last executing test programs: 8.707817774s ago: executing program 4 (id=19449): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x40000}, 0x20) 8.607079353s ago: executing program 4 (id=19450): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 8.474825015s ago: executing program 4 (id=19451): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0xfff, 0x4b, 0x8049}, 'syz0\x00', 0xe}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4) 8.315074092s ago: executing program 4 (id=19453): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 8.2509377s ago: executing program 4 (id=19456): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x4, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.658221229s ago: executing program 4 (id=19464): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x1, @private1, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000300)="14", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0x9, @remote, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000400)="912dd607b6", 0x5}], 0x1}}], 0x2, 0x54) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 5.070716534s ago: executing program 0 (id=19488): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x7fffffff, 0x2, 0x28e8, 0x7, 0x5, 0xff, 0x7ffc, 0x805, 0x74a, 0x6, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x100003, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfdfffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0xaf97, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0xfffffffe, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x5, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x7d8b, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x5, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x0, 0x3, 0x7]}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={0x0, 0x6, 0xffff37a4}) 4.116281879s ago: executing program 0 (id=19494): set_mempolicy(0x3, &(0x7f0000000040)=0xe3, 0x8) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x10022, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3.861265806s ago: executing program 0 (id=19495): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) 3.529658171s ago: executing program 0 (id=19499): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000980)={0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40800) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011) 3.26848287s ago: executing program 0 (id=19502): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 1.717315189s ago: executing program 1 (id=19519): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x8000000, 0x2, 0x3, 0x4, 0x0, 0x5}, 0x20) 1.706193214s ago: executing program 3 (id=19520): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 1.598048459s ago: executing program 1 (id=19521): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000640)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 1.543823275s ago: executing program 3 (id=19522): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) capget(&(0x7f0000000000)={0x20071026}, 0x0) 1.442991076s ago: executing program 1 (id=19524): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000000)={0x18, r1, 0x1, 0x0, &(0x7f0000000140)=[{0xfff, 0xfffffffffffffff9}]}) 1.111833626s ago: executing program 1 (id=19526): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x80000}) ioctl$PPPIOCGMRU(r2, 0x40046201, 0x0) 890.689531ms ago: executing program 1 (id=19528): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x3, 0x12) readv(r0, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/204, 0xcc}], 0x1) 774.570987ms ago: executing program 2 (id=19529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 773.592696ms ago: executing program 1 (id=19530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r1, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x36]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x880) 565.720576ms ago: executing program 2 (id=19531): sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) 417.534853ms ago: executing program 2 (id=19532): r0 = syz_io_uring_setup(0x2790, &(0x7f0000000180)={0x0, 0xc386, 0x3010, 0x2, 0x200004}, &(0x7f0000000240), &(0x7f0000000140), &(0x7f0000000000)) r1 = epoll_create(0xaf2) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000201b}) 316.931832ms ago: executing program 3 (id=19533): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) socket$rxrpc(0x21, 0x2, 0xa) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 260.268706ms ago: executing program 3 (id=19534): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x9, @mcast2, 0x4}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc60, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48) 197.221489ms ago: executing program 2 (id=19535): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0xff, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) ioctl$TIOCGSERIAL(r1, 0x541e, 0x0) 139.724959ms ago: executing program 3 (id=19536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000700)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x28, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "f79568c029e530c3899ae5d322348df7"}]}}}}}}}}, 0x0) 120.272725ms ago: executing program 2 (id=19537): r0 = socket(0x200000000000011, 0x2, 0x3c644) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x23) close(0x3) 63.092407ms ago: executing program 0 (id=19538): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 16.521636ms ago: executing program 2 (id=19539): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000000)={0x0, 0x0, 0x0, r1, 0xfbfbfbfb}) 0s ago: executing program 3 (id=19540): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0xe605) fcntl$setsig(r0, 0xa, 0x12) dup2(r0, r1) kernel console output (not intermixed with test programs): 795][T13437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7 [ 1007.181822][T13437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024 [ 1007.196072][T13437] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 1007.205785][T13437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.215618][T13437] usb 3-1: Product: syz [ 1007.219852][T13437] usb 3-1: Manufacturer: syz [ 1007.224721][T13437] usb 3-1: SerialNumber: syz [ 1007.234652][T13437] usb 3-1: config 0 descriptor?? [ 1007.450902][T13437] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 1007.476257][T13437] usb 3-1: USB disconnect, device number 113 [ 1007.911870][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1008.147866][T10553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17686'. [ 1008.314062][T10561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1009.557899][T10604] cgroup: fork rejected by pids controller in /syz1 [ 1011.127400][ T8620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1011.145014][ T8620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1011.154696][ T8620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1011.172455][ T8620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1011.187261][ T8620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1011.201183][ T30] audit: type=1326 audit(1776397760.167:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.4.17740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883f99c819 code=0x7ffc0000 [ 1011.264364][ T30] audit: type=1326 audit(1776397760.187:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.4.17740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f883f99c819 code=0x7ffc0000 [ 1011.926368][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17751'. [ 1011.942089][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17751'. [ 1011.952850][T10688] netlink: 'syz.2.17751': attribute type 14 has an invalid length. [ 1011.972603][T10688] netlink: 'syz.2.17751': attribute type 11 has an invalid length. [ 1012.025060][ T36] bridge_slave_1: left allmulticast mode [ 1012.044604][ T36] bridge_slave_1: left promiscuous mode [ 1012.058728][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.086467][ T36] bridge_slave_0: left allmulticast mode [ 1012.095420][ T36] bridge_slave_0: left promiscuous mode [ 1012.101924][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.134533][ T36] pimreg: left allmulticast mode [ 1012.325502][T28501] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1012.494988][T28501] usb 4-1: Using ep0 maxpacket: 16 [ 1012.523215][T28501] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1012.532714][T28501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.540923][T28501] usb 4-1: Product: syz [ 1012.546636][T28501] usb 4-1: Manufacturer: syz [ 1012.551367][T28501] usb 4-1: SerialNumber: syz [ 1012.597054][T28501] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1012.603704][T28501] r8152-cfgselector 4-1: config 0 descriptor?? [ 1012.871954][T28501] r8152-cfgselector 4-1: Needed 1 retries to read version [ 1013.097120][T28501] r8152-cfgselector 4-1: USB disconnect, device number 111 [ 1013.310104][ T8620] Bluetooth: hci1: command tx timeout [ 1014.111652][T13415] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1014.188037][ T36] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.198165][ T36] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.207762][ T36] .` (unregistering): Released all slaves [ 1014.217965][ T36] bond1 (unregistering): Released all slaves [ 1014.236566][ T36] bond2 (unregistering): Released all slaves [ 1014.251063][ T36] bond3 (unregistering): Released all slaves [ 1014.264467][T13415] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.277492][T13415] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.277620][ T36] bond4 (unregistering): Released all slaves [ 1014.295729][T13415] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1014.305540][T13415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.322419][T13415] usb 4-1: config 0 descriptor?? [ 1014.323984][ T36] bond5 (unregistering): Released all slaves [ 1014.356577][ T36] bond0 (unregistering): Released all slaves [ 1014.373995][ T36] bond6 (unregistering): Released all slaves [ 1014.397751][ T36] bond7 (unregistering): Released all slaves [ 1014.415250][ T36] bond8 (unregistering): Released all slaves [ 1014.432854][ T36] bond9 (unregistering): Released all slaves [ 1014.461198][ T5497] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1014.535700][T10721] fuseblk: Bad value for 'source' [ 1014.722117][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17760'. [ 1014.794654][T13415] hid_parser_main: 31 callbacks suppressed [ 1014.794681][T13415] hid-steam 0003:28DE:1142.006E: unknown main item tag 0x0 [ 1014.827251][T13415] hid-steam 0003:28DE:1142.006E: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1014.907343][ T36] : left promiscuous mode [ 1014.920174][T13415] hid-steam 0003:28DE:1142.006E: Steam wireless receiver connected [ 1014.946479][T13415] hid-steam 0003:28DE:1142.006E: No HID_FEATURE_REPORT submitted - nothing to read [ 1014.979174][T13415] hid-steam 0003:28DE:1142.006F: unknown main item tag 0x0 [ 1015.004821][T13415] hid-steam 0003:28DE:1142.006F: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1015.046059][ T30] audit: type=1326 audit(1776397764.037:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.0.17764" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3649b9c819 code=0x0 [ 1015.242568][T13415] usb 4-1: USB disconnect, device number 112 [ 1015.370092][ T8620] Bluetooth: hci1: command tx timeout [ 1015.402783][T10739] fido_id[10739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1015.523809][ T36] : left promiscuous mode [ 1015.630338][T13415] hid-steam 0003:28DE:1142.006E: Steam wireless receiver disconnected [ 1015.692432][T10665] chnl_net:caif_netlink_parms(): no params data found [ 1015.762187][T28501] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 1015.863238][ T36] IPVS: stopping backup sync thread 14507 ... [ 1015.927567][T28501] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1015.941165][T28501] usb 5-1: config 0 has no interface number 0 [ 1015.978001][T28501] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1016.010110][T28501] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1016.032506][T28501] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1016.040471][T28501] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1016.068982][T28501] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.106320][T28501] usb 5-1: config 0 descriptor?? [ 1016.422883][T10777] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1016.456101][T10777] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1016.493975][T10665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.527667][T10665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.542249][T10665] bridge_slave_0: entered allmulticast mode [ 1016.562396][T10665] bridge_slave_0: entered promiscuous mode [ 1016.587111][ T5497] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1016.611036][T10665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.647286][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.667349][T10665] bridge_slave_1: entered allmulticast mode [ 1016.685442][T10665] bridge_slave_1: entered promiscuous mode [ 1016.743013][T28501] uclogic 0003:2179:0053.0070: failed retrieving string descriptor #100: -71 [ 1016.767024][T28501] uclogic 0003:2179:0053.0070: failed retrieving pen parameters: -71 [ 1016.794236][T28501] uclogic 0003:2179:0053.0070: pen probing failed: -71 [ 1016.802799][T28501] uclogic 0003:2179:0053.0070: failed probing parameters: -71 [ 1016.811083][T28501] uclogic 0003:2179:0053.0070: probe with driver uclogic failed with error -71 [ 1016.838312][T28501] usb 5-1: USB disconnect, device number 119 [ 1016.884145][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17779'. [ 1016.940447][T10665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.993330][T10665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.202109][T10665] team0: Port device team_slave_0 added [ 1017.211120][T10665] team0: Port device team_slave_1 added [ 1017.363778][T10665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.378069][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.435841][T10665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.436613][ T8620] Bluetooth: hci1: command tx timeout [ 1017.556990][T10665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.575547][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.604122][T10665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.737114][T10665] hsr_slave_0: entered promiscuous mode [ 1017.750537][T10665] hsr_slave_1: entered promiscuous mode [ 1017.758562][T10665] debugfs: 'hsr0' already exists in 'hsr' [ 1017.765343][T10665] Cannot create hsr debugfs directory [ 1017.835355][ T36] hsr_slave_0: left promiscuous mode [ 1017.843322][ T36] hsr_slave_1: left promiscuous mode [ 1018.087345][ T36] team_slave_1 (unregistering): left allmulticast mode [ 1018.104116][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1018.118947][ T36] team_slave_0 (unregistering): left allmulticast mode [ 1018.126796][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1018.235409][ T5497] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1019.521202][T10849] overlayfs: missing 'lowerdir' [ 1019.522753][ T8620] Bluetooth: hci1: command tx timeout [ 1019.886763][ T36] IPVS: stop unused estimator thread 0... [ 1020.816501][T10665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1020.843374][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1020.864859][T10665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1020.911772][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1020.929270][T10665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1020.961179][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1020.982850][T10665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1021.021058][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1021.247116][T10665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1021.309994][T10665] 8021q: adding VLAN 0 to HW filter on device team0 [ 1021.350149][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.357422][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.444322][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.451575][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.611119][T10665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1021.714116][T28502] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1021.744849][T10665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.764565][T28501] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1021.812177][T10665] veth0_vlan: entered promiscuous mode [ 1021.826761][T10665] veth1_vlan: entered promiscuous mode [ 1021.882341][T10665] veth0_macvtap: entered promiscuous mode [ 1021.891644][T28502] usb 3-1: Using ep0 maxpacket: 8 [ 1021.895109][T10665] veth1_macvtap: entered promiscuous mode [ 