last executing test programs: 14m21.887992427s ago: executing program 1 (id=5642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000580)="d4fb24aca6e8", 0x6}, {0x0}], 0x2) 14m21.635122493s ago: executing program 1 (id=5646): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$cgroup_int(r0, &(0x7f0000000080)=0x101, 0x12) 14m21.443979596s ago: executing program 1 (id=5651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000002100050100000000000000000200000000000000020000000c000c2e00000000000000070500130001"], 0x30}}, 0x0) 14m21.18797508s ago: executing program 1 (id=5657): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)={0x30, 0x11, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd=r0}, @nested={0x10, 0x1a, 0x0, 0x1, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0xf6, 0x0, 0x0, @ipv4=@loopback}]}]}]}, 0x30}], 0x1}, 0x0) 14m20.964448977s ago: executing program 1 (id=5661): r0 = getpid() kcmp(r0, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) 14m20.729046658s ago: executing program 1 (id=5665): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x2, 0x4}, 0x8, 0xffffffff, 0x4, 0x0, 0x0, 0x104, 0x0}) 14m5.637653611s ago: executing program 32 (id=5665): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x2, 0x4}, 0x8, 0xffffffff, 0x4, 0x0, 0x0, 0x104, 0x0}) 13m0.798620802s ago: executing program 0 (id=6953): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0x2fe, 0x4f424752, 0x3, 0x0, [{0xc3, 0x3}, {0x3, 0x7fffffff}, {0x6, 0x8}, {0x5, 0x2000008}, {0x802}, {0x5, 0x3}, {0x6, 0x40b}, {0x10001, 0x800004}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) 13m0.594984029s ago: executing program 0 (id=6956): r0 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x10000, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x13, &(0x7f0000001bc0), 0x2) 13m0.308503175s ago: executing program 0 (id=6960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newchain={0x34, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0x10, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x44004) 13m0.138548817s ago: executing program 0 (id=6964): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0xf5, 0x4004804, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @mcast2={0xff, 0x5}, 0x7}, 0x1c) 12m59.947892865s ago: executing program 0 (id=6967): r0 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) 12m59.768258355s ago: executing program 0 (id=6972): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) 12m44.627552251s ago: executing program 33 (id=6972): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x3, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, 0x0) 11m30.668570673s ago: executing program 6 (id=8143): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="62031f00d755af056510120800afbcf711e12b7f96e5521c8cf217300100000093c1cdf632dbb86770380e8ddd9aff775f8e", 0x32}], 0x1}, 0x4084) 11m30.38861329s ago: executing program 6 (id=8148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r1}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r1}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) 11m30.149086777s ago: executing program 6 (id=8153): r0 = socket$inet(0x2, 0x3, 0x41) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 11m29.945761216s ago: executing program 6 (id=8155): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0x1d, 0x0, 0x2000000, @ipv4}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x4010) 11m29.761575572s ago: executing program 6 (id=8159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='dctcp', 0x5) 11m29.578882622s ago: executing program 6 (id=8163): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x82, 0x0, 0x0, 0xff81, 0x2000, 0x0, 0x0}) 11m14.380569729s ago: executing program 34 (id=8163): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000140)={0x82, 0x0, 0x0, 0xff81, 0x2000, 0x0, 0x0}) 41.738211526s ago: executing program 2 (id=14562): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x8}) 41.607325121s ago: executing program 2 (id=14563): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_LINKINFO={0x28, 0xd, 0x0, 0x1, @veth={{0x9, 0x9e00}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x64}}, 0x0) 41.116084427s ago: executing program 2 (id=14565): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0xa) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) open(&(0x7f0000000180)='./file0/file0\x00', 0x108843, 0x98) 41.013415847s ago: executing program 2 (id=14566): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) 40.027215665s ago: executing program 2 (id=14572): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 39.573354995s ago: executing program 2 (id=14576): unshare(0x20000400) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x220700, 0x0) r1 = fanotify_init(0x200, 0x1) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) 38.629093802s ago: executing program 35 (id=14576): unshare(0x20000400) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x220700, 0x0) r1 = fanotify_init(0x200, 0x1) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) 6.502554036s ago: executing program 8 (id=14768): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/155, 0x30}, {0x0, 0x30}], 0x2) 6.226121931s ago: executing program 8 (id=14772): setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x4}, 0x10001}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="02", 0x1}], 0x1}}, {{&(0x7f0000001c80)={0xa, 0x4e23, 0x5b, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xffff}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001d40)='c', 0x1}], 0x1}}], 0x2, 0x48040) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 5.889754433s ago: executing program 8 (id=14777): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0}, 0x5}], 0x1, 0x2000, 0x0) 5.502859115s ago: executing program 8 (id=14780): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) 5.119900125s ago: executing program 8 (id=14783): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 4.740596108s ago: executing program 7 (id=14786): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x4e23, 0xfffffffc, @mcast1={0xff, 0x7}, 0x7fffffff}}, {{0xa, 0x0, 0x2000, @remote}}}, 0x108) 4.457854043s ago: executing program 7 (id=14787): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000200), 0x2, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000480)=[0x2], &(0x7f0000000440)=[r2, r2], &(0x7f0000000040), 0x0, 0x6}) 4.242550098s ago: executing program 7 (id=14788): r0 = userfaultfd(0x80801) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1f, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 4.224181101s ago: executing program 5 (id=14790): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1901) 3.944938324s ago: executing program 7 (id=14793): syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) r0 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x20031, 0xffffffffffffffff, 0xc9247000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x5, {"4e068be8035430cf8aa115d0d8d0f21c", "af86a7d62fdce0b68c2a7502b5b00c9f", "faef725a066e767106fa1a96391039d1"}, 0xe, 0x5}) close(0x4) 3.898700784s ago: executing program 5 (id=14794): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 3.669046067s ago: executing program 5 (id=14796): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x70, 0x7, r1, 0x0, 0xfffffffffffffffc, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r2, 0x0, 0x1, 0x1, &(0x7f0000000000)='L', 0x4}) 3.640223126s ago: executing program 7 (id=14797): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001200)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in=@local, 0x1, 0x71c, 0x4e23, 0x7, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x0, 0x8, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x10001, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 3.358067643s ago: executing program 5 (id=14799): r0 = socket$inet6(0xa, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) ioctl$sock_ifreq(r0, 0x8992, &(0x7f00000000c0)={'team_slave_1\x00', @ifru_addrs=@ethernet={0x1, @multicast}}) 3.059653258s ago: executing program 5 (id=14800): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x80000001, @local, 0x3}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) 2.93345037s ago: executing program 7 (id=14801): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) munlockall() 2.92705019s ago: executing program 5 (id=14802): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.556246793s ago: executing program 8 (id=14803): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_create(0x7, 0x80000) 2.26386138s ago: executing program 3 (id=14804): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 1.900405376s ago: executing program 3 (id=14805): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xe382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 4 (id=14815): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) sendmmsg$unix(r0, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) kernel console output (not intermixed with test programs): [T14783] usb 6-1: USB disconnect, device number 84 [ 1175.577478][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1176.084448][T15603] loop6: detected capacity change from 0 to 7 [ 1176.121533][ C0] blk_print_req_error: 25 callbacks suppressed [ 1176.121555][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1176.137799][ C0] buffer_io_error: 25 