301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3117.150107][T30301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3117.315685][ T5964] Bluetooth: hci0: command tx timeout [ 3117.628267][T30301] team0: Port device team_slave_0 added [ 3117.827967][T30301] team0: Port device team_slave_1 added [ 3118.006966][T28041] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3118.081597][T30301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3118.097031][T30301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3118.127916][T28895] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3118.217082][T30301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3118.351221][T17021] hsr_slave_0: left promiscuous mode [ 3118.402725][T17021] hsr_slave_1: left promiscuous mode [ 3118.433291][T17021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3118.489298][T17021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3118.506288][T17021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3118.522786][T17021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3118.546847][T30645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.40180'. [ 3118.602254][T17021] veth1_macvtap: left promiscuous mode [ 3118.609508][T17021] veth0_macvtap: left promiscuous mode [ 3118.627463][T17021] veth1_vlan: left promiscuous mode [ 3118.636679][T17021] veth0_vlan: left promiscuous mode [ 3118.931488][T30661] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.40185'. [ 3119.084647][ T7519] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3119.258011][ T7519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3119.288538][ T7519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3119.319609][ T7519] usb 5-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 3119.347568][ T7519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3119.391699][ T7519] usb 5-1: config 0 descriptor?? [ 3119.404978][ T5964] Bluetooth: hci0: command tx timeout [ 3119.785815][T17021] team0 (unregistering): Port device team_slave_1 removed [ 3119.813628][T17021] team0 (unregistering): Port device team_slave_0 removed [ 3119.831063][ T7519] hid (null): usage index exceeded [ 3119.887256][ T7519] hid-generic 0003:0B05:1AFE.010D: unknown main item tag 0x0 [ 3119.903899][ T7519] hid-generic 0003:0B05:1AFE.010D: unknown main item tag 0x0 [ 3119.923087][ T7519] hid-generic 0003:0B05:1AFE.010D: unknown main item tag 0x0 [ 3119.941807][ T7519] hid-generic 0003:0B05:1AFE.010D: unknown main item tag 0x0 [ 3119.961397][ T7519] hid-generic 0003:0B05:1AFE.010D: unknown main item tag 0x0 [ 3119.985000][ T7519] hid-generic 0003:0B05:1AFE.010D: unknown main item tag 0x0 [ 3120.004796][ T7519] hid-generic 0003:0B05:1AFE.010D: unknown main item tag 0x0 [ 3120.028628][ T7519] hid-generic 0003:0B05:1AFE.010D: unknown main item tag 0x0 [ 3120.040062][ T7519] hid-generic 0003:0B05:1AFE.010D: unknown main item tag 0x0 [ 3120.063756][ T7519] hid-generic 0003:0B05:1AFE.010D: unknown main item tag 0x0 [ 3120.083554][ T7519] hid-generic 0003:0B05:1AFE.010D: ignoring exceeding usage max [ 3120.105973][ T7519] hid-generic 0003:0B05:1AFE.010D: ignoring exceeding usage max [ 3120.113683][ T7519] hid-generic 0003:0B05:1AFE.010D: usage index exceeded [ 3120.124048][T30677] netlink: 'syz.1.40189': attribute type 10 has an invalid length. [ 3120.136938][ T7519] hid-generic 0003:0B05:1AFE.010D: item 0 0 2 2 parsing failed [ 3120.147051][ T7519] hid-generic 0003:0B05:1AFE.010D: probe with driver hid-generic failed with error -22 [ 3120.180507][ T7519] usb 5-1: USB disconnect, device number 59 [ 3120.364139][T30301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3120.372103][T30301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 3120.399949][T30301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3120.426674][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 3120.481627][T30677] team0: Port device veth0 added [ 3120.543991][T30686] tipc: Resetting bearer [ 3120.586481][T30686] bridge0: left promiscuous mode [ 3120.602601][T30686] 8021q: adding VLAN 0 to HW filter on device  [ 3120.638395][T30686] 8021q: adding VLAN 0 to HW filter on device team0 [ 3120.703313][T30686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3120.806637][T30686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3120.867531][T30686] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 3120.906992][T30703] binder: 30702:30703 ioctl c0306201 80000480 returned -14 [ 3120.991288][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 3120.998552][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3121.046303][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 3121.053584][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3121.232226][T28041] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3121.266825][T30301] hsr_slave_0: entered promiscuous mode [ 3121.283389][T30301] hsr_slave_1: entered promiscuous mode [ 3121.302233][T30301] debugfs: 'hsr0' already exists in 'hsr' [ 3121.308424][T30301] Cannot create hsr debugfs directory [ 3121.357474][T28048] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 3121.445176][ T7517] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 3121.474827][ T5964] Bluetooth: hci0: command tx timeout [ 3121.557632][T28048] usb 3-1: Using ep0 maxpacket: 32 [ 3121.582170][T28048] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 3121.599497][T28048] usb 3-1: config 0 has no interface number 0 [ 3121.604797][ T7517] usb 6-1: Using ep0 maxpacket: 8 [ 3121.619986][T28048] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 3121.630491][ T7517] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 3121.633800][T28048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3121.653174][ T7517] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3121.711993][T28048] usb 3-1: Product: syz [ 3121.728516][T28048] usb 3-1: Manufacturer: syz [ 3121.733739][ T7517] usb 6-1: Product: syz [ 3121.743529][T28048] usb 3-1: SerialNumber: syz [ 3121.750021][T28048] usb 3-1: config 0 descriptor?? [ 3121.756677][T28041] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3121.774314][ T7517] usb 6-1: Manufacturer: syz [ 3121.806583][T28048] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 3121.809862][ T7517] usb 6-1: SerialNumber: syz [ 3121.863580][ T57] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3121.871756][ T7517] usb 6-1: config 0 descriptor?? [ 3122.026385][T28048] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 3122.069378][T28048] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 3122.126168][ T7517] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 3122.209925][T17021] IPVS: stop unused estimator thread 0... [ 3122.547749][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 3122.548207][ T7519] usb 3-1: USB disconnect, device number 56 [ 3122.607665][ T7519] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 3122.672869][ T7519] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 3122.733697][ T7519] quatech2 3-1:0.51: device disconnected [ 3122.937912][ T7517] usb write operation failed. (-71) [ 3122.973762][ T7517] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 3123.024169][ T7517] dvbdev: DVB: registering new adapter (Terratec H7) [ 3123.041130][ T7517] usb 6-1: media controller created [ 3123.055506][ T7517] usb read operation failed. (-71) [ 3123.072068][ T7517] usb write operation failed. (-71) [ 3123.122563][ T7517] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 3123.153230][ T2101] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3123.180723][ T7517] usb 6-1: USB disconnect, device number 24 [ 3123.188372][ T2101] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3123.376155][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 3123.467848][T28041] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3123.755164][T28041] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 3123.910788][T30301] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3123.929421][T30301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 3123.943223][T28041] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3123.966079][T30301] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3123.972948][T28041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3123.992250][T28041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3124.008868][T30301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 3124.027619][T28041] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3124.032976][T30301] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3124.052940][T28041] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 3124.083543][T28041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3124.106298][T30301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 3124.118265][T28041] usb 5-1: config 0 descriptor?? [ 3124.137475][T30301] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3124.200008][T30301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 3124.377792][T28041] usbhid 5-1:0.0: can't add hid device: -71 [ 3124.402184][T28041] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3124.435086][T28041] usb 5-1: USB disconnect, device number 60 [ 3124.529043][T30301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3124.606848][T30301] 8021q: adding VLAN 0 to HW filter on device team0 [ 3124.655780][ T2101] bridge0: port 1(bridge_slave_0) entered blocking state [ 3124.663088][ T2101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3124.706209][ T2101] bridge0: port 2(bridge_slave_1) entered blocking state [ 3124.713451][ T2101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3124.883442][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 3124.914756][T28041] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 3125.027575][T30301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3125.076325][T28041] usb 5-1: Using ep0 maxpacket: 32 [ 3125.089915][T28041] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3125.124923][T28041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3125.157444][T28041] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3125.181485][T30301] veth0_vlan: entered promiscuous mode [ 3125.188273][T28041] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 3125.231628][T28041] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 3125.239864][T30301] veth1_vlan: entered promiscuous mode [ 3125.262590][T28041] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3125.306045][T28041] usb 5-1: config 0 descriptor?? [ 3125.382554][T30301] veth0_macvtap: entered promiscuous mode [ 3125.442781][T30301] veth1_macvtap: entered promiscuous mode [ 3125.523400][T30301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3125.559555][T30301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3125.595358][T15443] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3125.610148][T15443] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3125.640137][T15443] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3125.666692][T15443] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3125.743621][T28041] betop 0003:20BC:5500.010E: unknown global tag 0xc [ 3125.789584][T28041] betop 0003:20BC:5500.010E: item 0 2 1 12 parsing failed [ 3125.821288][T28041] betop 0003:20BC:5500.010E: parse failed [ 3125.846207][T28041] betop 0003:20BC:5500.010E: probe with driver betop failed with error -22 [ 3126.044937][T28038] usb 5-1: USB disconnect, device number 61 [ 3126.119105][T17021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3126.149687][T17021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3126.231308][T17021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3126.241719][T17021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3127.154804][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3128.063335][T31081] netlink: 4 bytes leftover after parsing attributes in process `syz.6.40237'. [ 3128.324091][T31089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.40240'. [ 3130.076422][T31174] netlink: 'syz.4.40263': attribute type 3 has an invalid length. [ 3130.215732][T28048] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 3130.271896][T31177] input: syz1 as /devices/virtual/input/input352 [ 3130.357391][T24627] Bluetooth: hci4: command 0x0406 tx timeout [ 3130.425144][T28048] usb 6-1: Using ep0 maxpacket: 32 [ 3130.439436][T28048] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 3130.460427][T28048] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 3130.474047][T28048] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 3130.501574][T28048] usb 6-1: config 1 has no interface number 0 [ 3130.504678][T28038] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 3130.514422][T28048] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3130.540554][T28048] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 3130.555424][T28048] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 3130.566876][T28048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3130.592129][T28048] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 3130.669504][T28038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3130.695070][T28038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3130.708714][T28038] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 3130.719723][T28038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3130.738733][T31209] input: syz0 as /devices/virtual/input/input353 [ 3130.750150][T28038] usb 5-1: config 0 descriptor?? [ 3130.764318][T31209] input: failed to attach handler leds to device input353, error: -6 [ 3130.830804][T28048] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 3131.469863][T31232] Invalid argument reading file caps for ./file0 [ 3131.488580][ T4466] usb 6-1: USB disconnect, device number 25 [ 3131.497725][ T4466] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 3131.586927][T28038] hid-led 0003:27B8:01ED.010F: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 3131.621932][T28038] hid-led 0003:27B8:01ED.010F: ThingM blink(1) v1 initialized [ 3131.808156][T28038] usb 5-1: USB disconnect, device number 62 [ 3131.885026][ T5964] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 3131.899912][ T5964] Bluetooth: hci4: Injecting HCI hardware error event [ 3131.909290][T24627] Bluetooth: hci4: hardware error 0x00 [ 3131.945121][T28048] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 3132.056277][ T29] audit: type=1326 audit(1777138421.381:1927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.1.40280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3132.106775][ T29] audit: type=1326 audit(1777138421.381:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.1.40280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3132.129501][T28048] usb 3-1: Using ep0 maxpacket: 8 [ 3132.138889][T28048] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 3132.149905][ T29] audit: type=1326 audit(1777138421.381:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.1.40280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e616b code=0x7ffc0000 [ 3132.173311][T28048] usb 3-1: config 179 has no interface number 0 [ 3132.181284][T28048] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3132.193007][T28048] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 3132.205823][ T29] audit: type=1326 