1021.900487][T28502] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1021.923929][T28502] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1021.930577][T10665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.944233][T28501] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1021.957079][T10665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.962393][T28501] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1021.974186][T28502] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1021.976450][ T3515] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.982758][ T6222] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1021.982914][T28502] usb 3-1: Product: syz [ 1022.005192][T28501] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.016710][T28502] usb 3-1: Manufacturer: syz [ 1022.023870][T28501] usb 4-1: config 0 descriptor?? [ 1022.030343][T28502] usb 3-1: SerialNumber: syz [ 1022.033099][ T3515] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.095972][ T3515] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.118879][ T3515] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.163166][ T6222] usb 5-1: Using ep0 maxpacket: 16 [ 1022.189290][ T6222] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1022.227820][ T6222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1022.289409][T28502] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1022.310853][ T6222] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1022.332780][T28502] usb 3-1: Handspring Visor / Palm OS: port 0, is for Console use [ 1022.344359][ T6222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.362098][T28502] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1022.377676][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.380499][ T6222] usb 5-1: Product: syz [ 1022.391467][T28502] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1022.398848][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.417593][ T6222] usb 5-1: Manufacturer: syz [ 1022.423111][ T6222] usb 5-1: SerialNumber: syz [ 1022.444823][ T6222] usb 5-1: config 0 descriptor?? [ 1022.498632][T28502] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 1022.510596][T28501] hid_mf 0003:0079:1846.0071: unknown main item tag 0x0 [ 1022.525626][T28502] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1022.528800][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.534487][T28501] hid_mf 0003:0079:1846.0071: unknown main item tag 0x0 [ 1022.558041][T28501] hid_mf 0003:0079:1846.0071: unknown main item tag 0x0 [ 1022.559606][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.567093][T28502] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1022.583437][T28501] hid_mf 0003:0079:1846.0071: unknown main item tag 0x0 [ 1022.614080][T28501] hid_mf 0003:0079:1846.0071: unknown main item tag 0x0 [ 1022.625918][T28501] hid_mf 0003:0079:1846.0071: unknown main item tag 0x0 [ 1022.635675][T28502] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1022.654004][T28501] hid_mf 0003:0079:1846.0071: unknown main item tag 0x0 [ 1022.679074][T28502] usb 3-1: USB disconnect, device number 114 [ 1022.686776][T28501] hid_mf 0003:0079:1846.0071: unknown main item tag 0x0 [ 1022.727393][T28501] hid_mf 0003:0079:1846.0071: unknown main item tag 0x0 [ 1022.743689][T28502] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1022.770312][T28501] hid_mf 0003:0079:1846.0071: unknown main item tag 0x0 [ 1022.845249][T28501] hid_mf 0003:0079:1846.0071: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 1022.863979][ T6222] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input138 [ 1022.889096][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 1022.902945][T28502] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1022.913314][T28501] hid_mf 0003:0079:1846.0071: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 1022.933535][T28502] visor 3-1:1.0: device disconnected [ 1022.973453][T28501] usb 4-1: USB disconnect, device number 113 [ 1023.087608][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1023.091924][T10940] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1023.103369][ T6222] imon:send_packet: packet tx failed (-71) [ 1023.105401][T10952] fido_id[10952]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1023.132492][ T6222] imon 5-1:0.0: panel buttons/knobs setup failed [ 1023.253455][ T6222] rc_core: IR keymap rc-imon-pad not found [ 1023.262296][ T6222] Registered IR keymap rc-empty [ 1023.269982][ T6222] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1023.289275][T10940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.300477][ T6222] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1023.301719][ T6222] imon:send_packet: packet tx failed (-71) [ 1023.327243][T10940] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.337794][T10940] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 1023.352519][ T6222] imon 5-1:0.0: remote input dev register failed [ 1023.356011][T10940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.374792][ T6222] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 1023.388760][T10940] usb 2-1: config 0 descriptor?? [ 1023.660143][ T6222] imon 5-1:0.0: unable to initialize intf0, err 0 [ 1023.689822][ T6222] imon:imon_probe: failed to initialize context! [ 1023.724084][ T6222] imon 5-1:0.0: unable to register, err -19 [ 1023.779133][ T6222] usb 5-1: USB disconnect, device number 120 [ 1024.024521][T10940] razer 0003:1532:010E.0072: failed to enable macro keys: -71 [ 1024.056469][T10940] razer 0003:1532:010E.0072: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0 [ 1024.094627][T10940] usb 2-1: USB disconnect, device number 112 [ 1024.239528][T10990] fido_id[10990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1024.330136][T10996] sg_write: data in/out 422364/112 bytes for SCSI command 0x0-- guessing data in; [ 1024.330136][T10996] program syz.3.17835 not setting count and/or reply_len properly [ 1025.249111][T11029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17846'. [ 1025.581837][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17849'. [ 1025.609225][T11040] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 1025.609225][T11040] program syz.4.17850 not setting count and/or reply_len properly [ 1027.217588][T11100] ptrace attach of "./syz-executor exec"[6142] was attempted by "./syz-executor exec"[11100] [ 1027.321851][T10940] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1027.502360][T10940] usb 4-1: Using ep0 maxpacket: 8 [ 1027.517668][T10940] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1027.552049][T10940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.571872][T10940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.590145][T10940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1027.606430][T10940] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 1027.621857][T10940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.652523][T10940] usb 4-1: config 0 descriptor?? [ 1028.093687][T10940] redragon 0003:0C45:760B.0073: Fixing Redragon ASURA report descriptor. [ 1028.117653][T10940] hid_parser_main: 28 callbacks suppressed [ 1028.117682][T10940] redragon 0003:0C45:760B.0073: unknown main item tag 0x6 [ 1028.142311][T10940] redragon 0003:0C45:760B.0073: item fetching failed at offset 7/133 [ 1028.159443][T10940] redragon 0003:0C45:760B.0073: probe with driver redragon failed with error -22 [ 1028.295161][T13437] usb 4-1: USB disconnect, device number 114 [ 1028.911941][T10940] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1029.024815][T11176] A link change request failed with some changes committed already. Interface 26aD may have been left with an inconsistent configuration, please check. [ 1029.072780][T10940] usb 3-1: Using ep0 maxpacket: 8 [ 1029.081878][T10940] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1029.106183][T10940] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1029.121786][T10940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.137894][T10940] usb 3-1: Product: syz [ 1029.140093][T11179] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 1029.140093][T11179] program syz.3.17908 not setting count and/or reply_len properly [ 1029.147385][T10940] usb 3-1: Manufacturer: syz [ 1029.182267][T10940] usb 3-1: SerialNumber: syz [ 1029.195468][T10940] usb 3-1: config 0 descriptor?? [ 1029.220190][T10940] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1029.242310][T10940] usb 3-1: setting power ON [ 1029.247086][T10940] dvb-usb: bulk message failed: -22 (2/0) [ 1029.264609][T10940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1029.275760][T10940] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1029.285059][T10940] usb 3-1: media controller created [ 1029.305125][T10940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1029.334746][T10940] usb 3-1: selecting invalid altsetting 6 [ 1029.341384][T10940] usb 3-1: digital interface selection failed (-22) [ 1029.354869][T10940] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1029.354980][T11183] netlink: 104 bytes leftover after parsing attributes in process `syz.3.17910'. [ 1029.372557][T10940] usb 3-1: setting power OFF [ 1029.380656][T10940] dvb-usb: bulk message failed: -22 (2/0) [ 1029.405632][T10940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1029.416112][T10940] (NULL device *): no alternate interface [ 1029.517973][T10940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1029.554686][T10940] usb 3-1: USB disconnect, device number 115 [ 1029.774740][T11198] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1030.229705][T11223] team_slave_0: entered promiscuous mode [ 1030.237599][T11223] team_slave_1: entered promiscuous mode [ 1030.245302][T11223] macvtap1: entered allmulticast mode [ 1030.251084][T11223] team0: entered allmulticast mode [ 1030.256989][T11223] team_slave_0: entered allmulticast mode [ 1030.263358][T11223] team_slave_1: entered allmulticast mode [ 1030.271128][T11223] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1030.279583][T11223] team0: Device macvtap1 is already an upper device of the team interface [ 1030.290275][T11223] team0: left allmulticast mode [ 1030.295740][T11223] team_slave_0: left allmulticast mode [ 1030.301885][T11223] team_slave_1: left allmulticast mode [ 1030.307536][T11223] team_slave_0: left promiscuous mode [ 1030.313108][T11223] team_slave_1: left promiscuous mode [ 1030.360165][T11225] tipc: Enabling of bearer rejected, failed to enable media [ 1030.467216][T11231] netlink: 56 bytes leftover after parsing attributes in process `syz.2.17932'. [ 1030.978366][T11253] netlink: 'syz.1.17943': attribute type 2 has an invalid length. [ 1031.062550][T13437] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1031.221602][T13437] usb 5-1: Using ep0 maxpacket: 32 [ 1031.238742][T13437] usb 5-1: config index 0 descriptor too short (expected 164, got 36) [ 1031.257617][T13437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1031.269736][T13437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1031.280152][T13437] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1031.299742][T13437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.315422][T13437] usb 5-1: config 0 descriptor?? [ 1031.474475][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17954'. [ 1031.756071][T13437] logitech 0003:046D:C29C.0074: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 1031.837604][T11291] netlink: 'syz.3.17961': attribute type 10 has an invalid length. [ 1031.948457][T13437] logitech 0003:046D:C29C.0074: no inputs found [ 1031.977268][T13437] usb 5-1: USB disconnect, device number 121 [ 1032.326400][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17968'. [ 1032.336063][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17968'. [ 1032.346431][T11306] netlink: 'syz.3.17968': attribute type 11 has an invalid length. [ 1032.380365][T11309] netlink: 188 bytes leftover after parsing attributes in process `syz.1.17969'. [ 1033.830685][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18000'. [ 1034.672939][T11421] netlink: 11 bytes leftover after parsing attributes in process `syz.2.18022'. [ 1034.751655][ T10] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1034.923700][ T10] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 1034.932352][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.943048][ T10] usb 4-1: config 0 has no interface number 0 [ 1034.949235][ T10] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1034.960118][ T10] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1034.978307][ T10] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1034.988361][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.996675][ T10] usb 4-1: Product: syz [ 1035.001004][ T10] usb 4-1: Manufacturer: syz [ 1035.005730][ T10] usb 4-1: SerialNumber: syz [ 1035.013016][ T10] usb 4-1: config 0 descriptor?? [ 1035.111869][T13415] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1035.272339][T13415] usb 3-1: Using ep0 maxpacket: 32 [ 1035.279557][T13415] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.291003][T13415] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.304544][T13415] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1035.314182][T13415] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1035.322649][T13415] usb 3-1: Product: syz [ 1035.326932][T13415] usb 3-1: Manufacturer: syz [ 1035.339258][T13415] hub 3-1:4.0: USB hub found [ 1035.545263][T13415] hub 3-1:4.0: 5 ports detected [ 1035.550990][T13415] hub 3-1:4.0: insufficient power available to use all downstream ports [ 1035.564692][T11436] loop9: detected capacity change from 0 to 7 [ 1035.576508][T11436] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.584896][T11436] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.593647][T11436] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.602012][T11436] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.610013][T11436] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.618821][T11436] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.626993][T11436] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.627591][T13437] usb 4-1: USB disconnect, device number 115 [ 1035.635517][T11436] ldm_validate_partition_table(): Disk read failed. [ 1035.654124][T11436] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.662642][T11436] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.682506][T11436] Buffer I/O error on dev loop9, logical block 0, async page read [ 1035.690678][T11436] Dev loop9: unable to read RDB block 0 [ 1035.697847][T11436] loop9: unable to read partition table [ 1035.704221][T11436] loop9: partition table beyond EOD, truncated [ 1035.710476][T11436] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 1035.710476][T11436] ) failed (rc=-5) [ 1035.763631][T13415] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1035.781000][T13415] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1035.822940][T13415] usb 3-1: USB disconnect, device number 116 [ 1036.085641][T11448] program syz.1.18033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1036.128201][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18034'. [ 1036.363259][T11461] F2FS-fs: Conflicting test_dummy_encryption options [ 1036.373725][T11462] netlink: 'syz.3.18040': attribute type 1 has an invalid length. [ 1036.385104][T11462] netlink: 'syz.3.18040': attribute type 2 has an invalid length. [ 1036.393467][T11462] netlink: 'syz.3.18040': attribute type 1 has an invalid length. [ 1036.411537][T11462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18040'. [ 1036.904176][T13437] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 1037.063180][ T30] audit: type=1326 audit(1776397786.057:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.3.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1037.065801][T13437] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1037.091734][ T30] audit: type=1326 audit(1776397786.077:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.3.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1037.096841][T13437] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1037.119135][ T30] audit: type=1326 audit(1776397786.077:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.3.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1037.149547][ T30] audit: type=1326 audit(1776397786.077:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.3.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1037.173517][T13437] usb 2-1: Product: syz [ 1037.175732][ T30] audit: type=1326 audit(1776397786.077:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.3.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1037.177831][T13437] usb 2-1: Manufacturer: syz [ 1037.200819][ T30] audit: type=1326 audit(1776397786.077:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.3.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1037.200870][ T30] audit: type=1326 audit(1776397786.077:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.3.