callbacks suppressed [ 1176.137816][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.187318][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1176.197000][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.205668][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1176.215455][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.230740][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1176.240925][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.249521][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1176.259378][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.273513][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1176.283276][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.291947][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1176.301564][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.310167][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1176.319812][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.327777][T15603] ldm_validate_partition_table(): Disk read failed. [ 1176.338836][T15610] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13488'. [ 1176.361138][T15610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13488'. [ 1176.371033][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1176.371072][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.394741][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1176.404610][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1176.422848][T15603] Dev loop6: unable to read RDB block 0 [ 1176.443209][T15603] loop6: unable to read partition table [ 1176.491415][T15603] loop6: partition table beyond EOD, truncated [ 1176.497668][T15603] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 1177.574097][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.591277][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.484023][T27833] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1178.605130][T15686] netlink: 'syz.3.13512': attribute type 12 has an invalid length. [ 1178.673404][T27833] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1178.707553][T27833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1178.739867][T27833] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1178.764939][T27833] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1178.788771][T27833] usb 3-1: Product: syz [ 1178.794652][T27833] usb 3-1: Manufacturer: syz [ 1178.799279][T27833] usb 3-1: SerialNumber: syz [ 1178.859180][T27833] usb 3-1: config 0 descriptor?? [ 1178.896856][T27833] usb 3-1: selecting invalid altsetting 0 [ 1178.994397][T15701] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1179.165835][T27833] usb 3-1: USB disconnect, device number 64 [ 1179.286479][T21727] udevd[21727]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1179.804712][T15750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1179.859974][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1179.859995][ T30] audit: type=1326 audit(1773739307.946:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.7.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409299c799 code=0x7ffc0000 [ 1180.018017][ T30] audit: type=1326 audit(1773739307.946:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.7.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409299c799 code=0x7ffc0000 [ 1180.035788][T15764] binder: 15761:15764 ioctl c018620c 200000000000 returned -22 [ 1180.109409][ T30] audit: type=1326 audit(1773739307.946:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.7.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f409299c799 code=0x7ffc0000 [ 1180.243130][ T30] audit: type=1326 audit(1773739307.946:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.7.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409299c799 code=0x7ffc0000 [ 1180.392132][ T30] audit: type=1326 audit(1773739307.946:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.7.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409299c799 code=0x7ffc0000 [ 1180.495140][ T30] audit: type=1326 audit(1773739307.996:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.7.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f409299c799 code=0x7ffc0000 [ 1180.541931][ T30] audit: type=1326 audit(1773739307.996:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.7.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409299c799 code=0x7ffc0000 [ 1180.608614][ T30] audit: type=1326 audit(1773739307.996:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15753 comm="syz.7.13527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409299c799 code=0x7ffc0000 [ 1180.670931][T14771] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1180.833732][T14771] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1180.857536][T14771] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1180.887635][T14771] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.921798][T14771] usb 6-1: config 220 has no interface number 2 [ 1180.930984][T14771] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1180.991548][T14771] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1181.010887][T14771] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1181.017937][T14771] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1181.064769][T14771] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1181.079627][T14771] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.127299][T14771] usb 6-1: Product: syz [ 1181.141044][T14771] usb 6-1: Manufacturer: syz [ 1181.156192][T14771] usb 6-1: SerialNumber: syz [ 1181.180602][T15800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13540'. [ 1181.340813][ T5933] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1181.393741][T14771] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1181.421098][T14771] uvcvideo 6-1:220.0: No valid video chain found. [ 1181.440975][T14771] usb 6-1: selecting invalid altsetting 0 [ 1181.486918][T14771] usb 6-1: selecting invalid altsetting 0 [ 1181.493451][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 1181.531079][ T5933] usb 4-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 1181.550442][T14771] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1181.569178][ T5933] usb 4-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.594860][T14771] usb 6-1: USB disconnect, device number 85 [ 1181.625474][ T5933] usb 4-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1181.662902][ T5933] usb 4-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 1181.711215][ T5933] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1181.722082][T15813] kvm: user requested TSC rate below hardware speed [ 1181.741092][ T5933] usb 4-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 1181.771764][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.822878][ T5933] usb 4-1: config 0 descriptor?? [ 1182.277412][ T5933] wacom 0003:056A:010E.0058: unbalanced collection at end of report description [ 1182.311886][ T5933] wacom 0003:056A:010E.0058: parse failed [ 1182.317821][ T5933] wacom 0003:056A:010E.0058: probe with driver wacom failed with error -22 [ 1182.491049][T27833] usb 4-1: USB disconnect, device number 41 [ 1182.668785][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13553'. [ 1184.768083][ T30] audit: type=1326 audit(1773739312.856:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.5.13576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0059c799 code=0x7ffc0000 [ 1184.811857][ T30] audit: type=1326 audit(1773739312.906:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15973 comm="syz.5.13576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0059c799 code=0x7ffc0000 [ 1187.271690][T16033] could not allocate digest TFM handle -q4O(0&qf=*΀j$;}'jO [ 1188.671300][ T5093] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1188.843899][ T5093] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1188.864201][ T5093] usb 5-1: config 0 has no interface number 0 [ 1188.870407][ T5093] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1188.937243][ T5093] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1188.990254][ T5093] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1189.038656][ T5093] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1189.073083][ T5093] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1189.111549][ T5093] usb 5-1: Product: syz [ 1189.115791][ T5093] usb 5-1: SerialNumber: syz [ 1189.153587][ T5093] usb 5-1: config 0 descriptor?? [ 1189.183778][ T5093] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1189.231934][ T5093] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input111 [ 1189.754808][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1189.764379][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1189.772316][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1189.779651][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1189.786949][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1189.794490][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1189.801791][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1189.808146][T16094] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1189.809419][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1189.823646][ T5933] usb 5-1: USB disconnect, device number 62 [ 1189.830861][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1189.837877][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1189.867877][ T5933] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1190.238925][T16114] netlink: 'syz.3.13616': attribute type 2 has an invalid length. [ 1190.269175][T16114] netlink: 'syz.3.13616': attribute type 11 has an invalid length. [ 1190.296254][T16114] netlink: 88 bytes leftover after parsing attributes in process `syz.3.13616'. [ 1191.179177][T14782] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1191.395727][T14782] usb 4-1: Using ep0 maxpacket: 16 [ 1191.418712][T14782] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1191.440854][T14782] usb 4-1: config 0 has no interface number 0 [ 1191.447110][T14782] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.538941][T14782] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1191.563540][T14782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.613105][T14782] usb 4-1: config 0 descriptor?? [ 1192.086925][T14782] mcp2221 0003:04D8:00DD.0059: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input2 [ 1192.657370][T14783] usb 4-1: USB disconnect, device number 42 [ 1193.411548][T16219] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1193.418217][T16219] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1193.480950][T16219] vhci_hcd vhci_hcd.0: Device attached [ 1193.537121][T16223] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 1193.543811][T16223] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1193.694479][T16223] vhci_hcd vhci_hcd.0: Device attached [ 1193.711819][T16227] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 1193.718570][T16227] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1193.742282][T16219] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 1193.749043][T16219] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1193.780796][T27833] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 1193.814362][T16227] vhci_hcd vhci_hcd.0: Device attached [ 1193.942814][T16219] vhci_hcd vhci_hcd.0: Device attached [ 1193.982705][T16230] vhci_hcd: connection closed [ 1193.984914][T16228] vhci_hcd: connection closed [ 1194.018048][T16224] vhci_hcd: connection closed [ 1194.024153][T12655] vhci_hcd vhci_hcd.2: stop threads [ 1194.030877][T16220] vhci_hcd: connection reset by peer [ 1194.040840][T12655] vhci_hcd vhci_hcd.2: release socket [ 1194.056834][T12655] vhci_hcd vhci_hcd.2: disconnect device [ 1194.087549][T12655] vhci_hcd vhci_hcd.2: stop threads [ 1194.107623][T12655] vhci_hcd vhci_hcd.2: release socket [ 1194.128018][T12655] vhci_hcd vhci_hcd.2: disconnect device [ 1194.161086][T12655] vhci_hcd vhci_hcd.2: stop threads [ 1194.166876][T12655] vhci_hcd vhci_hcd.2: release socket [ 1194.262037][T12655] vhci_hcd vhci_hcd.2: disconnect device [ 1194.299114][T12655] vhci_hcd vhci_hcd.2: stop threads [ 1194.319489][T12655] vhci_hcd vhci_hcd.2: release socket [ 1194.329825][T12655] vhci_hcd vhci_hcd.2: disconnect device [ 1195.443473][ T9159] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.472739][ T9159] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.513052][ T9159] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.549808][ T9159] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1196.151615][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13671'. [ 1196.575914][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13674'. [ 1196.903810][T16341] netlink: 'syz.4.13678': attribute type 6 has an invalid length. [ 1197.286199][T16011] Set syz1 is full, maxelem 65536 reached [ 1197.889230][T16374] CUSE: unknown device info "H" [ 1197.914271][T16374] CUSE: unknown device info "$" [ 1197.936415][T16374] CUSE: unknown device info "Ae-p" [ 1197.959519][T16374] CUSE: unknown device info "%" [ 1198.002778][T16374] CUSE: unknown device info "" [ 1198.070778][T16374] CUSE: unknown device info "" [ 1198.076045][T16374] CUSE: unknown device info "$" [ 1198.111178][T16374] CUSE: unknown device info "" [ 1198.116421][T16374] CUSE: unknown device info "" [ 1198.143302][T16374] CUSE: unknown device info "р" [ 1198.164121][T16376] netlink: set zone limit has 4 unknown bytes [ 1198.167784][T16374] CUSE: unknown device info "" [ 1198.185196][T16374] CUSE: unknown device info "" [ 1198.193356][T16374] CUSE: zero length info key specified [ 1198.382482][T14782] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1198.454308][T16396] netlink: 23 bytes leftover after parsing attributes in process `syz.5.13700'. [ 1198.474513][T16396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13700'. [ 1198.561201][T14782] usb 5-1: Using ep0 maxpacket: 16 [ 1198.568772][T14782] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 1198.600731][T14782] usb 5-1: config 0 has no interface number 0 [ 1198.607116][T14782] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1198.652974][T14782] usb 5-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1198.676305][T14782] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1198.689111][T16405] netlink: 'syz.3.13703': attribute type 10 has an invalid length. [ 1198.702275][T14782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.711324][T16405] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1198.724898][T14782] usb 5-1: config 0 descriptor?? [ 1198.739125][T16405] bond0: (slave netdevsim0): Releasing backup interface [ 1198.781876][T16405] `: Port device netdevsim0 added [ 1198.870860][T14795] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1198.930990][T27833] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1199.041185][T14795] usb 3-1: Using ep0 maxpacket: 8 [ 1199.060166][T14795] usb 3-1: config 0 has no interfaces? [ 1199.072852][T14795] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1199.110810][T14795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.134203][T14795] usb 3-1: Product: syz [ 1199.138471][T14795] usb 3-1: Manufacturer: syz [ 1199.170936][T14795] usb 3-1: SerialNumber: syz [ 1199.181937][T14782] hid (null): bogus close delimiter [ 1199.199110][T14782] hid (null): unknown global tag 0xe5 [ 1199.211969][T14795] usb 3-1: config 0 descriptor?? [ 1199.416323][T14782] usb 5-1: USB disconnect, device number 63 [ 1199.449094][T13057] usb 3-1: USB disconnect, device number 65 [ 1199.765138][T16437] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13708'. [ 1200.232352][ T5093] usb usb38-port1: attempt power cycle [ 1200.792206][ T5093] usb usb38-port1: unable to enumerate USB device [ 1200.974521][T13057] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1201.171051][T13057] usb 5-1: Using ep0 maxpacket: 8 [ 1201.196767][T13057] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 1201.241393][T13057] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 1201.279809][T13057] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1201.325253][T13057] usb 5-1: config 250 has no interface number 0 [ 1201.351490][T13057] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1201.391799][T13057] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1201.418325][T13057] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1201.451080][T13057] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1201.469257][T13057] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1201.511316][T13057] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1201.536508][T13057] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1201.558804][T13057] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1201.578474][T13057] usb 5-1: Product: syz [ 1201.600109][T13057] usb 5-1: SerialNumber: syz [ 1201.645861][T13057] hub 5-1:250.228: bad descriptor, ignoring hub [ 1201.663682][T13057] hub 5-1:250.228: probe with driver hub failed with error -5 [ 1201.837989][T13057] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 64 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1202.230948][T13057] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1202.304012][T14782] usb 5-1: USB disconnect, device number 64 [ 1202.323403][T14782] usblp0: removed [ 1202.421515][T16546] netlink: 208 bytes leftover after parsing attributes in process `syz.3.13740'. [ 1202.439244][T13057] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1202.456483][T13057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.477882][T13057] usb 6-1: Product: syz [ 1202.488155][T13057] usb 6-1: Manufacturer: syz [ 1202.500409][T13057] usb 6-1: SerialNumber: syz [ 1202.532066][T13057] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1202.570813][T27833] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1203.153220][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1203.702437][T14795] usb 6-1: USB disconnect, device number 86 [ 1203.895294][T16589] netem: incorrect gi model size [ 1203.910855][T16589] netem: change failed [ 1204.050772][T14771] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1204.245818][T14771] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1204.270884][T14771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.273466][T27833] usb 6-1: Service connection timeout for: 258 [ 1204.279125][T14771] usb 5-1: Product: syz [ 1204.279143][T14771] usb 5-1: Manufacturer: syz [ 1204.279159][T14771] usb 5-1: SerialNumber: syz [ 1204.322544][T14771] usb 5-1: config 0 descriptor?? [ 1204.339740][T27833] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1204.362906][T27833] ath9k_htc: Failed to initialize the device [ 1204.379516][T14795] usb 6-1: ath9k_htc: USB layer deinitialized [ 1204.621063][T14771] usb 5-1: USB disconnect, device number 65 [ 1205.831443][T27833] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1206.011114][T27833] usb 5-1: Using ep0 maxpacket: 16 [ 1206.042044][T27833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1206.082447][T27833] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1206.100725][T27833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.137054][T27833] usb 5-1: config 0 descriptor?? [ 1206.580806][T14795] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1206.603658][T27833] mcp2221 0003:04D8:00DD.005B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1206.788795][T14795] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1206.824476][T14795] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1206.860309][T14795] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1206.879678][T14795] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1206.895442][T14795] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1206.928615][T14795] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1206.965680][T14795] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1206.990737][T14795] usb 3-1: Product: syz [ 1206.995004][T14795] usb 3-1: Manufacturer: syz [ 1207.056087][T14795] cdc_wdm 3-1:1.0: skipping garbage [ 1207.056638][T14771] usb 5-1: USB disconnect, device number 66 [ 1207.065471][T14795] cdc_wdm 3-1:1.0: skipping garbage [ 1207.108155][T14795] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1207.130810][T14795] cdc_wdm 3-1:1.0: Unknown control protocol [ 1208.902215][T16787] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13799'. [ 1208.953369][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13799'. [ 1209.155603][T27833] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 1209.215863][T27833] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1209.300963][T14795] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1209.343721][T14782] usb 3-1: USB disconnect, device number 66 [ 1209.461322][T27833] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1209.501446][T14795] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1209.576442][T14795] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.599149][T14795] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.649667][T14795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1209.661377][T27833] usb 6-1: Using ep0 maxpacket: 8 [ 1209.684085][T27833] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1209.693239][T14795] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.719796][T14795] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.731948][T27833] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1209.761032][T27833] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1209.771445][T14795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1209.801257][T27833] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1209.812236][T14795] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.831538][T14795] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.844419][T27833] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1209.868893][T14795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1209.880741][T27833] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1209.911021][T27833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.929987][T14795] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1209.942035][T14795] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1209.994433][T14795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1210.027277][T14795] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1210.060749][T14795] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1210.091056][T14795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1210.108181][T14795] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1210.129378][T14795] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1210.165452][T14795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1210.210621][T14795] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1210.235647][T14795] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1210.269075][T14795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1210.290882][T14795] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1210.300475][T14795] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1210.323858][T14795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1210.344582][T14795] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1210.356293][T14795] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1210.388209][T27833] usb 6-1: USB disconnect, device number 87 [ 1210.396884][T14795] usb 4-1: Product: syz [ 1210.415951][T14795] usb 4-1: Manufacturer: syz [ 1210.447084][T14795] usb 4-1: SerialNumber: syz [ 1210.474764][T14795] usb 4-1: config 0 descriptor?? [ 1210.504813][T14795] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1210.871467][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 1210.873512][ T5933] usb 4-1: USB disconnect, device number 43 [ 1210.937494][ T5933] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1211.341294][T14795] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1211.574566][T14795] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1211.591091][T14795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.612177][T14795] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1211.642162][T14795] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1211.688509][T14795] usb 5-1: Manufacturer: syz [ 1211.707394][T14795] usb 5-1: config 0 descriptor?? [ 1211.854686][T16881] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13814'. [ 1211.886440][T16881] netlink: 3 bytes leftover after parsing attributes in process `syz.7.13814'. [ 1211.951236][T14795] rc_core: IR keymap rc-hauppauge not found [ 1211.989869][T14795] Registered IR keymap rc-empty [ 1212.024563][T14795] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1212.069700][T14795] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input112 [ 1212.194217][T14795] usb 5-1: USB disconnect, device number 67 [ 1212.850846][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1213.580838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1214.761225][T16962] netlink: 'syz.5.13837': attribute type 1 has an invalid length. [ 1214.792987][T16962] netlink: 'syz.5.13837': attribute type 2 has an invalid length. [ 1214.840409][T16962] netlink: 'syz.5.13837': attribute type 1 has an invalid length. [ 1214.868809][T16962] netlink: 'syz.5.13837': attribute type 3 has an invalid length. [ 1214.881022][ T5933] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1214.911885][T16962] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13837'. [ 1215.044685][ T5933] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1215.077945][ T5933] usb 4-1: config 0 has no interface number 0 [ 1215.113778][ T5933] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1215.147164][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.186063][ T5933] usb 4-1: Product: syz [ 1215.205686][ T5933] usb 4-1: Manufacturer: syz [ 1215.226288][ T5933] usb 4-1: SerialNumber: syz [ 1215.268511][T16969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13839'. [ 1215.271268][ T5933] usb 4-1: config 0 descriptor?? [ 1215.526106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 1215.546034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 1215.573231][ T5933] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1215.622073][ T5933] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1215.677561][ T5933] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1215.720858][ T5933] usb 4-1: media controller created [ 1215.786044][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1215.796333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1215.901223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1216.002293][ T5933] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1216.183211][T17005] input: syz0 as /devices/virtual/input/input113 [ 1216.236346][ T5933] usb 4-1: USB disconnect, device number 44 [ 1216.361170][T14782] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1216.553721][T14782] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1216.570743][T14782] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1216.615449][T14782] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1216.670288][T14782] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1216.690765][T14782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.725062][T14782] usb 6-1: Product: syz [ 1216.729268][T14782] usb 6-1: Manufacturer: syz [ 1216.753141][T14782] usb 6-1: SerialNumber: syz [ 1216.770790][T27833] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1216.786604][T14782] hub 6-1:1.0: bad descriptor, ignoring hub [ 1216.815167][T14782] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1216.931206][T14795] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1216.957823][T27833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1216.980869][T27833] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.022489][T14782] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1217.051591][T27833] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1217.076633][T27833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.098932][T27833] usb 