audit(1777138421.381:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.1.40280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e616b code=0x7ffc0000 [ 3132.228410][T28048] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3132.241331][T28048] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 3132.252912][ T29] audit: type=1326 audit(1777138421.381:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.1.40280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3132.256558][T31281] syzkaller1: entered promiscuous mode [ 3132.276657][T28048] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3132.296809][T31281] syzkaller1: entered allmulticast mode [ 3132.302486][ T29] audit: type=1326 audit(1777138421.381:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.1.40280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=291 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3132.327653][T28048] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3132.339961][T28048] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3132.352297][ T29] audit: type=1326 audit(1777138421.381:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.1.40280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3132.384945][T31253] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3132.392376][ T29] audit: type=1326 audit(1777138421.381:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.1.40280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3132.422245][ T29] audit: type=1326 audit(1777138421.381:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.1.40280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3132.547889][ T29] audit: type=1326 audit(1777138421.381:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31276 comm="syz.1.40280" exe="/root/syz-executor" sig=0 arch=40000003 syscall=293 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3133.061051][T31313] loop5: detected capacity change from 0 to 7 [ 3133.063433][T28048] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input354 [ 3133.087827][T31315] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 3133.097811][T31313] Dev loop5: unable to read RDB block 7 [ 3133.111691][T31313] loop5: unable to read partition table [ 3133.141048][T31313] loop5: partition table beyond EOD, truncated [ 3133.165320][T31313] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 3133.222223][T31320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40291'. [ 3133.269285][T28041] usb 3-1: USB disconnect, device number 57 [ 3133.269354][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 3133.283629][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 3133.723835][T31352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40299'. [ 3133.741924][T31352] bond0: Unable to set down delay as MII monitoring is disabled [ 3133.963135][T24627] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 3134.064094][T31364] bridge0: port 2(bridge_slave_1) entered disabled state [ 3134.071877][T31364] bridge0: port 1(bridge_slave_0) entered disabled state [ 3135.315022][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3135.904873][T28048] psmouse serio12: Failed to reset mouse on : -5 [ 3136.694223][T31456] netlink: 'syz.4.40327': attribute type 10 has an invalid length. [ 3139.764810][T28048] misc userio: Buffer overflowed, userio client isn't keeping up [ 3140.818902][T28048] input: PS/2 Generic Mouse as /devices/serio12/input/input355 [ 3141.045606][T28048] psmouse serio12: Failed to enable mouse on [ 3143.635791][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.642171][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 3151.315009][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3182.035382][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3205.076936][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 3205.083338][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 3237.874823][T24627] Bluetooth: hci0: command 0x0406 tx timeout [ 3240.914809][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3246.196330][T31542] dlm: non-version read from control device 0 [ 3246.445306][T28041] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 3246.594841][T28041] usb 2-1: Using ep0 maxpacket: 32 [ 3246.601591][T28041] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 3246.612039][T28041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3246.623310][T28041] usb 2-1: config 0 descriptor?? [ 3246.838945][T28041] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 3246.851367][T28041] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3246.861754][T28041] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 3246.869966][T28041] usb 2-1: media controller created [ 3246.883389][T28041] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3247.655376][T28041] az6027: usb out operation failed. (-71) [ 3247.661138][T28041] stb0899_attach: Driver disabled by Kconfig [ 3247.667948][T28041] az6027: no front-end attached [ 3247.667948][T28041] [ 3247.675478][T28041] az6027: usb out operation failed. (-71) [ 3247.681247][T28041] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 3247.691221][T28041] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input356 [ 3247.712783][T28041] dvb-usb: schedule remote query interval to 400 msecs. [ 3247.721281][T28041] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 3247.738692][T28041] usb 2-1: USB disconnect, device number 64 [ 3247.810126][T28041] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 3249.243754][T31622] pimreg: left allmulticast mode [ 3249.807389][T28048] hid_parser_main: 20 callbacks suppressed [ 3249.807411][T28048] hid-generic 0000:0000:0000.0110: unknown main item tag 0x0 [ 3249.876792][T28048] hid-generic 0000:0000:0000.0110: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3250.074606][ T7519] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 3250.235965][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880581c1800: rx timeout, send abort [ 3250.249221][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880581c1800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 3250.297915][ T7519] usb 5-1: unable to get BOS descriptor or descriptor too short [ 3250.308630][ T7519] usb 5-1: config 0 has no interfaces? [ 3250.317909][ T7519] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3250.337911][ T7519] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3250.358851][ T7519] usb 5-1: Product: syz [ 3250.367892][ T7519] usb 5-1: Manufacturer: syz [ 3250.378828][ T7519] usb 5-1: SerialNumber: syz [ 3250.409235][ T7519] usb 5-1: config 0 descriptor?? [ 3250.680311][T31645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3250.699245][T31645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3250.742154][T31645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3250.757472][T31645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3250.770812][T28041] usb 5-1: USB disconnect, device number 63 [ 3251.235062][T28895] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 3251.288536][T28038] hid-generic 0000:0000:0000.0111: unknown main item tag 0x0 [ 3251.315709][T28038] hid-generic 0000:0000:0000.0111: hidraw0: HID v0.00 Device [syz1] on syz0 [ 3251.384657][T28895] usb 5-1: Using ep0 maxpacket: 32 [ 3251.399366][T28895] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 3251.417488][T28895] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 3251.432439][T28895] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 3251.453151][T28895] usb 5-1: config 0 has no interface number 0 [ 3251.462724][T28895] usb 5-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 2304, setting to 1024 [ 3251.476178][T28895] usb 5-1: config 0 interface 6 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3251.492688][T28895] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 3251.504351][T28895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3251.519244][T28895] usb 5-1: Product: syz [ 3251.528980][T28895] usb 5-1: Manufacturer: syz [ 3251.533716][T28895] usb 5-1: SerialNumber: syz [ 3251.546224][T28895] usb 5-1: config 0 descriptor?? [ 3251.562715][T28895] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 3251.573992][T28041] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 3251.619169][T28895] vmk80xx 5-1:0.1: driver 'vmk80xx' failed to auto-configure device. [ 3251.743632][T28041] usb 2-1: config 0 has no interfaces? [ 3251.763334][T28041] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3251.784272][T28041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3251.817026][T28041] usb 2-1: SerialNumber: syz [ 3251.843476][T28041] usb 2-1: config 0 descriptor?? [ 3251.861559][T28895] usb 5-1: USB disconnect, device number 64 [ 3251.905774][ T7519] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 3252.076524][ T7519] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3252.093730][ T7519] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3252.105635][ T7519] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3252.117821][ T7519] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3252.127804][T28041] usb 2-1: USB disconnect, device number 65 [ 3252.151360][ T7519] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3252.171499][ T7519] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3252.195450][ T7519] usb 6-1: Product: syz [ 3252.202907][ T7519] usb 6-1: Manufacturer: syz [ 3252.233103][ T7519] cdc_wdm 6-1:1.0: skipping garbage [ 3252.252824][ T7519] cdc_wdm 6-1:1.0: skipping garbage [ 3252.272362][ T7519] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 3252.290218][ T7519] cdc_wdm 6-1:1.0: Unknown control protocol [ 3252.579394][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3252.586078][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3252.592686][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3252.599322][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3252.606826][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3252.613469][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3252.620098][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3252.626740][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3252.634604][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3252.641246][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3252.651911][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3252.658554][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3252.666357][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3252.672997][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3252.679671][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3252.686303][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3252.693304][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3252.699931][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3252.706580][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 3252.713221][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 3252.719870][ T7519] usb 6-1: USB disconnect, device number 26 [ 3252.725958][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 3253.004538][ T4466] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 3253.165217][ T4466] usb 3-1: Using ep0 maxpacket: 32 [ 3253.187535][ T4466] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 3253.201630][ T4466] usb 3-1: config 0 has no interface number 0 [ 3253.210825][ T4466] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3253.223464][ T4466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3253.231750][ T4466] usb 3-1: Product: syz [ 3253.236213][ T4466] usb 3-1: Manufacturer: syz [ 3253.240929][ T4466] usb 3-1: SerialNumber: syz [ 3253.270268][ T4466] usb 3-1: config 0 descriptor?? [ 3253.619028][T31873] syzkaller1: entered promiscuous mode [ 3253.627299][T31873] syzkaller1: entered allmulticast mode [ 3253.645045][ T7516] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 3253.691350][ T4466] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3253.702928][ T4466] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3253.804850][ T7516] usb 2-1: Using ep0 maxpacket: 8 [ 3253.816396][ T7516] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 3253.832172][ T7516] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3253.842667][ T7516] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3253.853651][ T7516] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3253.864136][ T7516] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3253.879122][ T7516] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 3253.891047][ T7516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3254.123254][ T4466] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 3254.162585][ T7516] usb 2-1: usb_control_msg returned -32 [ 3254.170760][ T7516] usbtmc 2-1:16.0: can't read capabilities [ 3254.182037][ T4466] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 3254.232743][ T4466] usb 3-1: USB disconnect, device number 58 [ 3254.822013][T28041] usb 2-1: USB disconnect, device number 66 [ 3254.965538][T31949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40397'. [ 3255.315096][ T7516] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 3255.412611][T31980] Invalid logical block size (-2147479552) [ 3255.487595][ T7516] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3255.510280][ T7516] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3255.544688][ T7516] usb 3-1: config 0 descriptor?? [ 3255.563467][ T7516] cp210x 3-1:0.0: cp210x converter detected [ 3255.605752][T31988] syzkaller1: entered promiscuous mode [ 3255.611640][T31988] syzkaller1: entered allmulticast mode [ 3255.994321][ T7516] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 3256.040121][ T7516] usb 3-1: cp210x converter now attached to ttyUSB0 [ 3256.250553][ T7519] usb 3-1: USB disconnect, device number 59 [ 3256.277360][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 3256.282281][ T7519] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 3256.316429][ T7519] cp210x 3-1:0.0: device disconnected [ 3256.634980][T32042] pim6reg: entered allmulticast mode [ 3256.648511][T32042] team0: entered allmulticast mode [ 3256.653892][T32042] team_slave_0: entered allmulticast mode [ 3256.660142][T32042] team_slave_1: entered allmulticast mode [ 3256.669085][T32042] team0: left allmulticast mode [ 3256.674074][T32042] team_slave_0: left allmulticast mode [ 3256.680490][T32042] team_slave_1: left allmulticast mode [ 3256.686527][T32042] pim6reg: left allmulticast mode [ 3257.413208][T32089] vivid-000: disconnect [ 3257.419979][T32089] vivid-000: reconnect [ 3257.984830][ T7519] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 3258.148010][ T7519] usb 3-1: config 0 has no interfaces? [ 3258.153833][ T7519] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 3258.165700][ T7519] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3258.181225][ T7519] usb 3-1: config 0 descriptor?? [ 3258.449482][T32098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40435'. [ 3258.511904][T32153] binder_alloc: binder_alloc_mmap_handler: 32152 80ffe000-81000000 already mapped failed -16 [ 3258.549264][T28895] usb 3-1: USB disconnect, device number 60 [ 3259.598980][T32186] binder: 32185:32186 ioctl c0306201 80000300 returned -22 [ 3260.664586][T28895] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 