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1037.200915][ T30] audit: type=1326 audit(1776397786.077:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11497 comm="syz.3.18057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1037.275367][T13437] usb 2-1: SerialNumber: syz [ 1037.288494][T13437] usb 2-1: config 0 descriptor?? [ 1037.413516][T11504] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1037.423810][T11504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1037.507924][T13437] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1037.711353][T13437] peak_usb 2-1:0.0 can0: sending command failure: -8 [ 1037.750057][T13437] peak_usb 2-1:0.0 can0: sending command failure: -8 [ 1037.769606][T13437] peak_usb 2-1:0.0 can0: sending command failure: -8 [ 1037.845444][T13437] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -8 [ 1037.997891][T13437] usb 2-1: USB disconnect, device number 113 [ 1038.026681][T11527] pimreg3: entered allmulticast mode [ 1038.131570][ T6222] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1038.222708][T11535] ALSA: seq fatal error: cannot create timer (-22) [ 1038.301686][ T6222] usb 4-1: Using ep0 maxpacket: 32 [ 1038.309161][ T6222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1038.326564][ T6222] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1038.341387][ T6222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1038.354280][ T6222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1038.370520][ T6222] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1038.380190][ T6222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.388710][ T6222] usb 4-1: Product: syz [ 1038.395104][ T6222] usb 4-1: Manufacturer: syz [ 1038.399839][ T6222] usb 4-1: SerialNumber: syz [ 1038.407459][ T6222] usb 4-1: config 0 descriptor?? [ 1038.417550][ T6222] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input141 [ 1038.481689][T13437] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1038.621707][T13415] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1038.627638][T13440] usb 4-1: USB disconnect, device number 116 [ 1038.638595][T13437] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 1038.662396][T13437] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1038.676511][T13437] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1038.691277][T13437] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1038.730010][T13437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.754712][T13437] usb 5-1: config 0 descriptor?? [ 1038.782379][T13415] usb 3-1: Using ep0 maxpacket: 8 [ 1038.811341][T13415] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1038.832600][T13415] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1038.843440][T13415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.863135][T13415] usb 3-1: Product: syz [ 1038.873893][T13415] usb 3-1: Manufacturer: syz [ 1038.880252][T13415] usb 3-1: SerialNumber: syz [ 1038.895847][T13415] usb 3-1: config 0 descriptor?? [ 1038.910225][T13415] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1038.933994][T13415] usb 3-1: setting power ON [ 1038.938611][T13415] dvb-usb: bulk message failed: -22 (2/0) [ 1038.960541][T13415] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1038.985210][T13415] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1039.004341][T13415] usb 3-1: media controller created [ 1039.045740][T13415] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1039.095466][T13415] usb 3-1: selecting invalid altsetting 6 [ 1039.101357][T13415] usb 3-1: digital interface selection failed (-22) [ 1039.113247][T13415] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1039.128132][T13415] usb 3-1: setting power OFF [ 1039.140195][T13415] dvb-usb: bulk message failed: -22 (2/0) [ 1039.160014][T13415] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1039.176702][T13415] (NULL device *): no alternate interface [ 1039.208720][T13437] corsair-psu 0003:1B1C:1C09.0075: unknown main item tag 0x0 [ 1039.260684][T13437] corsair-psu 0003:1B1C:1C09.0075: unknown main item tag 0x0 [ 1039.280844][T13415] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1039.288741][T13437] corsair-psu 0003:1B1C:1C09.0075: unknown main item tag 0x0 [ 1039.298155][T13415] usb 3-1: USB disconnect, device number 117 [ 1039.311347][T13437] corsair-psu 0003:1B1C:1C09.0075: unknown main item tag 0x0 [ 1039.340216][T13437] corsair-psu 0003:1B1C:1C09.0075: unknown main item tag 0x0 [ 1039.399024][T13437] corsair-psu 0003:1B1C:1C09.0075: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 1039.503008][T13437] corsair-psu 0003:1B1C:1C09.0075: unable to initialize device (-90) [ 1039.533593][T13437] corsair-psu 0003:1B1C:1C09.0075: probe with driver corsair-psu failed with error -90 [ 1039.579110][T13437] usb 5-1: USB disconnect, device number 122 [ 1039.940407][T11588] ALSA: mixer_oss: invalid OSS volume '01777777777777777777777' [ 1040.070829][T11596] team_slave_1: Caught tx_queue_len zero misconfig [ 1040.191551][T13437] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1040.371559][T13437] usb 3-1: Using ep0 maxpacket: 16 [ 1040.400622][T13437] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.433148][T13437] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1040.470345][T13437] usb 3-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1040.503310][T13437] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.534889][T13437] usb 3-1: config 0 descriptor?? [ 1040.578604][T11620] hsr0: entered promiscuous mode [ 1040.600679][T11620] hsr0: left promiscuous mode [ 1040.981682][T13437] kye 0003:0458:5019.0076: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1041.005126][T13437] kye 0003:0458:5019.0076: unknown main item tag 0x2 [ 1041.021849][T13437] kye 0003:0458:5019.0076: unknown main item tag 0x0 [ 1041.030193][T13437] kye 0003:0458:5019.0076: unknown main item tag 0x0 [ 1041.051550][T13437] kye 0003:0458:5019.0076: unknown main item tag 0x0 [ 1041.058389][T13437] kye 0003:0458:5019.0076: unknown main item tag 0x0 [ 1041.080422][T13437] kye 0003:0458:5019.0076: hidraw0: USB HID vff.fc Device [HID 0458:5019] on usb-dummy_hcd.2-1/input0 [ 1041.121553][T13437] kye 0003:0458:5019.0076: tablet-enabling feature report not found [ 1041.138054][T13437] kye 0003:0458:5019.0076: tablet enabling failed [ 1041.223224][ T10] usb 3-1: USB disconnect, device number 118 [ 1041.727996][ C1] sd 0:0:1:0: [sda] tag#7832 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1041.738554][ C1] sd 0:0:1:0: [sda] tag#7832 CDB: Read(6) 08 00 06 07 01 00 fc 7f 00 00 00 00 [ 1041.928567][T11669] vlan2: entered promiscuous mode [ 1041.940292][T11669] geneve1: entered promiscuous mode [ 1041.948780][T11669] vlan2: entered allmulticast mode [ 1041.955550][T11669] geneve1: entered allmulticast mode [ 1042.171556][T13437] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1042.334510][T13437] usb 2-1: Using ep0 maxpacket: 32 [ 1042.345206][T13437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1042.366766][T13437] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1042.392369][T13437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1042.421948][T13437] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1042.432101][T13437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.440297][T13437] usb 2-1: Product: syz [ 1042.453888][T13437] usb 2-1: Manufacturer: syz [ 1042.459884][T13437] usb 2-1: SerialNumber: syz [ 1042.477093][T13437] usb 2-1: config 0 descriptor?? [ 1042.515384][T13437] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input142 [ 1042.769846][T13415] usb 2-1: USB disconnect, device number 114 [ 1042.776415][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 1042.811858][ T6222] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1042.975199][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18155'. [ 1042.994046][ T6222] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1043.008095][ T6222] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1043.044597][ T6222] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1043.056283][ T6222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.065842][ T6222] usb 5-1: Product: syz [ 1043.070382][ T6222] usb 5-1: Manufacturer: syz [ 1043.075538][ T6222] usb 5-1: SerialNumber: syz [ 1043.107657][ T6222] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1043.190765][T13437] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1043.314508][T11724] netlink: 'syz.3.18161': attribute type 1 has an invalid length. [ 1043.480515][ T6222] usb 5-1: USB disconnect, device number 123 [ 1043.751575][T28501] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1043.803204][T13415] hid-generic 0000:0003:0001.0077: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1043.887317][T11746] fido_id[11746]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1043.953878][T28501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12592, setting to 64 [ 1043.987208][T28501] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1044.013299][T28501] usb 3-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 1044.034611][T28501] usb 3-1: Manufacturer: syz [ 1044.060019][T28501] usb 3-1: config 0 descriptor?? [ 1044.068957][T11732] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1044.235247][T13437] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1044.255106][T13437] ath9k_htc: Failed to initialize the device [ 1044.262934][ T6222] usb 5-1: ath9k_htc: USB layer deinitialized [ 1044.488532][T28501] hid_parser_main: 35 callbacks suppressed [ 1044.488559][T28501] elan 0003:04F3:0755.0078: unknown main item tag 0x0 [ 1044.515548][T28501] elan 0003:04F3:0755.0078: unknown main item tag 0x0 [ 1044.519499][T11775] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18185'. [ 1044.547397][T28501] elan 0003:04F3:0755.0078: unknown main item tag 0x0 [ 1044.567731][T28501] elan 0003:04F3:0755.0078: unknown main item tag 0x0 [ 1044.579463][ T6222] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1044.593446][T28501] elan 0003:04F3:0755.0078: unknown main item tag 0x0 [ 1044.616143][T28501] elan 0003:04F3:0755.0078: hidraw0: USB HID v1.01 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1044.690562][T28501] usb 3-1: USB disconnect, device number 119 [ 1044.752244][ T6222] usb 5-1: Using ep0 maxpacket: 32 [ 1044.769209][ T6222] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1044.790163][ T6222] usb 5-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1044.823913][T11782] fido_id[11782]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1044.844934][ T6222] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 1044.854950][ T6222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.874536][ T6222] usb 5-1: Product: syz [ 1044.884660][ T6222] usb 5-1: Manufacturer: syz [ 1044.898566][ T6222] usb 5-1: SerialNumber: syz [ 1044.960044][ T6222] ldusb 5-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 1045.166776][T13415] usb 5-1: USB disconnect, device number 124 [ 1045.194517][T13415] ldusb 5-1:1.0: LD USB Device #0 now disconnected [ 1045.550863][T11814] netlink: 56 bytes leftover after parsing attributes in process `syz.3.18203'. [ 1045.561526][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1045.721822][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1045.738521][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1045.738559][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.738582][ T10] usb 2-1: Product: syz [ 1045.738600][ T10] usb 2-1: Manufacturer: syz [ 1045.738617][ T10] usb 2-1: SerialNumber: syz [ 1045.794814][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1045.794847][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 1045.822400][ T30] audit: type=1800 audit(1776397794.807:840): pid=11818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.18205" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 1046.024897][ T10] r8152-cfgselector 2-1: Needed 1 retries to read version [ 1046.054231][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1046.074517][ T10] r8152-cfgselector 2-1: No union descriptors [ 1046.249543][T13415] r8152-cfgselector 2-1: USB disconnect, device number 115 [ 1046.490982][T11840] [U]  [ 1046.708361][T11855] 9p: p9: multiple sources not supported [ 1046.785068][T13415] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1046.941214][ T30] audit: type=1326 audit(1776397795.927:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11861 comm="syz.1.18226" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09f199c819 code=0x0 [ 1046.981743][T13415] usb 3-1: Using ep0 maxpacket: 16 [ 1047.007868][T13415] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1047.018880][T13415] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1047.035050][T13415] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1047.054295][T13415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.068674][T13415] usb 3-1: Product: syz [ 1047.073289][T13415] usb 3-1: Manufacturer: syz [ 1047.078014][T13415] usb 3-1: SerialNumber: syz [ 1047.315953][T13415] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 1047.355692][T13415] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1047.511344][T13415] usb 3-1: 2:1 : can't get High Capability descriptor [ 1047.808104][T13415] usb 3-1: USB disconnect, device number 120 [ 1047.988096][T11900] netlink: 84 bytes leftover after parsing attributes in process `syz.0.18243'. [ 1048.091870][T13437] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1048.251951][T13437] usb 5-1: Using ep0 maxpacket: 32 [ 1048.269484][T13437] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1048.280147][T13437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.291113][T13437] usb 5-1: Product: syz [ 1048.296400][T13437] usb 5-1: Manufacturer: syz [ 1048.301161][T13437] usb 5-1: SerialNumber: syz [ 1048.308792][T13437] usb 5-1: config 0 descriptor?? [ 1048.317866][T13437] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1048.325876][T13437] dvb-usb: bulk message failed: -22 (4/0) [ 1048.341546][T13437] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1048.357714][T13437] dvb-usb: bulk message failed: -22 (5/0) [ 1048.366300][T13437] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1048.403301][T13437] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1048.422075][ T6222] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1048.433044][T13437] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1048.441361][T13437] usb 5-1: media controller created [ 1048.493608][T13437] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1048.536393][T13437] usb 5-1: selecting invalid altsetting 3 [ 1048.551600][T13437] ttusb2: set interface to alts=3 failed [ 1048.583998][ T6222] usb 4-1: Using ep0 maxpacket: 8 [ 1048.594074][ T6222] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.613094][ T6222] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1048.640379][ T6222] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1048.647648][T13437] DVB: Unable to find symbol tda10086_attach() [ 1048.655268][T13437] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1048.663563][ T6222] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1048.675287][ T6222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.675548][T13437] dvb-usb: bulk message failed: -22 (4/0) [ 1048.691958][T13437] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1048.703439][ T6222] usb 4-1: config 0 descriptor?? [ 1048.725492][T13437] dvb-usb: bulk message failed: -22 (5/0) [ 1048.735882][T13437] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1048.746424][T13437] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1048.761694][T13437] usb 5-1: USB disconnect, device number 125 [ 1048.814964][T13437] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1049.131869][ T6222] sony 0003:054C:0268.0079: unknown main item tag 0x6 [ 1049.138973][ T6222] sony 0003:054C:0268.0079: invalid report_size 26545 [ 1049.146972][ T6222] sony 0003:054C:0268.0079: item 0 2 1 7 parsing failed [ 1049.155790][ T6222] sony 0003:054C:0268.0079: parse failed [ 1049.162065][ T6222] sony 0003:054C:0268.0079: probe with driver sony failed with error -22 [ 1049.356043][T28501] usb 4-1: USB disconnect, device number 117 [ 1049.371871][T13437] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1049.523234][T13437] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.534028][T13437] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1049.543775][T13437] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.572806][ T6222] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1049.588224][T13437] usb 2-1: config 0 descriptor?? [ 1049.741775][ T6222] usb 5-1: Using ep0 maxpacket: 16 [ 1049.749542][ T6222] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.767239][ T6222] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.777881][ T6222] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1049.791609][ T6222] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1049.798336][ T6222] usb 5-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1049.815775][ T6222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.830809][ T6222] usb 5-1: config 0 descriptor?? [ 1050.018384][T13437] ath6kl: Failed to read usb control message: -32 [ 1050.029228][T13437] ath6kl: Unable to read the bmi data from the device: -32 [ 1050.037166][T13437] ath6kl: Unable to recv target info: -32 [ 1050.060416][T13437] ath6kl: Failed to init ath6kl core: -32 [ 1050.067891][T13437] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -32 [ 1050.088750][T13437] usb 2-1: USB disconnect, device number 116 [ 1050.094824][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1050.251809][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1050.259111][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1050.273692][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1050.280571][ T6222] uclogic 0003:5543:0003.007A: unknown main item tag 0x0 [ 1050.283731][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1050.295604][ T6222] uclogic 0003:5543:0003.007A: unknown main item tag 0x0 [ 1050.307063][ T10] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1050.312152][ T6222] uclogic 0003:5543:0003.007A: unknown main item tag 0x0 [ 1050.328178][ T6222] uclogic 0003:5543:0003.007A: unknown main item tag 0x0 [ 1050.329131][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.336277][ T6222] uclogic 0003:5543:0003.007A: unknown main item tag 0x0 [ 1050.355088][ T10] usb 3-1: config 0 descriptor?? [ 1050.361922][ T6222] uclogic 0003:5543:0003.007A: unknown main item tag 0x0 [ 1050.370087][ T6222] uclogic 0003:5543:0003.007A: unknown main item tag 0x0 [ 1050.377941][ T6222] uclogic 0003:5543:0003.007A: unknown main item tag 0x0 [ 1050.387000][ T6222] uclogic 0003:5543:0003.007A: unknown main item tag 0x0 [ 1050.394708][ T6222] uclogic 0003:5543:0003.007A: unknown main item tag 0x0 [ 1050.405317][ T6222] uclogic 0003:5543:0003.007A: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.4-1/input0 [ 1050.529406][ T6222] usb 5-1: USB disconnect, device number 126 [ 1050.802005][ T10] hid-multitouch 0003:0457:07DA.007B: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 1051.045563][ T10] usb 3-1: USB disconnect, device number 121 [ 1051.849842][T12018] xt_hashlimit: size too large, truncated to 1048576 [ 1052.197131][ T30] audit: type=1326 audit(1776397801.187:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.18302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1052.249100][ T30] audit: type=1326 audit(1776397801.187:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.18302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1052.316813][ T30] audit: type=1326 audit(1776397801.227:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.18302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1052.367265][ T30] audit: type=1326 audit(1776397801.227:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.18302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1052.455221][ T30] audit: type=1326 audit(1776397801.227:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.18302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1052.528115][ T30] audit: type=1326 audit(1776397801.227:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.18302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1052.591745][T12041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18306'. [ 1052.604335][ T30] audit: type=1326 audit(1776397801.227:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.18302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1052.608857][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18306'. [ 1052.666343][ T30] audit: type=1326 audit(1776397801.237:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.18302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1052.737764][ T30] audit: type=1326 audit(1776397801.237:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.18302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1052.787966][ T30] audit: type=1326 audit(1776397801.237:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.18302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fd96999c819 code=0x7ffc0000 [ 1054.641053][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.649142][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.468416][T12155] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.18359'. [ 1055.577314][T12162] tipc: Enabling of bearer rejected, failed to enable media [ 1057.022368][T13415] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1057.196244][T13415] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1057.220437][T13415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.257310][T13415] usb 4-1: Product: syz [ 1057.269867][T13415] usb 4-1: Manufacturer: syz [ 1057.282043][T13415] usb 4-1: SerialNumber: syz [ 1057.285272][T12232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1057.939668][T13415] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 1057.972869][T13415] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1057.997200][T13415] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1058.031812][T13415] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1058.062945][T13415] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1058.108134][T13415] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1058.153451][T13415] usb 4-1: USB disconnect, device number 118 [ 1058.345707][T12257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.614487][T12267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1059.471580][ T6222] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1059.651562][ T6222] usb 4-1: Using ep0 maxpacket: 8 [ 1059.658601][ T6222] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1059.668282][ T6222] usb 4-1: config 140 has an invalid interface number: 182 but max is 1 [ 1059.677180][ T6222] usb 4-1: config 140 has no interface number 1 [ 1059.684121][ T6222] usb 4-1: config 140 interface 182 has no altsetting 0 [ 1059.693213][ T6222] usb 4-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 1059.702680][ T6222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.710699][ T6222] usb 4-1: Product: syz [ 1059.714969][ T6222] usb 4-1: Manufacturer: syz [ 1059.719604][ T6222] usb 4-1: SerialNumber: syz [ 1059.843264][T12317] program syz.1.18437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1059.944745][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18439'. [ 1059.951064][ T6222] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 1060.592771][ T6222] usb 4-1: reset high-speed USB device number 119 using dummy_hcd [ 1060.768353][ T6222] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1060.802727][ T6222] usb 4-1: device firmware changed [ 1060.831340][ T6222] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1060.839340][ T6222] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1060.861715][T28501] usb 4-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 1060.873219][ T6222] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 1060.886550][T28501] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 1060.902134][T12354] sit0: entered promiscuous mode [ 1060.906284][ T6222] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1060.929760][T12354] netlink: 'syz.2.18454': attribute type 1 has an invalid length. [ 1060.933592][ T6222] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 1060.950313][T12354] netlink: 9 bytes leftover after parsing attributes in process `syz.2.18454'. [ 1060.968620][ T6222] usb 4-1: USB disconnect, device number 119 [ 1061.022939][ T6222] usb 4-1: [ueagle-atm] ADSL device removed [ 1061.681776][T12393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18473'. [ 1062.286891][T12425] netlink: 'syz.4.18488': attribute type 29 has an invalid length. [ 1062.301608][T12425] netlink: 148 bytes leftover after parsing attributes in process `syz.4.18488'. [ 1062.524333][T12434] macsec1: entered promiscuous mode [ 1062.529653][T12434] dummy0: entered promiscuous mode [ 1062.537647][T12434] macsec1: entered allmulticast mode [ 1062.547722][T12434] dummy0: left promiscuous mode [ 1063.580908][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18521'. [ 1064.099335][T12518] netlink: 'syz.2.18534': attribute type 1 has an invalid length. [ 1064.734733][ T10] hid-generic 0081:0011:FFFFFF81.007C: item fetching failed at offset 2/5 [ 1064.762451][ T10] hid-generic 0081:0011:FFFFFF81.007C: probe with driver hid-generic failed with error -22 [ 1065.203163][T12577] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 1065.657107][T12605] ip6gre4: entered promiscuous mode [ 1065.664949][T28502] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 1065.669499][T12605] ip6gre4: entered allmulticast mode [ 1065.834920][T28502] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1065.856028][T28502] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.880576][T28502] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1065.888831][T28502] usb 2-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 1065.900124][T28502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.936670][T12618] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18582'. [ 1065.948575][T28502] usb 2-1: config 0 descriptor?? [ 1065.951173][T12618] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18582'. [ 1066.416743][T28502] hid_parser_main: 28 callbacks suppressed [ 1066.416771][T28502] apple 0003:05AC:0320.007D: unknown main item tag 0x0 [ 1066.444213][T28502] apple 0003:05AC:0320.007D: unknown main item tag 0x0 [ 1066.459422][T28502] apple 0003:05AC:0320.007D: unknown main item tag 0x0 [ 1066.477188][T28502] apple 0003:05AC:0320.007D: unknown main item tag 0x0 [ 1066.496425][T28502] apple 0003:05AC:0320.007D: unknown main item tag 0x0 [ 1066.522598][T28502] apple 0003:05AC:0320.007D: unknown main item tag 0x0 [ 1066.542023][T28502] apple 0003:05AC:0320.007D: unknown main item tag 0x0 [ 1066.554940][T28502] apple 0003:05AC:0320.007D: unknown main item tag 0x0 [ 1066.567877][T28502] apple 0003:05AC:0320.007D: unknown main item tag 0x0 [ 1066.576496][T28502] apple 0003:05AC:0320.007D: unknown main item tag 0x0 [ 1066.625347][T28502] apple 0003:05AC:0320.007D: hidraw0: USB HID v7f.fd Device [HID 05ac:0320] on usb-dummy_hcd.1-1/input0 [ 1066.669168][T28502] usb 2-1: USB disconnect, device number 117 [ 1066.839474][T12647] fido_id[12647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1067.201551][T28502] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1067.351672][T28502] usb 3-1: Using ep0 maxpacket: 32 [ 1067.368904][T28502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.391859][T28502] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.401949][T28502] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1067.415739][T28502] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1067.425906][T28502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.459915][T28502] usb 3-1: config 0 descriptor?? [ 1067.915623][T28502] kye 0003:0458:5016.007E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1067.956416][T28502] kye 0003:0458:5016.007E: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 1067.980126][T28502] kye 0003:0458:5016.007E: tablet-enabling feature report not found [ 1068.002808][T13440] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1068.016257][T28502] kye 0003:0458:5016.007E: tablet enabling failed [ 1068.123901][T28502] usb 3-1: USB disconnect, device number 122 [ 1068.183478][T13440] usb 5-1: Using ep0 maxpacket: 8 [ 1068.192170][T13415] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1068.201273][T13440] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1068.211286][T13440] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1068.225443][T13440] usb 5-1: string descriptor 0 read error: -22 [ 1068.235970][T13440] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1068.251617][T13440] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1068.279798][T13440] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1068.294089][T13440] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1068.306617][T13440] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1068.315380][T13440] usb 5-1: media controller created [ 1068.346157][T13440] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1068.351801][T13415] usb 4-1: Using ep0 maxpacket: 32 [ 1068.379383][T13415] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1068.410383][T13415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.435506][T13415] usb 4-1: config 0 descriptor?? [ 1068.456767][T13415] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1068.484430][T13440] zl10353_read_register: readreg error (reg=127, ret==0) [ 1068.591984][T13440] usb 5-1: USB disconnect, device number 127 [ 1068.805634][T12711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18626'. [ 1069.074739][T13415] gspca_vc032x: reg_w err -71 [ 1069.082094][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.100509][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.106116][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.120792][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.133111][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.143530][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.158127][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.172045][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.181570][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.201782][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.207450][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.221522][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.226901][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.241567][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.251850][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.261724][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.273103][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.288775][T13415] gspca_vc032x: I2c Bus Busy Wait 00 [ 1069.296294][T13415] gspca_vc032x: Unknown sensor... [ 1069.311933][T13415] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1069.327803][T13415] usb 4-1: USB disconnect, device number 120 [ 1069.795688][T12743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18642'. [ 1069.992693][T13415] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1070.155134][T13415] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1070.172140][T13415] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1070.201319][T13415] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1070.216749][T13415] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.237233][T13415] usb 3-1: Product: syz [ 1070.246270][T13415] usb 3-1: Manufacturer: syz [ 1070.257016][T13415] usb 3-1: SerialNumber: syz [ 1070.273738][T13415] usb 3-1: config 0 descriptor?? [ 1070.290400][T13415] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1070.323377][T12758] syz_tun: refused to change device tx_queue_len [ 1070.340071][T12758] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1070.948709][T13415] usb 3-1: USB disconnect, device number 123 [ 1071.016168][T12770] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1071.029504][T12770] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1071.040313][T12770] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1071.611674][T28502] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1071.641807][T13440] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1071.771900][T28502] usb 5-1: Using ep0 maxpacket: 16 [ 1071.797690][T28502] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.832548][T13440] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1071.846299][T28502] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.859233][T13440] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.876677][T28502] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1071.889552][T13440] usb 2-1: config 0 descriptor?? [ 1071.897295][T28502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.927537][T28502] usb 5-1: config 0 descriptor?? [ 1072.311283][T13440] hackrf 2-1:0.0: Board ID: 00 [ 1072.321299][T13440] hackrf 2-1:0.0: Firmware version: [ 1072.321843][ T10] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1072.355867][T13440] hackrf 2-1:0.0: Registered as swradio24 [ 1072.377226][T13440] videodev: could not get a free minor [ 1072.392555][T28502] bigben 0003:146B:0902.007F: unexpected rdesc, please submit for review [ 1072.411531][T13440] hackrf 2-1:0.0: Failed to register as video device (-23) [ 1072.424351][T28502] hid_parser_main: 473 callbacks suppressed [ 1072.424379][T28502] bigben 0003:146B:0902.007F: unknown main item tag 0x0 [ 1072.455918][T13440] hackrf 2-1:0.0: probe with driver hackrf failed with error -23 [ 1072.465090][T28502] bigben 0003:146B:0902.007F: unknown main item tag 0x0 [ 1072.492930][T28502] bigben 0003:146B:0902.007F: unknown main item tag 0x0 [ 1072.502675][T28502] bigben 0003:146B:0902.007F: unknown main item tag 0x0 [ 1072.507808][ T10] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1072.521598][T28502] bigben 0003:146B:0902.007F: item fetching failed at offset 4/5 [ 1072.525365][T13415] usb 2-1: USB disconnect, device number 118 [ 1072.536183][T28502] bigben 0003:146B:0902.007F: parse failed [ 1072.542402][T28502] bigben 0003:146B:0902.007F: probe with driver bigben failed with error -22 [ 