3-1: Product: syz [ 1217.104068][T27833] usb 3-1: Manufacturer: syz [ 1217.120637][T27833] usb 3-1: SerialNumber: syz [ 1217.121056][T14795] usb 4-1: Using ep0 maxpacket: 32 [ 1217.159782][T14795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.193052][T14795] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1217.216340][T14795] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1217.264382][T14795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.297476][T14795] usb 4-1: config 0 descriptor?? [ 1217.396056][T14782] usb 6-1: USB disconnect, device number 88 [ 1217.429354][T14782] usblp0: removed [ 1217.503582][T27833] usb 3-1: reset high-speed USB device number 67 using dummy_hcd [ 1217.570839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 1217.749094][T14795] koneplus 0003:1E7D:2D51.005D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 1218.146556][T14782] usb 4-1: USB disconnect, device number 45 [ 1218.206876][T27833] usb 3-1: device descriptor read/64, error -71 [ 1218.250901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 1218.321759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1218.350872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1218.471284][T27833] usb 3-1: reset high-speed USB device number 67 using dummy_hcd [ 1218.673183][T27833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1218.725558][T27833] usb 3-1: device firmware changed [ 1218.771989][T27833] usb 3-1: USB disconnect, device number 67 [ 1219.085607][T17136] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13869'. [ 1219.141439][ T5933] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1219.320965][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 1219.343405][ T5933] usb 5-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7 [ 1219.373099][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.410731][ T5933] usb 5-1: Product: syz [ 1219.420925][ T5933] usb 5-1: Manufacturer: syz [ 1219.436097][ T5933] usb 5-1: SerialNumber: syz [ 1219.470841][ T5933] usb 5-1: config 0 descriptor?? [ 1219.696446][ T5933] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II [ 1219.880912][ T5093] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1220.051062][ T5093] usb 3-1: Using ep0 maxpacket: 16 [ 1220.074134][ T5093] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.130838][ T5093] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1220.176080][ T5093] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1220.206781][ T5093] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1220.252267][ T5093] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1220.275815][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1220.305085][ T5093] usb 3-1: SerialNumber: syz [ 1220.327367][T17150] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1220.344965][T17150] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1220.370944][ T5933] usb 5-1: reset high-speed USB device number 68 using dummy_hcd [ 1220.393327][ T5093] hub 3-1:1.0: bad descriptor, ignoring hub [ 1220.419119][ T5093] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1220.651745][T17150] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1220.659405][T17150] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1220.807022][ T5933] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 1220.827204][ T5933] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1221.006174][T14782] usb 5-1: USB disconnect, device number 68 [ 1221.213914][ T5093] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 1221.516909][T14795] usb 3-1: USB disconnect, device number 68 [ 1221.562347][T14795] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 1223.380777][T14795] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1223.411024][T17295] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1223.571140][T14795] usb 5-1: Using ep0 maxpacket: 32 [ 1223.597098][T14795] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1223.597132][T14795] usb 5-1: config 0 has no interface number 0 [ 1223.597174][T14795] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1223.597201][T14795] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1223.604571][T14795] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1223.604605][T14795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.604626][T14795] usb 5-1: Product: syz [ 1223.604642][T14795] usb 5-1: Manufacturer: syz [ 1223.604658][T14795] usb 5-1: SerialNumber: syz [ 1223.607770][T14795] usb 5-1: config 0 descriptor?? [ 1224.228766][T14795] appletouch 5-1:0.85: Geyser mode initialized. [ 1224.236804][T14795] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input114 [ 1224.457123][T14795] usb 5-1: USB disconnect, device number 69 [ 1224.641645][T14795] appletouch 5-1:0.85: input: appletouch disconnected [ 1224.794968][T17360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13912'. [ 1225.102954][T14795] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1225.318879][T14795] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 1225.350488][T14795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.410787][T14795] usb 6-1: config 0 has no interfaces? [ 1225.422379][T17402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13918'. [ 1225.475485][T14795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.501888][T17402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13918'. [ 1225.521349][T14795] usb 6-1: config 0 has no interfaces? [ 1225.543953][T14795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.573264][T14795] usb 6-1: config 0 has no interfaces? [ 1225.587036][T14795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.606094][T14795] usb 6-1: config 0 has no interfaces? [ 1225.622439][T14795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.650930][T14795] usb 6-1: config 0 has no interfaces? [ 1225.669693][T14795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.708928][T14795] usb 6-1: config 0 has no interfaces? [ 1225.742677][T14795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.773092][T27833] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1225.783856][T14795] usb 6-1: config 0 has no interfaces? [ 1225.812857][T14795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.841897][T14795] usb 6-1: config 0 has no interfaces? [ 1225.851397][T14795] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1225.871938][T14795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.914461][T14795] usb 6-1: config 0 descriptor?? [ 1225.951527][T27833] usb 4-1: Using ep0 maxpacket: 16 [ 1225.963666][T27833] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1225.973475][T27833] usb 4-1: config 7 has an invalid interface number: 139 but max is 0 [ 1225.983591][T27833] usb 4-1: config 7 has no interface number 0 [ 1225.989740][T27833] usb 4-1: config 7 interface 139 has no altsetting 0 [ 1226.018944][T27833] usb 4-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=4f.3c [ 1226.038469][T27833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.058010][T27833] usb 4-1: Product: syz [ 1226.068157][T27833] usb 4-1: Manufacturer: syz [ 1226.081434][T27833] usb 4-1: SerialNumber: syz [ 1226.245100][T14795] usb 6-1: USB disconnect, device number 89 [ 1226.350597][T27833] mct_u232 4-1:7.139: MCT U232 converter detected [ 1226.389107][T27833] mct_u232 ttyUSB0: expected endpoint missing [ 1226.423163][T27833] usb 4-1: USB disconnect, device number 46 [ 1226.460636][T27833] mct_u232 4-1:7.139: device disconnected [ 1227.099058][T17472] loop9: detected capacity change from 0 to 7 [ 1227.139803][T17472] Dev loop9: unable to read RDB block 7 [ 1227.180940][T17472] loop9: unable to read partition table [ 1227.186924][T17472] loop9: partition table beyond EOD, truncated [ 1227.222986][T17472] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1227.973499][T17502] tap0: tun_chr_ioctl cmd 1074025680 [ 1228.700880][T27833] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1228.888190][T27833] usb 5-1: Using ep0 maxpacket: 32 [ 1228.908331][T27833] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1228.922609][T27833] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1228.929276][T27833] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1228.959801][T27833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.000386][T27833] usb 5-1: config 0 descriptor?? [ 1229.073411][T17539] delete_channel: no stack [ 1229.497874][T27833] corsair-cpro 0003:1B1C:0C10.005E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 1229.878508][T27833] corsair-cpro 0003:1B1C:0C10.005E: probe with driver corsair-cpro failed with error -71 [ 1229.928973][T27833] usb 5-1: USB disconnect, device number 70 [ 1230.691122][T14795] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1230.891845][T14795] usb 3-1: Using ep0 maxpacket: 16 [ 1230.910467][T14795] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1230.997844][T14795] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1231.023583][T14795] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1231.070823][T14795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.081050][T14795] usb 3-1: Product: syz [ 1231.085351][T14795] usb 3-1: Manufacturer: syz [ 1231.101598][T14795] usb 3-1: SerialNumber: syz [ 1231.145068][T14795] usb 3-1: config 0 descriptor?? [ 