3260.842196][T28895] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 3260.857405][T28895] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 3260.870618][T28895] usb 2-1: config 1 interface 0 has no altsetting 0 [ 3260.882679][T28895] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 3260.905147][T28895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3260.915518][T28895] usb 2-1: Product: syz [ 3260.920182][T28895] usb 2-1: Manufacturer: syz [ 3260.927356][T28895] usb 2-1: SerialNumber: syz [ 3260.945540][T32223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3260.967741][T32223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3261.330896][T32267] syzkaller1: entered promiscuous mode [ 3261.350495][T32267] syzkaller1: entered allmulticast mode [ 3261.611871][T32281] netlink: 'syz.4.40481': attribute type 11 has an invalid length. [ 3261.613293][T32282] sctp: [Deprecated]: syz.2.40480 (pid 32282) Use of int in maxseg socket option. [ 3261.613293][T32282] Use struct sctp_assoc_value instead [ 3261.845570][T32292] erspan0: left promiscuous mode [ 3261.874356][T32292] ip6gretap0: left promiscuous mode [ 3261.901925][T32292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3261.917691][T32292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3262.041100][T28895] (unnamed net_device) (uninitialized): Assigned a random MAC address: 76:94:bb:2a:6d:0a [ 3262.104329][T28895] rtl8150 2-1:1.0: eth5: rtl8150 is detected [ 3262.128951][T28895] usb 2-1: USB disconnect, device number 67 [ 3263.072772][T32370] team0: Device ipip0 is up. Set it down before adding it as a team port [ 3263.165105][ T7519] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 3263.335090][ T7519] usb 6-1: Using ep0 maxpacket: 16 [ 3263.346337][ T7519] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3263.358951][ T7519] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3263.374537][ T7519] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3263.386120][ T7519] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 3263.408038][ T7519] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3263.417837][ T7519] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 3263.439029][ T7519] usb 6-1: SerialNumber: syz [ 3263.453900][ T7519] hub 6-1:1.0: bad descriptor, ignoring hub [ 3263.464747][ T7519] hub 6-1:1.0: probe with driver hub failed with error -5 [ 3263.480545][ T7519] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 3263.620109][T32403] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 3263.641141][T32407] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 3263.870107][T32355] raw-gadget.0 gadget.5: fail, usb_ep_set_halt returned -11 [ 3263.911418][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 3263.911439][ T29] audit: type=1326 audit(1777138553.231:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32427 comm="syz.2.40512" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd901c code=0x0 [ 3264.001430][T28895] usb 6-1: USB disconnect, device number 27 [ 3264.501984][ T29] audit: type=1326 audit(1777138553.821:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32454 comm="syz.1.40520" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3264.567323][ T29] audit: type=1326 audit(1777138553.851:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32454 comm="syz.1.40520" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3264.607645][ T4466] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3264.625640][ T29] audit: type=1326 audit(1777138553.851:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32454 comm="syz.1.40520" exe="/root/syz-executor" sig=0 arch=40000003 syscall=396 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3264.677330][ T29] audit: type=1326 audit(1777138553.851:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32454 comm="syz.1.40520" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3264.760233][ T29] audit: type=1326 audit(1777138553.851:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32454 comm="syz.1.40520" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3264.853734][ T29] audit: type=1326 audit(1777138553.851:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32454 comm="syz.1.40520" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3264.906569][ T29] audit: type=1326 audit(1777138553.851:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32454 comm="syz.1.40520" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3264.974680][ T29] audit: type=1326 audit(1777138553.851:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32454 comm="syz.1.40520" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3265.054184][ T29] audit: type=1326 audit(1777138553.851:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32454 comm="syz.1.40520" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe801c code=0x7ffc0000 [ 3265.636271][ T4466] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 3265.655808][T32502] sctp: [Deprecated]: syz.2.40539 (pid 32502) Use of int in max_burst socket option deprecated. [ 3265.655808][T32502] Use struct sctp_assoc_value instead [ 3266.520837][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.529777][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 3266.992688][T32551] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.40559'. [ 3267.004281][T32551] netlink: ct family unspecified [ 3267.102803][T32555] syzkaller1: entered promiscuous mode [ 3267.109097][T32555] syzkaller1: entered allmulticast mode [ 3268.889886][T32623] loop5: detected capacity change from 0 to 7 [ 3268.933240][T32623] Dev loop5: unable to read RDB block 7 [ 3268.961376][T32623] loop5: unable to read partition table [ 3268.988174][T32623] loop5: partition table beyond EOD, truncated [ 3269.006807][T32623] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 3270.162576][T32679] netlink: 60 bytes leftover after parsing attributes in process `syz.5.40602'. [ 3270.201555][T32676] syzkaller1: entered promiscuous mode [ 3270.208848][T32676] syzkaller1: entered allmulticast mode [ 3270.404253][T32685] netlink: 60 bytes leftover after parsing attributes in process `syz.5.40602'. [ 3270.506732][T32690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.40605'. [ 3270.993060][T32704] netlink: 'syz.5.40609': attribute type 1 has an invalid length. [ 3271.015925][T32704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3271.023280][T32704] IPv6: NLM_F_CREATE should be set when creating new route [ 3271.545030][T28034] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 3271.714791][T28034] usb 2-1: Using ep0 maxpacket: 16 [ 3271.738083][T28034] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 3271.768459][T28034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3271.795277][T28034] usb 2-1: Product: syz [ 3271.810211][T28034] usb 2-1: Manufacturer: syz [ 3271.825939][T28034] usb 2-1: SerialNumber: syz [ 3272.386620][T28034] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 3272.433491][T28034] usb 2-1: USB disconnect, device number 68 [ 3273.084637][ T7519] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 3273.254641][ T7519] usb 6-1: Using ep0 maxpacket: 16 [ 3273.261834][ T7519] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3273.276669][ T7519] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3273.317097][ T7519] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3273.331927][ T7519] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3273.346815][ T7519] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3273.356647][ T7519] usb 6-1: Product: syz [ 3273.361097][ T7519] usb 6-1: Manufacturer: syz [ 3273.366343][ T7519] usb 6-1: SerialNumber: syz [ 