1072.558392][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1072.576076][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1072.592874][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1072.593895][T28502] usb 5-1: USB disconnect, device number 2 [ 1072.609468][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1072.637717][ T10] usb 4-1: Product: syz [ 1072.660219][ T10] usb 4-1: Manufacturer: syz [ 1072.672786][ T10] usb 4-1: SerialNumber: syz [ 1072.699598][ T10] usb 4-1: config 0 descriptor?? [ 1072.715928][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 1072.735132][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1072.769277][ T10] usb 4-1: selecting invalid altsetting 0 [ 1073.134926][T28502] usb 4-1: USB disconnect, device number 121 [ 1073.161861][ T10] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 1073.334484][ T10] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1073.354987][ T10] usb 3-1: config 0 interface 0 altsetting 67 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1073.367448][ T10] usb 3-1: config 0 interface 0 altsetting 67 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1073.381932][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1073.388622][ T10] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1073.398569][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.418038][ T10] usb 3-1: config 0 descriptor?? [ 1073.427350][T12837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1073.860245][ T10] petalynx 0003:18B1:0037.0080: unknown main item tag 0x0 [ 1073.889513][ T10] petalynx 0003:18B1:0037.0080: unknown main item tag 0x0 [ 1073.905501][ T10] petalynx 0003:18B1:0037.0080: unknown main item tag 0x0 [ 1073.926714][ T10] petalynx 0003:18B1:0037.0080: unknown main item tag 0x0 [ 1073.938530][ T10] petalynx 0003:18B1:0037.0080: unknown main item tag 0x0 [ 1073.948234][ T10] petalynx 0003:18B1:0037.0080: unknown main item tag 0x0 [ 1073.972449][ T10] petalynx 0003:18B1:0037.0080: hidraw0: USB HID v0.01 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0 [ 1074.133552][ T10] usb 3-1: USB disconnect, device number 124 [ 1074.381814][T12881] input: syz0 as /devices/virtual/input/input143 [ 1074.828876][T12898] netlink: 'syz.2.18715': attribute type 29 has an invalid length. [ 1074.863174][T12898] netlink: 'syz.2.18715': attribute type 29 has an invalid length. [ 1075.242620][T13440] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1075.400154][T12924] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1075.432969][T13440] usb 5-1: Using ep0 maxpacket: 32 [ 1075.443834][T13440] usb 5-1: config 0 has no interfaces? [ 1075.464812][T13440] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1075.479467][T13440] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.490960][T13440] usb 5-1: Product: syz [ 1075.496271][T13440] usb 5-1: Manufacturer: syz [ 1075.501073][T13440] usb 5-1: SerialNumber: syz [ 1075.510480][T13440] usb 5-1: config 0 descriptor?? [ 1075.752001][T13440] usb 5-1: USB disconnect, device number 3 [ 1075.773607][T12937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1076.113715][T28502] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1076.271509][T28502] usb 3-1: Using ep0 maxpacket: 8 [ 1076.287956][T28502] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1076.318581][T28502] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1076.348737][T28502] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1076.370957][T28502] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1076.394672][T28502] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1076.409237][T28502] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1076.437846][T28502] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1076.452080][T28502] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1076.460367][T28502] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1076.480688][T28502] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1076.501676][T28502] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1076.514366][T28502] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1076.526836][T28502] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1076.539625][T28502] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1076.553734][T28502] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1076.567450][T28502] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1076.580408][T28502] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1076.591593][T28502] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1076.612238][T28502] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1076.632499][T28502] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1076.661536][T28502] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1076.678389][T28502] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1076.693460][T28502] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1076.707524][T28502] usb 3-1: config 168 interface 0 has no altsetting 0 [ 1076.721331][T28502] usb 3-1: string descriptor 0 read error: -22 [ 1076.728050][T28502] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1076.741706][T28502] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.778612][T28502] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1077.034845][T10939] usb 3-1: USB disconnect, device number 125 [ 1077.141709][T28502] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1077.304911][T28502] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.318162][T28502] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1077.330254][T28502] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1077.340100][T28502] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1077.348414][T28502] usb 5-1: SerialNumber: syz [ 1077.580533][T28502] usb 5-1: 0:2 : does not exist [ 1077.666340][T28502] usb 5-1: USB disconnect, device number 4 [ 1077.740363][T25232] udevd[25232]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1078.544277][T13048] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.18785'. [ 1078.835775][T13061] input: syz0 as /devices/virtual/input/input144 [ 1079.074479][T13069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.841596][T10938] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1080.006701][T10938] usb 2-1: Using ep0 maxpacket: 16 [ 1080.022824][T10938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1080.054732][T10938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1080.072024][T10938] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1080.094523][T10938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.116432][T10938] usb 2-1: config 0 descriptor?? [ 1080.322933][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18811'. [ 1080.752717][T10938] usb 2-1: string descriptor 0 read error: -71 [ 1080.795460][T10938] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 1080.813050][T10938] letsketch 0003:6161:4D15.0081: probe with driver letsketch failed with error -32 [ 1080.845501][T10938] usb 2-1: USB disconnect, device number 119 [ 1080.978492][T13133] netlink: 'syz.3.18821': attribute type 13 has an invalid length. [ 1081.112692][T13133] bridge0: port 1(bond0) entered disabled state [ 1082.077767][T13164] bond0: Caught tx_queue_len zero misconfig [ 1082.600682][T13185] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1082.607463][T13185] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1082.620114][T13185] vhci_hcd vhci_hcd.0: Device attached [ 1082.855044][T10938] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1082.881882][T13415] usb 4-1: new low-speed USB device number 122 using dummy_hcd [ 1083.055432][T13415] usb 4-1: config 0 has no interfaces? [ 1083.071821][T13415] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1083.086339][T13415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.115012][T13415] usb 4-1: config 0 descriptor?? [ 1083.149102][T13209] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.18854'. [ 1083.176407][T13211] veth1_to_team: Caught tx_queue_len zero misconfig [ 1083.185192][T13211] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18855'. [ 1083.359149][T13186] usbip_core: unknown command [ 1083.362252][T13415] usb 4-1: USB disconnect, device number 122 [ 1083.374487][T13186] vhci_hcd: unknown pdu 0 [ 1083.386107][T13186] usbip_core: unknown command [ 1083.415341][ T48] vhci_hcd vhci_hcd.3: stop threads [ 1083.420860][ T48] vhci_hcd vhci_hcd.3: release socket [ 1083.438944][ T48] vhci_hcd vhci_hcd.3: disconnect device [ 1083.450124][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1083.450145][ T30] audit: type=1326 audit(1776397832.437:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13223 comm="syz.4.18861" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f883f99c819 code=0x0 [ 1083.493325][T10938] usb 39-1: device descriptor read/64, error -71 [ 1083.671863][T10938] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1084.362480][T13259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18875'. [ 1084.374591][T13259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18875'. [ 1084.403148][T28502] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1084.498882][T13264] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 1084.513334][T13264] macsec1: entered promiscuous mode [ 1084.518969][T13264] macsec1: entered allmulticast mode [ 1084.524915][T13264] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 1084.561756][T28502] usb 4-1: Using ep0 maxpacket: 32 [ 1084.578573][T28502] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 1084.612004][T28502] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1084.634097][T28502] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1084.648548][T28502] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1084.660252][T28502] usb 4-1: Product: syz [ 1084.665321][T28502] usb 4-1: Manufacturer: syz [ 1084.673709][T28502] usb 4-1: SerialNumber: syz [ 1084.691181][T28502] usb 4-1: config 0 descriptor?? [ 1084.699499][T13246] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1084.918034][T13415] usb 4-1: USB disconnect, device number 123 [ 1085.176897][T13287] program syz.4.18889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1085.370322][T13296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1086.282232][T13329] xt_hashlimit: size too large, truncated to 1048576 [ 1086.437280][T13337] program syz.4.18912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1086.584917][T13340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18914'. [ 1086.590981][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18913'. [ 1086.623051][T13341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.633291][T13341] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.244556][T13399] input: syz1 as /devices/virtual/input/input145 [ 1088.760254][T13430] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1089.372149][T13462] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18967'. [ 1089.391595][T10939] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1089.563785][T10939] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.579146][T10939] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1089.595250][T10939] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1089.621781][T10939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.632859][T10939] usb 2-1: Product: syz [ 1089.637105][T10939] usb 2-1: Manufacturer: syz [ 1089.643365][T10939] usb 2-1: SerialNumber: syz [ 1089.862143][T13452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.875046][T13452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.898023][T10939] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1089.914749][T10939] usb 2-1: USB disconnect, device number 120 [ 1090.026710][T13490] tipc: New replicast peer: 255.255.255.255 [ 1090.033737][T28502] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1090.033911][T13490] tipc: Enabled bearer , priority 0 [ 1090.201587][ T6222] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1090.209281][T28502] usb 3-1: Using ep0 maxpacket: 8 [ 1090.218204][T28502] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1090.226891][T28502] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1090.237097][T28502] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1090.246951][T28502] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1090.257320][T28502] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1090.270470][T28502] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1090.279704][T28502] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.387107][ T6222] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1090.397039][ T6222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.405190][ T6222] usb 5-1: Product: syz [ 1090.409414][ T6222] usb 5-1: Manufacturer: syz [ 1090.414666][ T6222] usb 5-1: SerialNumber: syz [ 1090.426462][ T6222] usb 5-1: config 0 descriptor?? [ 1090.451704][T10939] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1090.500097][T28502] usb 3-1: GET_CAPABILITIES returned 0 [ 1090.505954][T28502] usbtmc 3-1:16.0: can't read capabilities [ 1090.544566][T13498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1090.604428][T10939] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 1090.613328][T10939] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.625513][T10939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1090.637172][T10939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 1090.652963][T10939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1090.664502][ T6222] usb 5-1: ignoring: probably an ADSL modem [ 1090.672517][T10939] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.682773][T10939] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1090.692024][T10939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.740710][T10938] usb 3-1: USB disconnect, device number 126 [ 1090.807735][T13505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1090.916850][T10939] usb 2-1: usb_control_msg returned -71 [ 1090.923699][T10939] usbtmc 2-1:16.0: can't read capabilities [ 1090.930933][T10939] usbtmc 2-1:16.0: Failed to submit iin_urb [ 1090.937743][T10939] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -90 [ 1090.967065][T10939] usb 2-1: USB disconnect, device number 121 [ 1091.066320][ T6222] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1091.277591][T10938] usb 5-1: USB disconnect, device number 5 [ 1091.292269][T13415] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1091.454667][T13415] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1091.468271][T13415] usb 4-1: config 0 has no interface number 0 [ 1091.475271][T13415] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1091.494074][T13415] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1091.505068][T13415] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.518664][T13415] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1091.529227][T13415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.541064][T13415] usb 4-1: config 0 descriptor?? [ 1092.189328][T13415] input: HID 28bd:0042 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0042.0082/input/input146 [ 1092.342021][T13415] uclogic 0003:28BD:0042.0082: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.3-1/input1 [ 1092.345261][T13551] team0: Caught tx_queue_len zero misconfig [ 1092.404712][T13415] usb 4-1: USB disconnect, device number 124 [ 1092.435893][T13554] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.19005'. [ 1092.530872][T13552] fido_id[13552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1093.470811][T13588] sg_write: data in/out 410588/66 bytes for SCSI command 0x0-- guessing data in; [ 1093.470811][T13588] program syz.1.19021 not setting count and/or reply_len properly [ 1093.566685][T13594] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19023'. [ 1094.147269][T13625] netlink: 'syz.3.19038': attribute type 30 has an invalid length. [ 1094.433042][T13639] netlink: 228 bytes leftover after parsing attributes in process `syz.3.19045'. [ 1094.741850][T10940] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1094.792692][T13647] veth0: Caught tx_queue_len zero misconfig [ 1094.896281][T10940] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1094.903972][T10940] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1094.920372][T10940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.938037][T10940] usb 4-1: config 0 descriptor?? [ 1095.373953][T10940] hid_parser_main: 32 callbacks suppressed [ 1095.373981][T10940] hid_mf 0003:0079:1846.0083: unknown main item tag 0x0 [ 1095.394220][T10940] hid_mf 0003:0079:1846.0083: unknown main item tag 0x0 [ 1095.412285][T10940] hid_mf 0003:0079:1846.0083: unknown main item tag 0x0 [ 1095.432678][T10940] hid_mf 0003:0079:1846.0083: unknown main item tag 0x0 [ 1095.446499][T10940] hid_mf 0003:0079:1846.0083: unknown main item tag 0x0 [ 1095.453679][T10940] hid_mf 0003:0079:1846.0083: unknown main item tag 0x0 [ 1095.460920][T10940] hid_mf 0003:0079:1846.0083: report_id 7532 is invalid [ 1095.469203][T10940] hid_mf 