1231.431859][T14795] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input115 [ 1231.786758][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1231.797359][T14795] imon:send_packet: packet tx failed (-71) [ 1231.824898][T14782] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1231.852369][T14795] imon 3-1:0.0: panel buttons/knobs setup failed [ 1231.861463][T27833] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1231.993507][T14782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1232.026346][T14782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.039969][T27833] usb 6-1: Using ep0 maxpacket: 8 [ 1232.050830][T14795] rc_core: IR keymap rc-imon-pad not found [ 1232.058349][T14795] Registered IR keymap rc-empty [ 1232.065789][T14782] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1232.092050][T14795] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1232.112686][T27833] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1232.123780][T14795] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1232.135321][T14782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1232.146636][T27833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.165210][T27833] usb 6-1: Product: syz [ 1232.181952][T14795] imon:send_packet: packet tx failed (-71) [ 1232.187989][T14782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.199021][T27833] usb 6-1: Manufacturer: syz [ 1232.210840][T14795] imon 3-1:0.0: remote input dev register failed [ 1232.217420][T14795] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 1232.225145][T13057] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1232.233622][T27833] usb 6-1: SerialNumber: syz [ 1232.240627][T14782] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1232.263627][T27833] usb 6-1: config 0 descriptor?? [ 1232.281309][T27833] gspca_main: se401-2.14.0 probing 047d:5003 [ 1232.295416][T14782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1232.317946][T14795] imon 3-1:0.0: unable to initialize intf0, err 0 [ 1232.324843][T14782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.350906][T14795] imon:imon_probe: failed to initialize context! [ 1232.357539][T14795] imon 3-1:0.0: unable to register, err -19 [ 1232.367535][T14782] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1232.408283][T14795] usb 3-1: USB disconnect, device number 69 [ 1232.436015][T14782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1232.461369][T13057] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1232.488753][T14782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.494103][T17643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1232.503177][T13057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.531004][T14782] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1232.545637][T17643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1232.580421][T13057] usb 5-1: Product: syz [ 1232.611457][T13057] usb 5-1: Manufacturer: syz [ 1232.616165][T13057] usb 5-1: SerialNumber: syz [ 1232.633215][T14782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1232.652503][T14782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.664623][T13057] usb 5-1: config 0 descriptor?? [ 1232.681135][T14782] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1232.713279][T14782] usb 4-1: New USB device found, idVendor=04b4, idProduct=0000, bcdDevice= 0.00 [ 1232.732925][T14782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.758043][T14782] usb 4-1: config 0 descriptor?? [ 1232.909717][T27833] gspca_se401: ExtraFeatures: 4 [ 1232.936110][T27833] gspca_se401: Frame size: 64x513 bayer [ 1232.945284][T13057] usb 5-1: USB disconnect, device number 71 [ 1232.966477][T27833] gspca_se401: Frame size: 259x521 bayer [ 1233.004042][T27833] gspca_se401: Frame size: 96x259 bayer [ 1233.009826][T27833] gspca_se401: Frame size: 8198x2311 bayer [ 1233.048365][T27833] gspca_se401: Frame size: 4x0 bayer [ 1233.077095][T21727] udevd[21727]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1233.133171][T27833] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input117 [ 1233.230591][T14782] hid (null): bogus close delimiter [ 1233.264190][T27833] usb 6-1: USB disconnect, device number 90 [ 1233.292290][T14782] hid-generic 0003:04B4:0000.005F: bogus close delimiter [ 1233.310357][T14782] hid-generic 0003:04B4:0000.005F: item 0 1 2 10 parsing failed [ 1233.386481][T14782] hid-generic 0003:04B4:0000.005F: probe with driver hid-generic failed with error -22 [ 1233.453092][T14782] usb 4-1: USB disconnect, device number 47 [ 1233.458614][T17732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13992'. [ 1234.773458][T17799] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1234.781211][T17799] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1235.301044][T27833] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1235.487668][T27833] usb 6-1: Using ep0 maxpacket: 16 [ 1235.506488][T27833] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1235.542158][T27833] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1235.583918][T27833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.760866][T27833] usb 6-1: Product: syz [ 1235.765216][T27833] usb 6-1: Manufacturer: syz [ 1235.791171][T27833] usb 6-1: SerialNumber: syz [ 1235.823543][T27833] usb 6-1: config 0 descriptor?? [ 1235.857165][T27833] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1235.906414][T27833] usb 6-1: Detected FT232R [ 1236.060589][T27833] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1236.398327][T27833] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1236.489624][T17845] sctp: [Deprecated]: syz.2.14020 (pid 17845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1236.489624][T17845] Use struct sctp_sack_info instead [ 1236.550542][ T5093] usb 6-1: USB disconnect, device number 91 [ 1236.611114][ T5093] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1236.665915][ T5093] ftdi_sio 6-1:0.0: device disconnected [ 1238.248931][T27833] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1238.426037][T27833] usb 4-1: Using ep0 maxpacket: 32 [ 1238.450584][T27833] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1238.481069][T27833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.540101][T27833] usb 4-1: Product: syz [ 1238.551324][T27833] usb 4-1: Manufacturer: syz [ 1238.566400][T27833] usb 4-1: SerialNumber: syz [ 1238.608090][T27833] usb 4-1: config 0 descriptor?? [ 1238.997232][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.007986][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.068356][T27833] airspy 4-1:0.0: Board ID: 00 [ 1239.081534][T27833] airspy 4-1:0.0: Firmware version: [ 1239.270066][T27833] airspy 4-1:0.0: usb_control_msg() failed -71 request 11 [ 1239.289648][T27833] airspy 4-1:0.0: Registered as swradio24 [ 1239.314170][T27833] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1239.381716][T27833] usb 4-1: USB disconnect, device number 48 [ 1239.481434][T13057] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1239.644102][T13057] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1239.673873][T13057] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1239.723792][T13057] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1239.741733][T13057] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1239.758349][T13057] usb 6-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1239.768909][T13057] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.831211][T13057] usb 6-1: Product: syz [ 1239.840008][T13057] usb 6-1: Manufacturer: syz [ 1239.863646][T13057] usb 6-1: SerialNumber: syz [ 1239.899972][T13057] usb 6-1: config 0 descriptor?? [ 1239.922898][T13057] ums-isd200 6-1:0.0: USB Mass Storage device detected [ 1240.062424][T17956] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14048'. [ 1240.182795][T13057] scsi host1: usb-storage 6-1:0.0 [ 1240.428602][T27833] usb 6-1: USB disconnect, device number 92 [ 1242.761898][T13057] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 1242.934992][T13057] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1242.972946][T13057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.015498][T13057] usb 6-1: config 0 descriptor?? [ 1243.052908][T13057] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1243.601862][T18069] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.14082'. [ 1243.676170][T13057] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1243.720780][T13057] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1243.898835][T14774] usb 6-1: USB disconnect, device number 93 [ 1244.278083][T18091] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14089'. [ 1245.237690][T27833] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1245.441012][T27833] usb 6-1: Using ep0 maxpacket: 32 [ 1245.501777][T27833] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1245.510284][T27833] usb 6-1: config 0 has no interface number 0 [ 1245.562066][T27833] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1245.585270][T27833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.611396][T27833] usb 6-1: Product: syz [ 1245.625812][T27833] usb 6-1: Manufacturer: syz [ 1245.658931][T27833] usb 6-1: SerialNumber: syz [ 1245.700213][T27833] usb 6-1: config 0 descriptor?? [ 1245.735258][T27833] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1245.967615][T27833] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1246.020151][T27833] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1246.128625][T18146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14106'. [ 