3273.388342][ T7519] usb 6-1: 0:2 : does not exist [ 3273.814896][T28038] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 3273.834644][T28034] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 3273.995750][T28034] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 3274.020964][T28034] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3274.033185][T28034] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3274.043093][ T7519] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 3274.045338][T28034] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3274.060438][T28038] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3274.073489][T28034] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3274.078513][T28038] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 3274.084321][T28034] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3274.091472][T28038] usb 3-1: can't read configurations, error -71 [ 3274.102613][T28034] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3274.125306][T28034] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3274.138470][T28034] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3274.150092][T28034] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3274.157052][ T7519] usb 6-1: USB disconnect, device number 28 [ 3274.170821][T28034] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3274.180521][T28034] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3274.192728][T28034] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3274.204165][T28034] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3274.207586][T31550] udevd[31550]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 3274.215377][T28034] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3274.243880][T28034] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3274.257307][T28034] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3274.270747][T28034] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3274.288581][T28034] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3274.309930][T28034] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3274.322855][T28034] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3274.336209][T28034] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3274.344008][T28034] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3274.353936][T28034] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3274.369223][T28034] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3274.379175][T28034] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3274.388825][T28034] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3274.398078][T28034] usb 2-1: Product: syz [ 3274.402302][T28034] usb 2-1: Manufacturer: syz [ 3274.407884][T28034] usb 2-1: SerialNumber: syz [ 3274.415642][T28034] usb 2-1: config 0 descriptor?? [ 3274.427205][T28034] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 3274.959885][ T4466] usb 2-1: USB disconnect, device number 69 [ 3274.988915][ T4466] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 3275.834829][T28034] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 3275.909418][ T458] [ 3275.911825][ T458] ===================================================== [ 3275.919143][ T458] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 3275.926636][ T458] syzkaller #0 Tainted: G L [ 3275.932739][ T458] ----------------------------------------------------- [ 3275.939704][ T458] syz.6.40656/458 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 3275.947375][ T458] ffff888050b79f20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 3275.956062][ T458] [ 3275.956062][ T458] and this task is already holding: [ 3275.963459][ T458] ffff888066c18600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 3275.972232][ T458] which would create a new lock dependency: [ 3275.978159][ T458] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 3275.985805][ T458] [ 3275.985805][ T458] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 3275.995315][ T458] (&dev->event_lock#2){..-.}-{3:3} [ 3275.995370][ T458] [ 3275.995370][ T458] ... which became SOFTIRQ-irq-safe at: [ 3276.008396][ T458] lock_acquire+0x106/0x350 [ 3276.013029][ T458] _raw_spin_lock_irqsave+0x40/0x60 [ 3276.018344][ T458] input_event+0x71/0xc0 [ 3276.022681][ T458] xpad360_process_packet+0xda/0xdc0 [ 3276.028141][ T458] xpad_irq_in+0x14e/0x25c0 [ 3276.032732][ T458] __usb_hcd_giveback_urb+0x376/0x540 [ 3276.038203][ T458] dummy_timer+0xbc0/0x4650 [ 3276.042830][ T458] __hrtimer_run_queues+0x3c0/0xa20 [ 3276.048147][ T458] hrtimer_run_softirq+0x17a/0x240 [ 3276.053360][ T458] handle_softirqs+0x22a/0x840 [ 3276.058219][ T458] __irq_exit_rcu+0xca/0x220 [ 3276.062907][ T458] irq_exit_rcu+0x9/0x30 [ 3276.067254][ T458] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3276.073073][ T458] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3276.079139][ T458] lock_acquire+0x221/0x350 [ 3276.083759][ T458] unwind_next_frame+0xc3/0x2550 [ 3276.088801][ T458] arch_stack_walk+0x11b/0x150 [ 3276.093660][ T458] stack_trace_save+0xa9/0x100 [ 3276.098519][ T458] kasan_save_track+0x3e/0x80 [ 3276.103307][ T458] kasan_save_free_info+0x46/0x50 [ 3276.108462][ T458] __kasan_slab_free+0x5c/0x80 [ 3276.113333][ T458] kmem_cache_free+0x182/0x650 [ 3276.115894][T28034] usb 6-1: Using ep0 maxpacket: 16 [ 3276.118205][ T458] decay_va_pool_node+0x786/0xec0 [ 3276.118240][ T458] __purge_vmap_area_lazy+0x160/0xb40 [ 3276.133944][ T458] drain_vmap_area_work+0x27/0x40 [ 3276.134912][T28034] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3276.139100][ T458] process_scheduled_works+0xb5d/0x1860 [ 3276.139129][ T458] worker_thread+0xa53/0xfc0 [ 3276.151600][T28034] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 3276.152430][ T458] kthread+0x388/0x470 [ 3276.157833][T28034] usb 6-1: can't read configurations, error -71 [ 3276.164659][ T458] ret_from_fork+0x514/0xb70 [ 3276.164691][ T458] ret_from_fork_asm+0x1a/0x30 [ 3276.164714][ T458] [ 3276.164714][ T458] to a SOFTIRQ-irq-unsafe lock: [ 3276.164724][ T458] (tasklist_lock){.+.+}-{3:3} [ 3276.164749][ T458] [ 3276.164749][ T458] ... which became SOFTIRQ-irq-unsafe at: [ 3276.164760][ T458] ... [ 3276.164765][ T458] lock_acquire+0x106/0x350 [ 3276.164787][ T458] _raw_read_lock+0x36/0x50 [ 3276.164805][ T458] __do_wait+0xde/0x740 [ 3276.164830][ T458] do_wait+0x1e7/0x510 [ 3276.164856][ T458] kernel_wait+0xd6/0x1c0 [ 3276.164881][ T458] call_usermodehelper_exec_work+0xbe/0x230 [ 3276.164899][ T458] process_scheduled_works+0xb5d/0x1860 [ 3276.164918][ T458] worker_thread+0xa53/0xfc0 [ 3276.164937][ T458] kthread+0x388/0x470 [ 3276.164961][ T458] ret_from_fork+0x514/0xb70 [ 3276.164979][ T458] ret_from_fork_asm+0x1a/0x30 [ 3276.165000][ T458] [ 3276.165000][ T458] other info that might help us debug this: [ 3276.165000][ T458] [ 3276.165010][ T458] Chain exists of: [ 3276.165010][ T458] &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock [ 3276.165010][ T458] [ 3276.165051][ T458] Possible interrupt unsafe locking scenario: [ 3276.165051][ T458] [ 3276.165059][ T458] CPU0 CPU1 [ 3276.165067][ T458] ---- ---- [ 3276.165074][ T458] lock(tasklist_lock); [ 3276.165090][ T458] local_irq_disable(); [ 3276.165099][ T458] lock(&dev->event_lock#2); [ 3276.165121][ T458] lock(&new->fa_lock); [ 3276.165138][ T458] [ 3276.165144][ T458] lock(&dev->event_lock#2); [ 3276.165165][ T458] [ 3276.165165][ T458] *** DEADLOCK *** [ 3276.165165][ T458] [ 3276.165171][ T458] 6 locks held by syz.6.40656/458: [ 3276.165184][ T458] #0: ffff8880440c6410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 3276.165246][ T458] #1: ffff88805725acb8 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 3276.165316][ T458] #2: ffffffff8eb03db0 (file_rwsem){++++}-{0:0}, at: __break_lease+0x4e1/0x1ea0 [ 3276.165376][ T458] #3: ffff8880a48a0648 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4eb/0x1ea0 [ 3276.165429][ T458] #4: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 3276.165485][ T458] #5: ffff888066c18600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 3276.165540][ T458] [ 3276.165540][ T458] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 3276.165551][ T458] -> (&dev->event_lock#2){..