0003:0079:1846.0083: item 0 4 1 8 parsing failed [ 1095.490371][T10940] hid_mf 0003:0079:1846.0083: HID parse failed. [ 1095.502457][T10940] hid_mf 0003:0079:1846.0083: probe with driver hid_mf failed with error -22 [ 1095.599956][T10940] usb 4-1: USB disconnect, device number 125 [ 1096.084675][T13687] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19067'. [ 1096.345430][T13695] netlink: 'syz.4.19071': attribute type 10 has an invalid length. [ 1096.347852][ T30] audit: type=1326 audit(1776397845.337:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.0.19070" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3649b9c819 code=0x0 [ 1096.378510][T13695] veth0_vlan: left promiscuous mode [ 1096.393802][T13695] veth0_vlan: entered promiscuous mode [ 1096.407731][T13695] team0: Device veth0_vlan failed to register rx_handler [ 1096.461991][T10940] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1096.623853][T10940] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1096.641780][T10940] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1096.654666][T10940] usb 2-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 1096.668927][T10940] usb 2-1: config 220 has no interface number 2 [ 1096.679122][T10940] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1096.702032][T10940] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1096.720108][T10940] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1096.732044][T10940] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1096.749408][T10940] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1096.759704][T10940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.768937][T10940] usb 2-1: Product: syz [ 1096.773888][T10940] usb 2-1: Manufacturer: syz [ 1096.778727][T10940] usb 2-1: SerialNumber: syz [ 1097.019856][T10940] usb 2-1: selecting invalid altsetting 0 [ 1097.021132][T13722] netlink: 300 bytes leftover after parsing attributes in process `syz.2.19082'. [ 1097.053387][T10940] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1097.060782][T10940] uvcvideo 2-1:220.0: No valid video chain found. [ 1097.076367][T10940] usb 2-1: selecting invalid altsetting 0 [ 1097.082459][T10940] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1097.095997][T10940] usb 2-1: USB disconnect, device number 122 [ 1097.643229][T10939] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1097.801618][T13745] input: syz0 as /devices/virtual/input/input147 [ 1097.813417][T10939] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1097.850527][T10939] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1097.890785][T10939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1097.926698][T10939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1097.977845][T10939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1097.993105][T10939] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1098.006838][T10939] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1098.021728][T10939] usb 3-1: Product: syz [ 1098.027743][T10939] usb 3-1: Manufacturer: syz [ 1098.054410][T10939] cdc_wdm 3-1:1.0: skipping garbage [ 1098.066664][T10939] cdc_wdm 3-1:1.0: skipping garbage [ 1098.088579][T10939] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1098.109252][T10939] cdc_wdm 3-1:1.0: Unknown control protocol [ 1098.350982][T10939] usb 3-1: USB disconnect, device number 127 [ 1098.781700][ T6222] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1098.965817][ T6222] usb 5-1: Using ep0 maxpacket: 16 [ 1098.991988][ T6222] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1099.018941][ T6222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.043490][ T6222] usb 5-1: Product: syz [ 1099.056721][ T6222] usb 5-1: Manufacturer: syz [ 1099.068074][ T6222] usb 5-1: SerialNumber: syz [ 1099.110832][ T6222] usb 5-1: config 0 descriptor?? [ 1099.543441][ T6222] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1099.566499][ T6222] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1099.583468][ T6222] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1099.594067][ T6222] usb 5-1: media controller created [ 1099.613696][ T6222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1099.755220][ T6222] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1099.763966][ T6222] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1099.900564][T13802] sctp: [Deprecated]: syz.3.19119 (pid 13802) Use of int in max_burst socket option. [ 1099.900564][T13802] Use struct sctp_assoc_value instead [ 1099.916102][T10939] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1099.964755][T28502] usb 5-1: USB disconnect, device number 6 [ 1100.009922][T28502] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1100.076071][T10939] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1100.084880][T10939] usb 3-1: config 0 has no interface number 0 [ 1100.094471][T10939] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1100.104332][T10939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.112750][T10939] usb 3-1: Product: syz [ 1100.116981][T10939] usb 3-1: Manufacturer: syz [ 1100.122297][T10939] usb 3-1: SerialNumber: syz [ 1100.129670][T10939] usb 3-1: config 0 descriptor?? [ 1100.181567][ T6222] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1100.341210][T10939] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1100.349959][ T6222] usb 2-1: Using ep0 maxpacket: 8 [ 1100.357685][T10939] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1100.369029][T10939] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1100.380101][ T6222] usb 2-1: config 0 has no interfaces? [ 1100.385752][T10939] usb 3-1: media controller created [ 1100.395615][ T6222] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1100.410698][T10939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1100.419182][ T6222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.429786][ T6222] usb 2-1: Product: syz [ 1100.441180][ T6222] usb 2-1: Manufacturer: syz [ 1100.446513][ T6222] usb 2-1: SerialNumber: syz [ 1100.455253][ T6222] usb 2-1: config 0 descriptor?? [ 1100.561748][T10939] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1100.569981][T13815] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1100.578040][T13815] syzkaller1: linktype set to 804 [ 1100.610418][T10939] usb 3-1: USB disconnect, device number 2 [ 1100.686970][ T6222] usb 2-1: USB disconnect, device number 123 [ 1101.023886][T13825] netlink: 'syz.3.19129': attribute type 8 has an invalid length. [ 1101.032361][T13825] netlink: 'syz.3.19129': attribute type 4 has an invalid length. [ 1101.040300][T13825] netlink: 164 bytes leftover after parsing attributes in process `syz.3.19129'. [ 1101.267967][T13837] tipc: Started in network mode [ 1101.279100][T13837] tipc: Node identity ac14140f, cluster identity 4711 [ 1101.286693][T13837] tipc: New replicast peer: 255.255.255.255 [ 1101.293944][T13837] tipc: Enabled bearer , priority 0 [ 1101.300399][T13840] netlink: 104 bytes leftover after parsing attributes in process `syz.3.19135'. [ 1101.302532][T13837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19134'. [ 1101.320547][T13837] tipc: Disabling bearer [ 1101.371036][T13842] netlink: 'syz.3.19136': attribute type 11 has an invalid length. [ 1101.385001][T13842] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.19136'. [ 1101.637653][T13854] sg_write: data in/out 21468/82 bytes for SCSI command 0x0-- guessing data in; [ 1101.637653][T13854] program syz.1.19139 not setting count and/or reply_len properly [ 1104.312617][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19175'. [ 1104.372457][ T6222] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1104.439013][T13937] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1104.454870][T13937] bond6 (unregistering): Released all slaves [ 1104.571603][ T6222] usb 4-1: Using ep0 maxpacket: 16 [ 1104.594484][ T6222] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1104.621775][ T6222] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1104.634121][ T6222] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1104.654820][ T6222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.688668][ T6222] usb 4-1: config 0 descriptor?? [ 1104.905893][T13958] netlink: 'syz.2.19185': attribute type 13 has an invalid length. [ 1105.146437][ T6222] mcp2221 0003:04D8:00DD.0084: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1105.264530][T13958] tipc: Resetting bearer [ 1105.557089][ T6222] usb 4-1: USB disconnect, device number 126 [ 1106.241066][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19198'. [ 1106.932879][T14020] netlink: 'syz.4.19214': attribute type 13 has an invalid length. [ 1106.979731][T14020] tipc: Resetting bearer [ 1107.307840][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.329476][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.339504][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.349068][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.417349][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19219'. [ 1107.471624][T28502] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1107.641527][T28502] usb 3-1: Using ep0 maxpacket: 16 [ 1107.653769][T28502] usb 3-1: config 0 has no interfaces? [ 1107.668352][T28502] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1107.683775][T28502] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1107.694923][T28502] usb 3-1: Manufacturer: syz [ 1107.706680][T28502] usb 3-1: config 0 descriptor?? [ 1107.789734][T14043] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19223'. [ 1107.947032][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19217'. [ 1108.007941][ T10] hid-generic 0000:0000:0000.0085: unknown main item tag 0x0 [ 1108.020120][T10940] usb 3-1: USB disconnect, device number 3 [ 1108.063912][ T10] hid-generic 0000:0000:0000.0085: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1108.195650][T28502] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1108.372352][T28502] usb 2-1: Using ep0 maxpacket: 8 [ 1108.383637][T28502] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1108.398400][T28502] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.433625][T28502] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1108.460854][T28502] pvrusb2: ********** [ 1108.472982][T28502] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1108.483640][T28502] pvrusb2: Important functionality might not be entirely working. [ 1108.492987][T28502] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1108.504783][T28502] pvrusb2: ********** [ 1108.657288][ T2352] pvrusb2: Invalid write control endpoint [ 1108.914380][T13440] usb 2-1: USB disconnect, device number 124 [ 1108.978579][ T2352] pvrusb2: Invalid write control endpoint [ 1108.992749][ T2352] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1109.014227][ T2352] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1109.022144][T10940] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1109.036931][ T2352] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1109.049871][ T2352] pvrusb2: Device being rendered inoperable [ 1109.061294][ T2352] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 1109.073481][ T2352] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1109.101256][ T2352] pvrusb2: Attached sub-driver cx25840 [ 1109.107568][ T2352] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1109.127667][ T2352] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1109.194778][T10940] usb 5-1: Using ep0 maxpacket: 8 [ 1109.206036][T10940] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1109.218633][T10940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.249737][T10940] usb 5-1: Product: syz [ 1109.261583][T10940] usb 5-1: Manufacturer: syz [ 1109.275543][T10940] usb 5-1: SerialNumber: syz [ 1109.300359][T10940] usb 5-1: config 0 descriptor?? [ 1109.328619][T10940] gspca_main: se401-2.14.0 probing 047d:5003 [ 1109.536845][T14107] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.19252'. [ 1109.700279][T14113] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19254'. [ 1109.729315][T10940] gspca_se401: Frame size: 0x0 1/16th janggu [ 1109.752865][T14113] netlink: 3 bytes leftover after parsing attributes in process `syz.0.19254'. [ 1109.762388][T10940] gspca_se401: Frame size: 0x0 1/16th janggu [ 1109.776477][T10940] gspca_se401: Frame size: 0x0 1/16th janggu [ 1109.789267][T10940] gspca_se401: Frame size: 0x0 1/16th janggu [ 1109.806376][T10940] gspca_se401: Frame size: 0x0 1/16th janggu [ 1109.823361][T10940] gspca_se401: Frame size: 0x0 1/16th janggu [ 1109.952114][T10940] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input148 [ 1109.981259][T10940] usb 5-1: USB disconnect, device number 7 [ 1110.261538][T28502] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1110.423376][T28502] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1110.441905][T28502] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1110.464801][T28502] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1110.484839][T28502] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.510330][T14130] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1110.554278][T28502] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1110.833389][T28502] usb 4-1: USB disconnect, device number 127 [ 1111.270832][T14158] netlink: 'syz.1.19273': attribute type 13 has an invalid length. [ 1111.772991][T14170] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1111.934119][T14170] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.946265][T14170] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.957683][T14170] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1111.966024][T14170] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1111.976218][T14170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.991227][T14170] usb 4-1: config 0 descriptor?? [ 1112.134496][T14158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1112.215356][T14158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1112.440661][T14170] uclogic 0003:5543:0522.0086: unknown main item tag 0x0 [ 1112.453500][T14170] uclogic 0003:5543:0522.0086: unknown main item tag 0x0 [ 1112.460903][T14170] uclogic 0003:5543:0522.0086: unknown main item tag 0x0 [ 1112.468951][T14170] uclogic 0003:5543:0522.0086: unknown main item tag 0x0 [ 1112.480443][T14170] uclogic 0003:5543:0522.0086: unknown main item tag 0x0 [ 1112.488319][T14170] uclogic 0003:5543:0522.0086: unknown main item tag 0x0 [ 1112.496949][T14170] uclogic 0003:5543:0522.0086: unknown main item tag 0x0 [ 1112.504937][T14170] uclogic 0003:5543:0522.0086: unknown main item tag 0x0 [ 1112.512807][T14170] uclogic 0003:5543:0522.0086: unknown main item tag 0x0 [ 1112.530404][T14170] uclogic 0003:5543:0522.0086: hidraw0: USB HID vff.fa Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 1112.667152][T14183] usb 4-1: USB disconnect, device number 2 [ 1112.824600][T14158] mac80211_hwsim hwsim47 wlan0: left allmulticast mode [ 1112.850004][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.870888][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.909417][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.920877][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.201846][ T6194] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1113.371716][ T6194] usb 5-1: Using ep0 maxpacket: 32 [ 1113.383027][ T6194] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 1113.411665][ T6194] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1113.427888][ T6194] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1113.445490][ T6194] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1113.457770][ T6194] usb 5-1: Product: syz [ 1113.465608][ T6194] usb 5-1: Manufacturer: syz [ 1113.474458][ T6194] usb 5-1: SerialNumber: syz [ 1113.490351][ T6194] usb 5-1: config 0 descriptor?? [ 1113.500333][T14192] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1113.636684][T14223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1113.767666][ T6194] usb 5-1: USB disconnect, device number 8 [ 1114.542431][T14185] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1114.545669][T14173] hid_parser_main: 32 callbacks suppressed [ 1114.545692][T14173] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1114.565340][T14173] hid-generic 0000:0000:0000.0087: unknown main item tag 0x0 [ 1114.595804][T14173] hid-generic 0000:0000:0000.0087: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1114.632613][ T6194] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1114.701502][T14185] usb 4-1: Using ep0 maxpacket: 8 [ 1114.724203][T14255] fido_id[14255]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1114.726266][T14185] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1114.781707][T14185] usb 4-1: config 179 has no interface number 0 [ 1114.798335][T14185] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1114.812537][ T6194] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1114.821036][T14185] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1114.829012][ T6194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.863639][T14185] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1114.865148][ T6194] usb 2-1: config 0 descriptor?? [ 1114.888583][T14185] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1114.907362][T14185] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1114.912199][ T6194] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1114.923698][T14185] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1114.938569][T14185] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.961714][T14237] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1115.151472][T14273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19316'. [ 1115.333908][T14185] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input149 [ 1115.428014][T14173] usb 4-1: USB disconnect, device number 3 [ 1115.428370][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1115.442415][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1115.514833][ T6194] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1115.557855][ T6194] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1115.577020][T25232] udevd[25232]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory [ 1115.617252][T25232] udevd[25232]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 1115.738911][ T6194] usb 2-1: USB disconnect, device number 125 [ 1116.077583][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.084556][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.337308][T14306] : renamed from vlan0 [ 1116.527769][T14311] netlink: 'syz.1.19333': attribute type 13 has an invalid length. [ 1116.538077][T14311] netlink: 'syz.1.19333': attribute type 17 has an invalid length. [ 1116.572611][T14310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1116.594842][T14310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1116.624904][T14310] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1116.791356][T14311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1118.318574][T14185] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1118.425493][T14386] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 1118.425493][T14386] program syz.2.19365 not setting count and/or reply_len properly [ 1118.452579][T14388] tmpfs: Unknown parameter 'r%Ҵ\wӠR(4;a; [ 1118.452579][T14388] MUg6&x@2<5ʍ2TZ5wVU]TmPZ<M;xY9]gŞn;O훌u [ 1118.452579][T14388] ~^>Ƥr&Dq.;쀯<2AU,00000000000000000000003' [ 1118.488434][T14185] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1118.501013][T14185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.520725][T14185] usb 2-1: config 0 descriptor?? [ 1118.530272][T14185] cp210x 2-1:0.0: cp210x converter detected [ 1118.941214][T14185] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1118.975594][T14185] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1119.105554][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19375'. [ 1119.169922][T14173] usb 2-1: USB disconnect, device number 126 [ 1119.189713][T14173] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1119.235709][T14173] cp210x 2-1:0.0: device disconnected [ 1119.951962][T14185] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1120.011579][T14183] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1120.021550][T14184] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 1120.106773][T14185] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1120.116147][T14185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.124233][T14185] usb 3-1: Product: syz [ 1120.128449][T14185] usb 3-1: Manufacturer: syz [ 1120.134972][T14185] usb 3-1: SerialNumber: syz [ 1120.146990][T14185] usb 3-1: config 0 descriptor?? [ 1120.164418][T14183] usb 2-1: config 0 has no interfaces? [ 1120.171125][T14183] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1120.181474][T14183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.194201][T14184] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 1120.205836][T14184] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 1120.219331][T14183] usb 2-1: config 0 descriptor?? [ 1120.231270][T14184] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1120.241315][T14184] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1120.250983][T14184] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1120.259894][T14184] usb 4-1: Product: syz [ 1120.264940][T14184] usb 4-1: Manufacturer: syz [ 1120.269787][T14184] usb 4-1: SerialNumber: syz [ 1120.280178][T14184] usb 4-1: config 0 descriptor?? [ 1120.294895][T14184] usb 4-1: selecting invalid altsetting 0 [ 1120.437403][T14431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.468941][T14431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.495966][T14173] usb 2-1: USB disconnect, device number 127 [ 1120.541141][T14184] usb 4-1: USB disconnect, device number 4 [ 1120.941540][T14183] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1120.983569][T14185] usb 3-1: Firmware version (0.0) predates our first public release. [ 1120.997829][T14185] usb 3-1: Please update to version 0.2 or newer [ 1121.026778][T14461] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1121.055211][T14185] usb 3-1: USB disconnect, device number 4 [ 1121.109199][T14183] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.147993][T14183] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.40 [ 1121.166802][T14183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.201300][T14183] usb 2-1: config 0 descriptor?? [ 1121.217029][T13437] usb 4-1: [UEAGLE-ATM] firmware is not available [ 1121.225718][T28501] usb 4-1: [UEAGLE-ATM] firmware is not available [ 1121.251892][ T8620] Bluetooth: hci5: urb ffff888029db6500 submission failed (2) [ 1121.438979][T14183] usb 2-1: USB disconnect, device number 2 [ 1121.794356][T14482] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.19407'. [ 1122.095949][T14486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19409'. [ 1122.119933][T14486] netlink: 'syz.1.19409': attribute type 15 has an invalid length. [ 1122.148075][T14486] netlink: 'syz.1.19409': attribute type 25 has an invalid length. [ 1122.174729][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19409'. [ 1122.867914][T14519] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 1122.890089][T14519] pim6reg0: owner set to 0 [ 1123.043504][T14183] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1123.110098][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19430'. [ 1123.172748][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19430'. [ 1123.211560][T14183] usb 3-1: Using ep0 maxpacket: 16 [ 1123.234438][T14183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.267428][T14183] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.292588][T14183] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 1123.325989][T14183] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1123.354076][T14183] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.378352][T14183] usb 3-1: config 0 descriptor?? [ 1123.810410][T14517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.829086][T14554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1123.829169][T14517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.888026][T14183] apple 0003:05AC:027D.0088: unknown main item tag 0x0 [ 1123.898428][T14183] apple 0003:05AC:027D.0088: unknown main item tag 0x0 [ 1123.906159][T14183] apple 0003:05AC:027D.0088: unknown main item tag 0x0 [ 1123.906197][T14183] apple 0003:05AC:027D.0088: unknown main item tag 0x0 [ 1123.906226][T14183] apple 0003:05AC:027D.0088: unknown main item tag 0x0 [ 1123.932801][T14183] apple 0003:05AC:027D.0088: unknown main item tag 0x0 [ 1123.932943][T14183] apple 0003:05AC:027D.0088: unknown main item tag 0x0 [ 1123.932974][T14183] apple 0003:05AC:027D.0088: unknown main item tag 0x0 [ 1123.933004][T14183] apple 0003:05AC:027D.0088: unknown main item tag 0x0 [ 1123.933034][T14183] apple 0003:05AC:027D.0088: unknown main item tag 0x2 [ 1123.939741][T14183] apple 0003:05AC:027D.0088: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.2-1/input0 [ 1124.097135][T14183] usb 3-1: USB disconnect, device number 5 [ 1124.197062][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19446'. [ 1124.364832][T14576] macvtap0: entered allmulticast mode [ 1124.528240][T14579] input: syz0 as /devices/virtual/input/input150 [ 1126.003331][ T36] bond0: (slave netdevsim0): Releasing backup interface [ 1126.037291][ T6145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1126.057200][ T6145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1126.074390][ T6145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1126.083719][ T6145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1126.099573][ T6145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1126.620329][T14619] chnl_net:caif_netlink_parms(): no params data found [ 1126.958554][ T36] bridge_slave_1: left allmulticast mode [ 1126.972201][ T36] bridge_slave_1: left promiscuous mode [ 1126.982530][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.994386][T14651] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1126.994386][T14651] The task syz.1.19479 (14651) triggered the difference, watch for misbehavior. [ 1127.044212][ T36] bridge_slave_0: left allmulticast mode [ 1127.045729][T14654] netlink: 'syz.0.19482': attribute type 1 has an invalid length. [ 1127.050244][ T36] bridge_slave_0: left promiscuous mode [ 1127.064683][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.073274][T14654] netlink: 'syz.0.19482': attribute type 2 has an invalid length. [ 1127.114788][ T36] pimreg3: left allmulticast mode [ 1128.006780][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.017159][ T36] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1128.027371][ T36] tipc: Resetting bearer [ 1128.037571][ T36] bond0 (unregistering): Released all slaves [ 1128.049986][ T36] bond1 (unregistering): Released all slaves [ 1128.065902][ T36] bond2 (unregistering): Released all slaves [ 1128.081143][ T36] bond3 (unregistering): Released all slaves [ 1128.105250][ T36] bond4 (unregistering): Released all slaves [ 1128.120707][ T36] bond5 (unregistering): Released all slaves [ 1128.137423][ T36] bond6 (unregistering): Released all slaves [ 1128.151843][ T6145] Bluetooth: hci4: command tx timeout [ 1128.165740][ T36] bond7 (unregistering): Released all slaves [ 1128.284239][T14619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.336164][T14619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.360924][T14619] bridge_slave_0: entered allmulticast mode [ 1128.395390][T14619] bridge_slave_0: entered promiscuous mode [ 1128.404836][T14619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.418044][T14619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.443778][T14619] bridge_slave_1: entered allmulticast mode [ 1128.476570][T14619] bridge_slave_1: entered promiscuous mode [ 1128.531298][ T36] : left promiscuous mode [ 1128.632895][ T36] m>e5n: left promiscuous mode [ 1128.705926][T14619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.740340][T14619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.762286][ T30] audit: type=1326 audit(1776397877.747:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14669 comm="syz.0.19488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3649b9c819 code=0x7fc00000 [ 1128.840690][ T36] tipc: Disabling bearer [ 1128.849404][ T36] tipc: Left network mode [ 1128.911945][T14619] team0: Port device team_slave_0 added [ 1128.940985][T14619] team0: Port device team_slave_1 added [ 1129.129712][T14619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.146485][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.174920][T14619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.211998][T14619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.237228][T14619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.334329][T14619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.720968][T14619] hsr_slave_0: entered promiscuous mode [ 1129.742058][T14619] hsr_slave_1: entered promiscuous mode [ 1129.783736][T14619] debugfs: 'hsr0' already exists in 'hsr' [ 1129.797587][T14619] Cannot create hsr debugfs directory [ 1130.232468][ T6145] Bluetooth: hci4: command tx timeout [ 1130.317926][ T5497] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1131.653112][T14773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1132.064970][ T36] hsr_slave_0: left promiscuous mode [ 1132.096020][ T36] hsr_slave_1: left promiscuous mode [ 1132.122612][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1132.154800][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1132.260886][ T36] pim6reg (unregistering): left allmulticast mode [ 1132.302071][ T36] pim6reg9 (unregistering): left allmulticast mode [ 1132.317378][ T6145] Bluetooth: hci4: command tx timeout [ 1132.580783][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1132.638294][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1133.064642][T14814] [ 1133.067044][T14814] ===================================================== [ 1133.074016][T14814] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1133.081949][T14814] syzkaller #0 Tainted: G L [ 1133.088045][T14814] ----------------------------------------------------- [ 1133.095009][T14814] syz.3.19540/14814 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1133.102858][T14814] ffff88801e7ecd20 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 1133.111519][T14814] [ 1133.111519][T14814] and this task is already holding: [ 1133.119087][T14814] ffff888055fe5de0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1133.127941][T14814] which would create a new lock dependency: [ 1133.133857][T14814] (&new->fa_lock){....}-{3:3} -> (&f_owner->lock){....}-{3:3} [ 1133.141577][T14814] [ 1133.141577][T14814] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1133.151057][T14814] (&client->buffer_lock){..-.}-{3:3} [ 1133.151099][T14814] [ 1133.151099][T14814] ... which became SOFTIRQ-irq-safe at: [ 1133.164488][T14814] lock_acquire+0x106/0x350 [ 1133.169214][T14814] _raw_spin_lock+0x2e/0x40 [ 1133.173853][T14814] evdev_pass_values+0xb9/0xbd0 [ 1133.178864][T14814] evdev_events+0x1e6/0x340 [ 1133.183490][T14814] input_pass_values+0x288/0x890 [ 1133.188553][T14814] input_event_dispose+0x330/0x6b0 [ 1133.193813][T14814] input_event+0x84/0xc0 [ 1133.198166][T14814] xpad360_process_packet+0x641/0xdc0 [ 1133.203635][T14814] xpad_irq_in+0x14e/0x25c0 [ 1133.208240][T14814] __usb_hcd_giveback_urb+0x376/0x540 [ 1133.213712][T14814] dummy_timer+0xbc0/0x4650 [ 1133.218331][T14814] __hrtimer_run_queues+0x3c0/0xa20 [ 1133.223635][T14814] hrtimer_run_softirq+0x17a/0x240 [ 1133.228839][T14814] handle_softirqs+0x22a/0x840 [ 1133.233702][T14814] __irq_exit_rcu+0xca/0x220 [ 1133.238391][T14814] irq_exit_rcu+0x9/0x30 [ 1133.242817][T14814] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1133.248551][T14814] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1133.254631][T14814] finish_task_switch+0x427/0xbe0 [ 1133.259756][T14814] __schedule+0x17bc/0x5680 [ 1133.264352][T14814] schedule+0x164/0x360 [ 1133.268610][T14814] do_nanosleep+0x1c2/0x620 [ 1133.273215][T14814] hrtimer_nanosleep+0x18f/0x3a0 [ 1133.278256][T14814] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1133.283891][T14814] do_syscall_64+0x15f/0xf80 [ 1133.288578][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.294560][T14814] [ 1133.294560][T14814] to a SOFTIRQ-irq-unsafe lock: [ 1133.301581][T14814] (tasklist_lock){.+.+}-{3:3} [ 1133.301615][T14814] [ 1133.301615][T14814] ... which became SOFTIRQ-irq-unsafe at: [ 1133.314364][T14814] ... [ 1133.314373][T14814] lock_acquire+0x106/0x350 [ 1133.321571][T14814] _raw_read_lock+0x36/0x50 [ 1133.326186][T14814] __do_wait+0xde/0x740 [ 1133.330438][T14814] do_wait+0x1e7/0x510 [ 1133.334607][T14814] kernel_wait+0xd6/0x1c0 [ 1133.339072][T14814] call_usermodehelper_exec_work+0xbe/0x230 [ 1133.345066][T14814] process_scheduled_works+0xb5d/0x1860 [ 1133.350735][T14814] worker_thread+0xa53/0xfc0 [ 1133.355439][T14814] kthread+0x388/0x470 [ 1133.359600][T14814] ret_from_fork+0x514/0xb70 [ 1133.364374][T14814] ret_from_fork_asm+0x1a/0x30 [ 1133.369343][T14814] [ 1133.369343][T14814] other info that might help us debug this: [ 1133.369343][T14814] [ 1133.379745][T14814] Chain exists of: [ 1133.379745][T14814] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1133.379745][T14814] [ 1133.393248][T14814] Possible interrupt unsafe locking scenario: [ 1133.393248][T14814] [ 1133.401588][T14814] CPU0 CPU1 [ 1133.406976][T14814] ---- ---- [ 1133.412371][T14814] lock(tasklist_lock); [ 1133.416640][T14814] local_irq_disable(); [ 1133.423404][T14814] lock(&client->buffer_lock); [ 1133.430804][T14814] lock(&new->fa_lock); [ 1133.437763][T14814] [ 1133.441240][T14814] lock(&client->buffer_lock); [ 1133.446299][T14814] [ 1133.446299][T14814] *** DEADLOCK *** [ 1133.446299][T14814] [ 1133.454577][T14814] 4 locks held by syz.3.19540/14814: [ 1133.459962][T14814] #0: ffff888058442c40 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1133.470491][T14814] #1: ffffffff8e95caa0 (rcu_read_lock){....