-.}-{3:3} { [ 3276.165586][ T458] IN-SOFTIRQ-W at: [ 3276.165599][ T458] lock_acquire+0x106/0x350 [ 3276.165619][ T458] _raw_spin_lock_irqsave+0x40/0x60 [ 3276.439416][ T458] input_event+0x71/0xc0 [ 3276.445672][ T458] xpad360_process_packet+0xda/0xdc0 [ 3276.452967][ T458] xpad_irq_in+0x14e/0x25c0 [ 3276.459498][ T458] __usb_hcd_giveback_urb+0x376/0x540 [ 3276.466883][ T458] dummy_timer+0xbc0/0x4650 [ 3276.473425][ T458] __hrtimer_run_queues+0x3c0/0xa20 [ 3276.480630][ T458] hrtimer_run_softirq+0x17a/0x240 [ 3276.487746][ T458] handle_softirqs+0x22a/0x840 [ 3276.494519][ T458] __irq_exit_rcu+0xca/0x220 [ 3276.501383][ T458] irq_exit_rcu+0x9/0x30 [ 3276.507656][ T458] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3276.515290][ T458] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3276.523308][ T458] lock_acquire+0x221/0x350 [ 3276.529825][ T458] unwind_next_frame+0xc3/0x2550 [ 3276.536783][ T458] arch_stack_walk+0x11b/0x150 [ 3276.543550][ T458] stack_trace_save+0xa9/0x100 [ 3276.550379][ T458] kasan_save_track+0x3e/0x80 [ 3276.557077][ T458] kasan_save_free_info+0x46/0x50 [ 3276.564118][ T458] __kasan_slab_free+0x5c/0x80 [ 3276.570883][ T458] kmem_cache_free+0x182/0x650 [ 3276.577654][ T458] decay_va_pool_node+0x786/0xec0 [ 3276.584683][ T458] __purge_vmap_area_lazy+0x160/0xb40 [ 3276.592079][ T458] drain_vmap_area_work+0x27/0x40 [ 3276.599105][ T458] process_scheduled_works+0xb5d/0x1860 [ 3276.606651][ T458] worker_thread+0xa53/0xfc0 [ 3276.613241][ T458] kthread+0x388/0x470 [ 3276.619355][ T458] ret_from_fork+0x514/0xb70 [ 3276.625973][ T458] ret_from_fork_asm+0x1a/0x30 [ 3276.632751][ T458] INITIAL USE at: [ 3276.636821][ T458] lock_acquire+0x106/0x350 [ 3276.643256][ T458] _raw_spin_lock_irqsave+0x40/0x60 [ 3276.650377][ T458] input_inject_event+0xa4/0x330 [ 3276.657252][ T458] kbd_led_trigger_activate+0xbc/0x100 [ 3276.664654][ T458] led_trigger_set+0x535/0x960 [ 3276.671365][ T458] led_trigger_set_default+0x260/0x2a0 [ 3276.678781][ T458] led_classdev_register_ext+0x787/0x9c0 [ 3276.686347][ T458] input_leds_connect+0x517/0x790 [ 3276.693313][ T458] input_register_device+0xce0/0x1140 [ 3276.700638][ T458] atkbd_connect+0x71e/0xa10 [ 3276.707175][ T458] serio_driver_probe+0x82/0xb0 [ 3276.713966][ T458] really_probe+0x267/0xaf0 [ 3276.720438][ T458] __driver_probe_device+0x1ef/0x380 [ 3276.727652][ T458] driver_probe_device+0x4f/0x240 [ 3276.734603][ T458] __driver_attach+0x34c/0x640 [ 3276.741286][ T458] bus_for_each_dev+0x23b/0x2c0 [ 3276.748063][ T458] serio_handle_event+0x1af/0xf80 [ 3276.755014][ T458] process_scheduled_works+0xb5d/0x1860 [ 3276.762475][ T458] worker_thread+0xa53/0xfc0 [ 3276.765817][ C1] ip6_tunnel: K xmit: Local address not yet configured! [ 3276.768978][ T458] kthread+0x388/0x470 [ 3276.781982][ T458] ret_from_fork+0x514/0xb70 [ 3276.788511][ T458] ret_from_fork_asm+0x1a/0x30 [ 3276.795221][ T458] } [ 3276.797895][ T458] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 3276.807802][ T458] -> (&client->buffer_lock){....}-{3:3} { [ 3276.813724][ T458] INITIAL USE at: [ 3276.817733][ T458] lock_acquire+0x106/0x350 [ 3276.823983][ T458] _raw_spin_lock+0x2e/0x40 [ 3276.830238][ T458] evdev_handle_get_val+0x70/0x9f0 [ 3276.837200][ T458] evdev_ioctl_handler+0x127b/0x1fe0 [ 3276.844258][ T458] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 3276.851477][ T458] __do_fast_syscall_32+0x229/0x6e0 [ 3276.858418][ T458] do_fast_syscall_32+0x33/0x70 [ 3276.865040][ T458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3276.873116][ T458] } [ 3276.875705][ T458] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 3276.883953][ T458] ... acquired at: [ 3276.887844][ T458] _raw_spin_lock+0x2e/0x40 [ 3276.892545][ T458] evdev_handle_get_val+0x70/0x9f0 [ 3276.897850][ T458] evdev_ioctl_handler+0x127b/0x1fe0 [ 3276.903320][ T458] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 3276.908969][ T458] __do_fast_syscall_32+0x229/0x6e0 [ 3276.914349][ T458] do_fast_syscall_32+0x33/0x70 [ 3276.919388][ T458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3276.925902][ T458] [ 3276.928230][ T458] -> (&new->fa_lock){....}-{3:3} { [ 3276.933366][ T458] INITIAL USE at: [ 3276.937261][ T458] lock_acquire+0x106/0x350 [ 3276.943386][ T458] _raw_write_lock_irq+0x3d/0x50 [ 3276.949895][ T458] fasync_remove_entry+0xf1/0x1c0 [ 3276.956493][ T458] __fput+0x890/0xa60 [ 3276.962043][ T458] task_work_run+0x1d9/0x270 [ 3276.968203][ T458] exit_to_user_mode_loop+0xed/0x480 [ 3276.975061][ T458] __do_fast_syscall_32+0x446/0x6e0 [ 3276.981848][ T458] do_fast_syscall_32+0x33/0x70 [ 3276.988266][ T458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3276.996175][ T458] INITIAL READ USE at: [ 3277.000544][ T458] lock_acquire+0x106/0x350 [ 3277.007056][ T458] _raw_read_lock_irqsave+0x48/0x60 [ 3277.014350][ T458] kill_fasync+0x199/0x4d0 [ 3277.020803][ T458] pipe_release+0x19c/0x330 [ 3277.027313][ T458] __fput+0x44f/0xa60 [ 3277.033305][ T458] task_work_run+0x1d9/0x270 [ 3277.039903][ T458] exit_to_user_mode_loop+0xed/0x480 [ 3277.047190][ T458] __do_fast_syscall_32+0x446/0x6e0 [ 3277.054395][ T458] do_fast_syscall_32+0x33/0x70 [ 3277.061268][ T458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3277.069606][ T458] } [ 3277.072109][ T458] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 3277.080814][ T458] ... acquired at: [ 3277.084624][ T458] _raw_read_lock_irqsave+0x48/0x60 [ 3277.090102][ T458] kill_fasync+0x199/0x4d0 [ 3277.094723][ T458] evdev_pass_values+0x627/0xbd0 [ 3277.099851][ T458] evdev_events+0x1e6/0x340 [ 3277.104541][ T458] input_pass_values+0x288/0x890 [ 3277.109670][ T458] input_event_dispose+0x330/0x6b0 [ 3277.114968][ T458] input_inject_event+0x1dc/0x330 [ 3277.120193][ T458] evdev_write+0x325/0x4c0 [ 3277.124822][ T458] vfs_write+0x29a/0xb90 [ 3277.129273][ T458] ksys_write+0x150/0x270 [ 3277.133801][ T458] __do_fast_syscall_32+0x229/0x6e0 [ 3277.139191][ T458] do_fast_syscall_32+0x33/0x70 [ 3277.144221][ T458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3277.150758][ T458] [ 3277.153087][ T458] [ 3277.153087][ T458] the dependencies between the lock to be acquired [ 3277.153097][ T458] and SOFTIRQ-irq-unsafe lock: [ 3277.166627][ T458] -> (tasklist_lock){.+.+}-{3:3} { [ 3277.171849][ T458] HARDIRQ-ON-R at: [ 3277.175924][ T458] lock_acquire+0x106/0x350 [ 3277.182260][ T458] _raw_read_lock+0x36/0x50 [ 3277.188600][ T458] __do_wait+0xde/0x740 [ 3277.194854][ T458] do_wait+0x1e7/0x510 [ 3277.200765][ T458] kernel_wait+0xd6/0x1c0 [ 3277.206956][ T458] call_usermodehelper_exec_work+0xbe/0x230 [ 3277.214680][ T458] process_scheduled_works+0xb5d/0x1860 [ 3277.222061][ T458] worker_thread+0xa53/0xfc0 [ 3277.228567][ T458] kthread+0x388/0x470 [ 3277.234475][ T458] ret_from_fork+0x514/0xb70 [ 3277.240895][ T458] ret_from_fork_asm+0x1a/0x30 [ 3277.247488][ T458] SOFTIRQ-ON-R at: [ 3277.251560][ T458] lock_acquire+0x106/0x350 [ 3277.257887][ T458] _raw_read_lock+0x36/0x50 [ 3277.264214][ T458] __do_wait+0xde/0x740 [ 3277.270215][ T458] do_wait+0x1e7/0x510 [ 3277.276124][ T458] kernel_wait+0xd6/0x1c0 [ 3277.282290][ T458] call_usermodehelper_exec_work+0xbe/0x230 [ 3277.290023][ T458] process_scheduled_works+0xb5d/0x1860 [ 3277.297403][ T458] worker_thread+0xa53/0xfc0 [ 3277.303849][ T458] kthread+0x388/0x470 [ 3277.309837][ T458] ret_from_fork+0x514/0xb70 [ 3277.316257][ T458] ret_from_fork_asm+0x1a/0x30 [ 3277.322963][ T458] INITIAL USE at: [ 3277.326949][ T458] lock_acquire+0x106/0x350 [ 3277.333214][ T458] _raw_write_lock_irq+0x3d/0x50 [ 3277.339899][ T458] copy_process+0x2b5e/0x4450 [ 3277.346319][ T458] kernel_clone+0x284/0x8f0 [ 3277.352568][ T458] user_mode_thread+0x110/0x180 [ 3277.359162][ T458] rest_init+0x23/0x300 [ 3277.365068][ T458] start_kernel+0x38a/0x3e0 [ 3277.371314][ T458] x86_64_start_reservations+0x24/0x30 [ 3277.378530][ T458] x86_64_start_kernel+0x143/0x1c0 [ 3277.385423][ T458] common_startup_64+0x13e/0x147 [ 3277.392125][ T458] INITIAL READ USE at: [ 3277.396551][ T458] lock_acquire+0x106/0x350 [ 3277.403241][ T458] _raw_read_lock+0x36/0x50 [ 3277.409917][ T458] __do_wait+0xde/0x740 [ 3277.416256][ T458] do_wait+0x1e7/0x510 [ 3277.422511][ T458] kernel_wait+0xd6/0x1c0 [ 3277.429020][ T458] call_usermodehelper_exec_work+0xbe/0x230 [ 3277.437087][ T458] process_scheduled_works+0xb5d/0x1860 [ 3277.444821][ T458] worker_thread+0xa53/0xfc0 [ 3277.451597][ T458] kthread+0x388/0x470 [ 3277.457847][ T458] ret_from_fork+0x514/0xb70 [ 3277.464621][ T458] ret_from_fork_asm+0x1a/0x30 [ 3277.471580][ T458] } [ 3277.474166][ T458] ... key at: [] tasklist_lock+0x18/0x40 [ 3277.482050][ T458] ... acquired at: [ 3277.485948][ T458] _raw_read_lock+0x36/0x50 [ 3277.490629][ T458] send_sigurg+0x12b/0x420 [ 3277.495231][ T458] sk_send_sigurg+0x6c/0x2e0 [ 3277.500005][ T458] queue_oob+0x42c/0x4f0 [ 3277.504433][ T458] unix_stream_sendmsg+0xcb1/0xe80 [ 3277.509749][ T458] ____sys_sendmsg+0x972/0x9f0 [ 3277.514696][ T458] ___sys_sendmsg+0x2a5/0x360 [ 3277.519578][ T458] __sys_sendmsg+0x183/0x260 [ 3277.524356][ T458] __do_fast_syscall_32+0x229/0x6e0 [ 3277.529753][ T458] do_fast_syscall_32+0x33/0x70 [ 3277.534796][ T458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3277.541749][ T458] [ 3277.544080][ T458] -> (&f_owner->lock){....}-{3:3} { [ 3277.549309][ T458] INITIAL USE at: [ 3277.553294][ T458] lock_acquire+0x106/0x350 [ 3277.559457][ T458] _raw_write_lock_irq+0x3d/0x50 [ 3277.565977][ T458] __f_setown+0x67/0x370 [ 3277.571818][ T458] f_setown+0x23a/0x300 [ 3277.577560][ T458] sock_ioctl+0x615/0x7f0 [ 3277.583476][ T458] compat_sock_ioctl+0x288/0xcb0 [ 3277.589989][ T458] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 3277.597023][ T458] __do_fast_syscall_32+0x229/0x6e0 [ 3277.603808][ T458] do_fast_syscall_32+0x33/0x70 [ 3277.610271][ T458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3277.618191][ T458] INITIAL READ USE at: [ 3277.622530][ T458] lock_acquire+0x106/0x350 [ 3277.629041][ T458] _raw_read_lock_irqsave+0x48/0x60 [ 3277.636257][ T458] send_sigio+0x38/0x370 [ 3277.642616][ T458] dnotify_handle_event+0x169/0x440 [ 3277.649825][ T458] fsnotify+0x1831/0x1ae0 [ 3277.656167][ T458] vfs_readv+0x6dc/0x840 [ 3277.662413][ T458] __ia32_compat_sys_preadv+0x1c6/0x2c0 [ 3277.670575][ T458] __do_fast_syscall_32+0x229/0x6e0 [ 3277.677873][ T458] do_fast_syscall_32+0x33/0x70 [ 3277.684731][ T458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3277.693065][ T458] } [ 3277.695568][ T458] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 3277.704517][ T458] ... acquired at: [ 3277.708327][ T458] _raw_read_lock_irqsave+0x48/0x60 [ 3277.713704][ T458] send_sigio+0x38/0x370 [ 3277.718395][ T458] kill_fasync+0x24d/0x4d0 [ 3277.722995][ T458] lease_break_callback+0x26/0x30 [ 3277.728202][ T458] __break_lease+0x81f/0x1ea0 [ 3277.733058][ T458] vfs_mknod+0x52d/0x610 [ 3277.737483][ T458] unix_bind+0x548/0x1230 [ 3277.742088][ T458] __sys_bind+0x2e3/0x410 [ 3277.746594][ T458] __ia32_sys_bind+0x7a/0x90 [ 3277.751365][ T458] __do_fast_syscall_32+0x229/0x6e0 [ 3277.756754][ T458] do_fast_syscall_32+0x33/0x70 [ 3277.761789][ T458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3277.768299][ T458] [ 3277.770628][ T458] [ 3277.770628][ T458] stack backtrace: [ 3277.776519][ T458] CPU: 0 UID: 0 PID: 458 Comm: syz.6.40656 Tainted: G L syzkaller #0 PREEMPT(full) [ 3277.776550][ T458] Tainted: [L]=SOFTLOCKUP [ 3277.776557][ T458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3277.776568][ T458] Call Trace: [ 3277.776577][ T458] [ 3277.776584][ T458] dump_stack_lvl+0xe8/0x150 [ 3277.776604][ T458] __lock_acquire+0x2a94/0x2cf0 [ 3277.776630][ T458] ? send_sigio+0x38/0x370 [ 3277.776651][ T458] lock_acquire+0x106/0x350 [ 3277.776667][ T458] ? send_sigio+0x38/0x370 [ 3277.776688][ T458] ? kill_fasync+0x199/0x4d0 [ 3277.776710][ T458] ? lock_acquire+0x106/0x350 [ 3277.776725][ T458] ? kill_fasync+0x199/0x4d0 [ 3277.776749][ T458] _raw_read_lock_irqsave+0x48/0x60 [ 3277.776765][ T458] ? send_sigio+0x38/0x370 [ 3277.776786][ T458] send_sigio+0x38/0x370 [ 3277.776808][ T458] kill_fasync+0x24d/0x4d0 [ 3277.776830][ T458] ? kill_fasync+0x53/0x4d0 [ 3277.776852][ T458] lease_break_callback+0x26/0x30 [ 3277.776876][ T458] __break_lease+0x81f/0x1ea0 [ 3277.776901][ T458] ? __pfx___break_lease+0x10/0x10 [ 3277.776921][ T458] ? make_vfsuid+0x49/0xa0 [ 3277.776936][ T458] ? generic_permission+0x2e4/0x690 [ 3277.776956][ T458] ? inode_permission+0x346/0x5f0 [ 3277.776973][ T458] ? bpf_lsm_inode_mknod+0x9/0x20 [ 3277.776994][ T458] ? security_inode_mknod+0xc2/0x330 [ 3277.777019][ T458] vfs_mknod+0x52d/0x610 [ 3277.777047][ T458] unix_bind+0x548/0x1230 [ 3277.777072][ T458] ? tomoyo_socket_bind_permission+0x1ae/0x290 [ 3277.777095][ T458] ? __pfx_unix_bind+0x10/0x10 [ 3277.777117][ T458] ? bpf_lsm_socket_bind+0x9/0x20 [ 3277.777139][ T458] __sys_bind+0x2e3/0x410 [ 3277.777155][ T458] ? __pfx___sys_bind+0x10/0x10 [ 3277.777177][ T458] __ia32_sys_bind+0x7a/0x90 [ 3277.777193][ T458] __do_fast_syscall_32+0x229/0x6e0 [ 3277.777213][ T458] ? do_fast_syscall_32+0x33/0x70 [ 3277.777232][ T458] ? irqentry_exit+0x10f/0x730 [ 3277.777249][ T458] ? trace_irq_disable+0x3b/0x140 [ 3277.777274][ T458] do_fast_syscall_32+0x33/0x70 [ 3277.777294][ T458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 3277.777314][ T458] RIP: 0023:0xf7f1501c [ 3277.777329][ T458] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 3277.777345][ T458] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 3277.777363][ T458] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003000 [ 3277.777375][ T458] RDX: 000000000000006e RSI: 0000000000000000 RDI: 0000000000000000 [ 3277.777386][ T458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 3277.777396][ T458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 3277.777406][ T458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 3277.777422][ T458] [ 3278.234597][T28038] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 3278.386288][T28038] usb 3-1: Using ep0 maxpacket: 16 [ 3278.393145][T28038] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3278.404826][T28038] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3278.414708][T28038] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3278.421367][T28038] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3278.430680][T28038] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3278.440044][T28038] usb 3-1: config 0 descriptor?? [ 3278.855679][ T453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3278.865894][ T453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3278.879520][T28038] hid (null): usage index exceeded [ 3278.885219][T28038] hid (null): unknown global tag 0xd [ 3278.897042][T28038] hid (null): unknown global tag 0xd [ 3279.099805][T28038] usb 3-1: USB disconnect, device number 63