}-{1:3}, at: sk_wake_async+0x7f/0x280 [ 1133.479834][T14814] #2: ffffffff8e95caa0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1133.488947][T14814] #3: ffff888055fe5de0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1133.498119][T14814] [ 1133.498119][T14814] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1133.508537][T14814] -> (&client->buffer_lock){..-.}-{3:3} { [ 1133.514387][T14814] IN-SOFTIRQ-W at: [ 1133.518550][T14814] lock_acquire+0x106/0x350 [ 1133.524981][T14814] _raw_spin_lock+0x2e/0x40 [ 1133.531332][T14814] evdev_pass_values+0xb9/0xbd0 [ 1133.538022][T14814] evdev_events+0x1e6/0x340 [ 1133.544366][T14814] input_pass_values+0x288/0x890 [ 1133.551138][T14814] input_event_dispose+0x330/0x6b0 [ 1133.558083][T14814] input_event+0x84/0xc0 [ 1133.564161][T14814] xpad360_process_packet+0x641/0xdc0 [ 1133.571539][T14814] xpad_irq_in+0x14e/0x25c0 [ 1133.577925][T14814] __usb_hcd_giveback_urb+0x376/0x540 [ 1133.585128][T14814] dummy_timer+0xbc0/0x4650 [ 1133.591465][T14814] __hrtimer_run_queues+0x3c0/0xa20 [ 1133.598506][T14814] hrtimer_run_softirq+0x17a/0x240 [ 1133.605532][T14814] handle_softirqs+0x22a/0x840 [ 1133.612305][T14814] __irq_exit_rcu+0xca/0x220 [ 1133.618730][T14814] irq_exit_rcu+0x9/0x30 [ 1133.624862][T14814] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1133.632334][T14814] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1133.640150][T14814] finish_task_switch+0x427/0xbe0 [ 1133.647099][T14814] __schedule+0x17bc/0x5680 [ 1133.653707][T14814] schedule+0x164/0x360 [ 1133.659701][T14814] do_nanosleep+0x1c2/0x620 [ 1133.666037][T14814] hrtimer_nanosleep+0x18f/0x3a0 [ 1133.672803][T14814] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1133.680178][T14814] do_syscall_64+0x15f/0xf80 [ 1133.686601][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.694419][T14814] INITIAL USE at: [ 1133.698418][T14814] lock_acquire+0x106/0x350 [ 1133.704764][T14814] _raw_spin_lock_irqsave+0x40/0x60 [ 1133.711816][T14814] evdev_ioctl_handler+0x10fb/0x1fe0 [ 1133.719069][T14814] __se_sys_ioctl+0xfc/0x170 [ 1133.725593][T14814] do_syscall_64+0x15f/0xf80 [ 1133.732217][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.739860][T14814] } [ 1133.742451][T14814] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1133.750707][T14814] -> (&new->fa_lock){....}-{3:3} { [ 1133.755856][T14814] INITIAL USE at: [ 1133.759893][T14814] lock_acquire+0x106/0x350 [ 1133.765974][T14814] _raw_write_lock_irq+0x3d/0x50 [ 1133.772489][T14814] fasync_remove_entry+0xf1/0x1c0 [ 1133.779167][T14814] pipe_fasync+0xa9/0x1e0 [ 1133.785069][T14814] __fput+0x890/0xa60 [ 1133.790626][T14814] task_work_run+0x1d9/0x270 [ 1133.796789][T14814] exit_to_user_mode_loop+0xed/0x480 [ 1133.803651][T14814] do_syscall_64+0x33e/0xf80 [ 1133.809905][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.817367][T14814] INITIAL READ USE at: [ 1133.821699][T14814] lock_acquire+0x106/0x350 [ 1133.828208][T14814] _raw_read_lock_irqsave+0x48/0x60 [ 1133.835499][T14814] kill_fasync+0x199/0x4d0 [ 1133.842015][T14814] pipe_release+0x19c/0x330 [ 1133.848576][T14814] __fput+0x44f/0xa60 [ 1133.854587][T14814] task_work_run+0x1d9/0x270 [ 1133.861192][T14814] exit_to_user_mode_loop+0xed/0x480 [ 1133.868488][T14814] do_syscall_64+0x33e/0xf80 [ 1133.875090][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.883002][T14814] } [ 1133.885505][T14814] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1133.894199][T14814] ... acquired at: [ 1133.898001][T14814] _raw_read_lock_irqsave+0x48/0x60 [ 1133.903381][T14814] kill_fasync+0x199/0x4d0 [ 1133.907979][T14814] evdev_pass_values+0x627/0xbd0 [ 1133.913103][T14814] evdev_events+0x1e6/0x340 [ 1133.917788][T14814] input_pass_values+0x288/0x890 [ 1133.922907][T14814] input_event_dispose+0x330/0x6b0 [ 1133.928196][T14814] input_inject_event+0x1dc/0x330 [ 1133.933398][T14814] evdev_write+0x325/0x4c0 [ 1133.937993][T14814] vfs_write+0x29a/0xb90 [ 1133.942411][T14814] ksys_write+0x150/0x270 [ 1133.947002][T14814] do_syscall_64+0x15f/0xf80 [ 1133.951779][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.957854][T14814] [ 1133.960184][T14814] [ 1133.960184][T14814] the dependencies between the lock to be acquired [ 1133.960193][T14814] and SOFTIRQ-irq-unsafe lock: [ 1133.973723][T14814] -> (tasklist_lock){.+.+}-{3:3} { [ 1133.978944][T14814] HARDIRQ-ON-R at: [ 1133.983011][T14814] lock_acquire+0x106/0x350 [ 1133.989479][T14814] _raw_read_lock+0x36/0x50 [ 1133.995820][T14814] __do_wait+0xde/0x740 [ 1134.001859][T14814] do_wait+0x1e7/0x510 [ 1134.007768][T14814] kernel_wait+0xd6/0x1c0 [ 1134.014178][T14814] call_usermodehelper_exec_work+0xbe/0x230 [ 1134.021929][T14814] process_scheduled_works+0xb5d/0x1860 [ 1134.029307][T14814] worker_thread+0xa53/0xfc0 [ 1134.035816][T14814] kthread+0x388/0x470 [ 1134.042148][T14814] ret_from_fork+0x514/0xb70 [ 1134.048694][T14814] ret_from_fork_asm+0x1a/0x30 [ 1134.055307][T14814] SOFTIRQ-ON-R at: [ 1134.059379][T14814] lock_acquire+0x106/0x350 [ 1134.065827][T14814] _raw_read_lock+0x36/0x50 [ 1134.072259][T14814] __do_wait+0xde/0x740 [ 1134.078694][T14814] do_wait+0x1e7/0x510 [ 1134.085028][T14814] kernel_wait+0xd6/0x1c0 [ 1134.091271][T14814] call_usermodehelper_exec_work+0xbe/0x230 [ 1134.099088][T14814] process_scheduled_works+0xb5d/0x1860 [ 1134.106489][T14814] worker_thread+0xa53/0xfc0 [ 1134.112921][T14814] kthread+0x388/0x470 [ 1134.118827][T14814] ret_from_fork+0x514/0xb70 [ 1134.125263][T14814] ret_from_fork_asm+0x1a/0x30 [ 1134.131859][T14814] INITIAL USE at: [ 1134.135848][T14814] lock_acquire+0x106/0x350 [ 1134.142104][T14814] _raw_write_lock_irq+0x3d/0x50 [ 1134.148796][T14814] copy_process+0x2b5e/0x4450 [ 1134.155569][T14814] kernel_clone+0x284/0x8f0 [ 1134.161925][T14814] user_mode_thread+0x110/0x180 [ 1134.168530][T14814] rest_init+0x23/0x300 [ 1134.174611][T14814] start_kernel+0x38a/0x3e0 [ 1134.181123][T14814] x86_64_start_reservations+0x24/0x30 [ 1134.188420][T14814] x86_64_start_kernel+0x143/0x1c0 [ 1134.195461][T14814] common_startup_64+0x13e/0x147 [ 1134.202247][T14814] INITIAL READ USE at: [ 1134.206681][T14814] lock_acquire+0x106/0x350 [ 1134.213476][T14814] _raw_read_lock+0x36/0x50 [ 1134.220449][T14814] __do_wait+0xde/0x740 [ 1134.226884][T14814] do_wait+0x1e7/0x510 [ 1134.233148][T14814] kernel_wait+0xd6/0x1c0 [ 1134.239663][T14814] call_usermodehelper_exec_work+0xbe/0x230 [ 1134.247740][T14814] process_scheduled_works+0xb5d/0x1860 [ 1134.255563][T14814] worker_thread+0xa53/0xfc0 [ 1134.262377][T14814] kthread+0x388/0x470 [ 1134.268625][T14814] ret_from_fork+0x514/0xb70 [ 1134.275575][T14814] ret_from_fork_asm+0x1a/0x30 [ 1134.282860][T14814] } [ 1134.285738][T14814] ... key at: [] tasklist_lock+0x18/0x40 [ 1134.293555][T14814] ... acquired at: [ 1134.297447][T14814] _raw_read_lock+0x36/0x50 [ 1134.302185][T14814] send_sigurg+0x12b/0x420 [ 1134.306779][T14814] sk_send_sigurg+0x6c/0x2e0 [ 1134.311554][T14814] queue_oob+0x42c/0x4f0 [ 1134.316106][T14814] unix_stream_sendmsg+0xcb1/0xe80 [ 1134.321663][T14814] ____sys_sendmsg+0x972/0x9f0 [ 1134.326608][T14814] ___sys_sendmsg+0x2a5/0x360 [ 1134.331465][T14814] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1134.336670][T14814] do_syscall_64+0x15f/0xf80 [ 1134.341446][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.347616][T14814] [ 1134.350031][T14814] -> (&f_owner->lock){....}-{3:3} { [ 1134.355253][T14814] INITIAL USE at: [ 1134.359151][T14814] lock_acquire+0x106/0x350 [ 1134.365241][T14814] _raw_write_lock_irq+0x3d/0x50 [ 1134.371842][T14814] __f_setown+0x67/0x370 [ 1134.377665][T14814] generic_setlease+0xacf/0xfd0 [ 1134.384094][T14814] do_fcntl_add_lease+0x35e/0x470 [ 1134.390698][T14814] fcntl_setlease+0x123/0x180 [ 1134.396950][T14814] do_fcntl+0x8b3/0x1a20 [ 1134.402933][T14814] __se_sys_fcntl+0xc8/0x150 [ 1134.409091][T14814] do_syscall_64+0x15f/0xf80 [ 1134.415255][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.422719][T14814] INITIAL READ USE at: [ 1134.427226][T14814] lock_acquire+0x106/0x350 [ 1134.433739][T14814] _raw_read_lock_irq+0x45/0x60 [ 1134.440599][T14814] do_fcntl+0xaa3/0x1a20 [ 1134.446926][T14814] __se_sys_fcntl+0xc8/0x150 [ 1134.453531][T14814] do_syscall_64+0x15f/0xf80 [ 1134.460411][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.468315][T14814] } [ 1134.470821][T14814] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1134.479698][T14814] ... acquired at: [ 1134.483521][T14814] _raw_read_lock_irqsave+0x48/0x60 [ 1134.489088][T14814] send_sigio+0x38/0x370 [ 1134.493507][T14814] kill_fasync+0x24d/0x4d0 [ 1134.498125][T14814] sock_wake_async+0x137/0x160 [ 1134.503078][T14814] sk_wake_async+0x184/0x280 [ 1134.507858][T14814] unix_release_sock+0x74f/0xc80 [ 1134.513105][T14814] unix_release+0x92/0xd0 [ 1134.517631][T14814] sock_close+0xc3/0x240 [ 1134.522060][T14814] __fput+0x44f/0xa60 [ 1134.526234][T14814] task_work_run+0x1d9/0x270 [ 1134.531005][T14814] exit_to_user_mode_loop+0xed/0x480 [ 1134.536484][T14814] do_syscall_64+0x33e/0xf80 [ 1134.541346][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.547592][T14814] [ 1134.549939][T14814] [ 1134.549939][T14814] stack backtrace: [ 1134.555835][T14814] CPU: 1 UID: 0 PID: 14814 Comm: syz.3.19540 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1134.555859][T14814] Tainted: [L]=SOFTLOCKUP [ 1134.555866][T14814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1134.555876][T14814] Call Trace: [ 1134.555886][T14814] [ 1134.555894][T14814] dump_stack_lvl+0xe8/0x150 [ 1134.555921][T14814] __lock_acquire+0x2a94/0x2cf0 [ 1134.555951][T14814] ? send_sigio+0x38/0x370 [ 1134.555965][T14814] lock_acquire+0x106/0x350 [ 1134.555987][T14814] ? send_sigio+0x38/0x370 [ 1134.556002][T14814] ? kill_fasync+0x199/0x4d0 [ 1134.556015][T14814] ? lock_acquire+0x106/0x350 [ 1134.556036][T14814] ? kill_fasync+0x199/0x4d0 [ 1134.556052][T14814] _raw_read_lock_irqsave+0x48/0x60 [ 1134.556074][T14814] ? send_sigio+0x38/0x370 [ 1134.556087][T14814] send_sigio+0x38/0x370 [ 1134.556103][T14814] kill_fasync+0x24d/0x4d0 [ 1134.556118][T14814] ? kill_fasync+0x53/0x4d0 [ 1134.556133][T14814] sock_wake_async+0x137/0x160 [ 1134.556158][T14814] ? sk_wake_async+0x7f/0x280 [ 1134.556180][T14814] sk_wake_async+0x184/0x280 [ 1134.556203][T14814] unix_release_sock+0x74f/0xc80 [ 1134.556226][T14814] ? __pfx_unix_release_sock+0x10/0x10 [ 1134.556254][T14814] ? down_write+0x16d/0x200 [ 1134.556270][T14814] ? __pfx_down_write+0x10/0x10 [ 1134.556287][T14814] unix_release+0x92/0xd0 [ 1134.556308][T14814] sock_close+0xc3/0x240 [ 1134.556330][T14814] ? __pfx_sock_close+0x10/0x10 [ 1134.556352][T14814] __fput+0x44f/0xa60 [ 1134.556376][T14814] task_work_run+0x1d9/0x270 [ 1134.556394][T14814] ? __pfx_task_work_run+0x10/0x10 [ 1134.556414][T14814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.556431][T14814] exit_to_user_mode_loop+0xed/0x480 [ 1134.556452][T14814] ? rcu_is_watching+0x15/0xb0 [ 1134.556476][T14814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.556492][T14814] do_syscall_64+0x33e/0xf80 [ 1134.556516][T14814] ? trace_irq_disable+0x3b/0x140 [ 1134.556535][T14814] ? clear_bhb_loop+0x40/0x90 [ 1134.556553][T14814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.556569][T14814] RIP: 0033:0x7fd96999c819 [ 1134.556585][T14814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1134.556599][T14814] RSP: 002b:00007fd96a7af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 1134.556618][T14814] RAX: 0000000000000004 RBX: 00007fd969c15fa0 RCX: 00007fd96999c819 [ 1134.556629][T14814] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1134.556639][T14814] RBP: 00007fd969a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1134.556650][T14814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.556659][T14814] R13: 00007fd969c16038 R14: 00007fd969c15fa0 R15: 00007fd969d3fa48 [ 1134.556676][T14814] [ 1134.559579][ T6145] Bluetooth: hci1: command 0x0406 tx timeout [ 1134.672196][T10659] Bluetooth: hci4: command tx timeout [ 1135.473146][ T36] IPVS: stop unused estimator thread 0... [ 1136.207927][ T36] .`: (slave netdevsim0): Releasing backup interface [ 1136.665886][ T5497] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1136.892422][ T36] team0: left promiscuous mode [ 1136.900180][ T36] team_slave_0: left promiscuous mode [ 1136.907034][ T36] team_slave_1: left promiscuous mode [ 1136.912813][ T36] bridge0: port 3(team0) entered disabled state [ 1136.920594][ T36] bridge_slave_1: left allmulticast mode [ 1136.926886][ T36] bridge_slave_1: left promiscuous mode [ 1136.932820][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.942435][ T36] bridge_slave_0: left allmulticast mode [ 1136.948170][ T36] bridge_slave_0: left promiscuous mode [ 1136.954517][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.974325][ T36] bridge_slave_1: left allmulticast mode [ 1136.980049][ T36] bridge_slave_1: left promiscuous mode [ 1136.985885][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.995019][ T36] bridge_slave_0: left allmulticast mode [ 1137.000735][ T36] bridge_slave_0: left promiscuous mode [ 1137.006777][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.018669][ T36] bridge_slave_1: left allmulticast mode [ 1137.024507][ T36] bridge_slave_1: left promiscuous mode [ 1137.030239][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.038373][ T36] bridge_slave_0: left allmulticast mode [ 1137.044199][ T36] bridge_slave_0: left promiscuous mode [ 1137.049913][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.904223][ T36] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1138.913958][ T36] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1138.923408][ T36] .` (unregistering): (slave batadv0): Releasing backup interface [ 1138.932692][ T36] .` (unregistering): (slave ): Releasing backup interface [ 1138.940639][ T36] .` (unregistering): Released all slaves [ 1138.949648][ T36] bond1 (unregistering): Released all slaves [ 1138.958678][ T36] bond2 (unregistering): Released all slaves [ 1138.967923][ T36] bond3 (unregistering): Released all slaves [ 1138.976965][ T36] bond4 (unregistering): Released all slaves [ 1138.986369][ T36] bond5 (unregistering): Released all slaves [ 1138.998398][ T36] bond0 (unregistering): Released all slaves [ 1139.146062][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1139.157526][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1139.166678][ T36] bond0 (unregistering): Released all slaves [ 1139.174639][ T36] bond1 (unregistering): Released all slaves [ 1140.623719][ T36] bond1 (unregistering): Released all slaves [ 1140.632969][ T36] bond0 (unregistering): Released all slaves [ 1140.642267][ T36] bond2 (unregistering): Released all slaves [ 1140.651115][ T36] bond3 (unregistering): Released all slaves [ 1140.667323][ T5497] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1140.829325][ T36] l2: left promiscuous mode [ 1140.892103][ T36] m1Ie5n: left promiscuous mode [ 1140.937547][ T36] : left promiscuous mode [ 1140.984135][ T36] m>e5n: left promiscuous mode [ 1141.001361][ T5497] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1141.035976][ T36] hma(sha224): left promiscuous mode [ 1141.086425][ T36] tipc: Disabling bearer [ 1141.109494][ T36] tipc: Disabling bearer [ 1141.115965][ T36] tipc: Left network mode [ 1141.136385][ T36] tipc: Left network mode [ 1141.141325][ T36] tipc: Left network mode [ 1141.297274][ T5497] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1141.566587][ T5497] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1141.845811][ T5497] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1142.119451][ T5497] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1142.256689][ T36] hsr_slave_0: left promiscuous mode [ 1142.274679][ T36] hsr_slave_1: left promiscuous mode [ 1142.280605][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.288982][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.301009][ T36] hsr_slave_0: left promiscuous mode [ 1142.307745][ T36] hsr_slave_1: left promiscuous mode [ 1142.314710][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.325022][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.335741][ T36] hsr_slave_0: left promiscuous mode [ 1142.344500][ T36] 0: left promiscuous mode [ 1142.349793][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1142.357851][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1142.369581][ T36] veth1_to_hsr: left allmulticast mode [ 1142.375340][ T36] veth1_to_hsr: left promiscuous mode [ 1142.461128][ T36] team_slave_1 (unregistering): left allmulticast mode [ 1142.468705][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1142.479183][ T36] team_slave_0 (unregistering): left allmulticast mode [ 1142.486592][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1142.615782][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1142.627164][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1142.736347][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1142.747235][ T36] team0 (unregistering): Port device C removed [ 1142.802421][ T5497] 8021q: adding VLAN 0 to HW filter on device eth8