1246.406247][T18159] tipc: Enabling of bearer rejected, already enabled [ 1246.419102][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1246.421956][ T5933] usb 6-1: USB disconnect, device number 94 [ 1246.493217][ T5933] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1246.542717][ T5933] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1246.607423][ T5933] quatech2 6-1:0.51: device disconnected [ 1248.335850][T18253] netlink: 27 bytes leftover after parsing attributes in process `syz.4.14140'. [ 1248.479879][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14141'. [ 1249.595909][T27833] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1249.813056][T27833] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.823813][T14795] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1249.845243][T27833] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1249.863671][T27833] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1249.885153][T27833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1249.902162][T27833] usb 5-1: SerialNumber: syz [ 1250.014529][T14795] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.032311][T14795] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1250.071481][T14795] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1250.093815][T14795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1250.119155][T14795] usb 3-1: SerialNumber: syz [ 1250.147824][T27833] usb 5-1: 0:2 : does not exist [ 1250.298370][T27833] usb 5-1: USB disconnect, device number 72 [ 1250.374710][T14795] usb 3-1: 0:2 : does not exist [ 1250.438548][T18746] udevd[18746]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1250.562347][T14795] usb 3-1: USB disconnect, device number 70 [ 1250.617966][T18746] udevd[18746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1251.371279][T13057] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1251.400857][ T5933] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1251.542473][T13057] usb 6-1: Using ep0 maxpacket: 16 [ 1251.557420][T13057] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 1251.571034][ T5933] usb 3-1: Using ep0 maxpacket: 32 [ 1251.580966][T13057] usb 6-1: config 0 has no interface number 0 [ 1251.587216][T13057] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.589059][ T5933] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1251.637728][ T5933] usb 3-1: config 0 has no interface number 0 [ 1251.644464][T13057] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1251.658373][ T5933] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1251.666356][T13057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.700981][ T5933] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1251.727315][ T5933] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1251.747145][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.757396][T13057] usb 6-1: config 0 descriptor?? [ 1251.777649][ T5933] usb 3-1: Product: syz [ 1251.787923][ T5933] usb 3-1: Manufacturer: syz [ 1251.802008][ T5933] usb 3-1: SerialNumber: syz [ 1251.827869][ T5933] usb 3-1: config 0 descriptor?? [ 1252.244364][T13057] mcp2221 0003:04D8:00DD.0060: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input2 [ 1252.628690][ T5933] appletouch 3-1:0.85: Geyser mode initialized. [ 1252.655924][ T5933] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input118 [ 1252.706939][ C1] appletouch 3-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1252.771134][T13057] usb 6-1: USB disconnect, device number 95 [ 1253.016853][T14782] usb 3-1: USB disconnect, device number 71 [ 1253.023218][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1253.148096][T14782] appletouch 3-1:0.85: input: appletouch disconnected [ 1254.093637][T18495] netlink: 60 bytes leftover after parsing attributes in process `syz.5.14194'. [ 1254.881900][T14795] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1255.079771][T14795] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1255.103348][T14795] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1255.147768][T14795] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.190500][T14795] usb 4-1: config 220 has no interface number 2 [ 1255.217203][T14795] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1255.287871][T14795] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1255.301527][T14795] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1255.332750][T14795] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1255.373727][T14795] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1255.400904][T14795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.444051][T14795] usb 4-1: Product: syz [ 1255.454192][T14795] usb 4-1: Manufacturer: syz [ 1255.458931][T14795] usb 4-1: SerialNumber: syz [ 1255.802164][T14795] uvcvideo 4-1:220.1: Unknown video format 40000000-0000-2800-0000-000000000000 [ 1255.814847][T14795] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1255.881375][T14795] uvcvideo 4-1:220.0: No valid video chain found. [ 1255.888112][T14795] usb 4-1: selecting invalid altsetting 0 [ 1255.980022][T14795] usb 4-1: selecting invalid altsetting 0 [ 1255.987931][T14795] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1256.019176][T14795] usb 4-1: USB disconnect, device number 49 [ 1257.318572][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14221'. [ 1257.510288][T18595] vivid-001: ================= START STATUS ================= [ 1257.538307][T18595] vivid-001: Radio HW Seek Mode: Bounded [ 1257.562138][T18595] vivid-001: Radio Programmable HW Seek: false [ 1257.569514][T18595] vivid-001: RDS Rx I/O Mode: Block I/O [ 1257.624231][T18595] vivid-001: Generate RBDS Instead of RDS: false [ 1257.650859][T18595] vivid-001: RDS Reception: true [ 1257.672080][T18595] vivid-001: RDS Program Type: 0 inactive [ 1257.705019][T18595] vivid-001: RDS PS Name: inactive [ 1257.712595][T18595] vivid-001: RDS Radio Text: inactive [ 1257.721903][T18595] vivid-001: RDS Traffic Announcement: false inactive [ 1257.729467][T18595] vivid-001: RDS Traffic Program: false inactive [ 1257.736484][T18595] vivid-001: RDS Music: false inactive [ 1257.742607][T18595] vivid-001: ================== END STATUS ================== [ 1258.827290][T18651] Invalid argument reading file caps for ./file0 [ 1259.141700][T14774] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1259.281122][ T5093] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1259.311421][T14774] usb 3-1: Using ep0 maxpacket: 16 [ 1259.319144][T14774] usb 3-1: config 0 has no interfaces? [ 1259.379565][T14774] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1259.421773][T14774] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1259.430275][T14774] usb 3-1: Manufacturer: syz [ 1259.490945][ T5093] usb 6-1: Using ep0 maxpacket: 32 [ 1259.510975][ T5933] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1259.524280][T14774] usb 3-1: config 0 descriptor?? [ 1259.546569][ T5093] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1259.580139][ T5093] usb 6-1: config 0 has no interface number 0 [ 1259.601975][ T5093] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1259.642059][ T5093] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1259.664542][ T5093] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1259.690763][ T5093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.719438][ T5093] usb 6-1: Product: syz [ 1259.729669][ T5093] usb 6-1: Manufacturer: syz [ 1259.746417][ T5093] usb 6-1: SerialNumber: syz [ 1259.762642][ T5933] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1259.784204][ T5093] usb 6-1: config 0 descriptor?? [ 1259.789459][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.823102][ T5933] usb 4-1: Product: syz [ 1259.827363][ T5933] usb 4-1: Manufacturer: syz [ 1259.860818][ T5933] usb 4-1: SerialNumber: syz [ 1259.969312][T14795] usb 3-1: USB disconnect, device number 72 [ 1260.431061][ T5093] appletouch 6-1:0.85: Geyser mode initialized. [ 1260.468284][ T5093] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input119 [ 1260.699996][ T5093] usb 6-1: USB disconnect, device number 96 [ 1260.721732][ T5933] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1260.770455][ T5933] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1260.813023][ T5093] appletouch 6-1:0.85: input: appletouch disconnected [ 1260.843342][ T5933] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1260.899889][ T5933] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1260.960137][ T5933] usb 4-1: USB disconnect, device number 50 [ 1261.071717][T18702] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1261.244787][T18702] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1261.291298][T18702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1261.324378][T18702] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1261.340881][T18702] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1261.349593][T18702] usb 3-1: Manufacturer: syz [ 1261.394569][T18702] usb 3-1: config 0 descriptor?? [ 1261.583795][T18702] rc_core: IR keymap rc-hauppauge not found [ 1261.589765][T18702] Registered IR keymap rc-empty [ 1261.622315][T18702] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1261.658629][T18702] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input120 [ 1261.747472][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 1261.782689][T18702] usb 3-1: USB disconnect, device number 73 [ 1261.993546][T18816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14266'. [ 1262.390442][T18835] netlink: 236 bytes leftover after parsing attributes in process `syz.4.14271'. [ 1262.419906][T18835] netlink: 236 bytes leftover after parsing attributes in process `syz.4.14271'. [ 1262.460892][T14795] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1262.681421][T14795] usb 6-1: Using ep0 maxpacket: 8 [ 1262.703845][T14795] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1262.731220][T14795] usb 6-1: config 179 has no interface number 0 [ 1262.774832][T14795] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1262.808784][T14795] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1262.849615][T14795] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1262.864338][T14795] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1262.876791][T14795] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1262.892977][T14795] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1262.902231][T14795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.017018][T18825] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1263.352419][T14795] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input121 [ 1263.528496][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1263.528496][T18702] usb 6-1: USB disconnect, device number 97 [ 1263.528634][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1264.096842][T12649] tipc: Subscription rejected, illegal request [ 1264.157004][T18934] tmpfs: Unknown parameter 'rootmode' [ 1266.231084][T14795] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1266.416697][T19016] input: syz1 as /devices/virtual/input/input123 [ 1266.432823][T14795] usb 4-1: Using ep0 maxpacket: 16 [ 1266.465000][T14795] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1266.497185][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14297'. [ 1266.519423][T14795] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1266.528499][T18944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14297'. [ 1266.623399][T19017] all (unregistering): Released all slaves [ 1266.641976][T14795] usb 4-1: config 1 has no interface number 1 [ 1266.681145][T14795] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1266.746857][T14795] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1266.834121][T14795] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1266.861676][T14795] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1266.885599][T14795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.940884][T14795] usb 4-1: Product: syz [ 1266.951209][T14795] usb 4-1: Manufacturer: syz [ 1266.960958][T14795] usb 4-1: SerialNumber: syz [ 1267.050212][T19096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14312'. [ 1267.407680][T14795] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 1267.416446][T14795] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1268.370125][T14795] usb 4-1: USB disconnect, device number 51 [ 1268.473746][T16767] udevd[16767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1269.081149][T14795] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1269.281713][T14795] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 1269.316203][T14795] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1269.336276][T14795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.355152][T14795] usb 5-1: Product: syz [ 1269.360917][T14795] usb 5-1: Manufacturer: syz [ 1269.371255][T14795] usb 5-1: SerialNumber: syz [ 1269.460926][T18702] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1269.666124][T18702] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1269.690931][T18702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.699017][T18702] usb 4-1: Product: syz [ 1269.720840][T18702] usb 4-1: Manufacturer: syz [ 1269.725682][T18702] usb 4-1: SerialNumber: syz [ 1269.744694][T14795] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1269.786102][T18702] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1269.797849][T14795] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1269.810318][T14774] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1269.813350][T14795] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1269.845636][T14795] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1269.890922][T14795] usb 5-1: USB disconnect, device number 73 [ 1270.134367][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1270.134386][ T30] audit: type=1326 audit(1773739398.226:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.2.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34539c799 code=0x7ffc0000 [ 1270.361170][ T30] audit: type=1326 audit(1773739398.226:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.2.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34539c799 code=0x7ffc0000 [ 1270.481000][ T30] audit: type=1326 audit(1773739398.266:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.2.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fa34539c799 code=0x7ffc0000 [ 1270.544641][ T30] audit: type=1326 audit(1773739398.266:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.2.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34539c799 code=0x7ffc0000 [ 1270.650292][ T30] audit: type=1326 audit(1773739398.266:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.2.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34539c799 code=0x7ffc0000 [ 1270.781926][T14782] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1270.792405][ T30] audit: type=1326 audit(1773739398.276:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.2.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7fa34539c799 code=0x7ffc0000 [ 1270.890828][ T30] audit: type=1326 audit(1773739398.276:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.2.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34539c799 code=0x7ffc0000 [ 1270.895805][ T5093] usb 4-1: USB disconnect, device number 52 [ 1271.014162][T14782] usb 6-1: Using ep0 maxpacket: 8 [ 1271.055694][ T30] audit: type=1326 audit(1773739398.276:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19248 comm="syz.2.14338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa34539c799 code=0x7ffc0000 [ 1271.055901][T14782] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1271.110827][T14782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.158043][T14782] usb 6-1: Product: syz [ 1271.167116][T14782] usb 6-1: Manufacturer: syz [ 1271.177245][T14782] usb 6-1: SerialNumber: syz [ 1271.202383][T14782] usb 6-1: config 0 descriptor?? [ 1271.421508][T14782] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1271.711432][T14774] usb 4-1: Service connection timeout for: 260 [ 1271.717757][T14774] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1271.771417][T14774] ath9k_htc: Failed to initialize the device [ 1271.777662][ T5093] usb 4-1: ath9k_htc: USB layer deinitialized [ 1272.091367][T14795] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1272.240485][T14782] usb write operation failed. (-71) [ 1272.262020][T14795] usb 3-1: Using ep0 maxpacket: 32 [ 1272.286763][T14782] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1272.344276][T14795] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1272.353580][T14782] dvbdev: DVB: registering new adapter (Terratec H7) [ 1272.380792][T14782] usb 6-1: media controller created [ 1272.397829][T14795] usb 3-1: config 0 has no interface number 0 [ 1272.406813][T14782] usb read operation failed. (-71) [ 1272.412415][T14795] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1272.429942][T14782] usb write operation failed. (-71) [ 1272.445942][T14795] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1272.474656][T14782] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1272.486831][T14795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.498629][T19311] netlink: 256 bytes leftover after parsing attributes in process `syz.7.14351'. [ 1272.516954][T14795] usb 3-1: Product: syz [ 1272.531548][T19311] netlink: 256 bytes leftover after parsing attributes in process `syz.7.14351'. [ 1272.541499][T14782] usb 6-1: USB disconnect, device number 98 [ 1272.550020][T14795] usb 3-1: Manufacturer: syz [ 1272.556235][T14795] usb 3-1: SerialNumber: syz [ 1272.582467][T14795] usb 3-1: config 0 descriptor?? [ 1273.362673][T19352] input: syz0 as /devices/virtual/input/input124 [ 1273.633286][T14795] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1273.672088][T14795] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1273.704618][T14795] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1273.757850][T14795] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1273.772661][T14795] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1273.787771][T14795] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1273.801442][T14795] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1273.822972][T14795] usb 3-1: USB disconnect, device number 74 [ 1275.131647][T19406] batadv_slave_0: entered promiscuous mode [ 1275.161541][T19404] batadv_slave_0: left promiscuous mode [ 1275.444353][ T30] audit: type=1326 audit(1773739403.536:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19408 comm="syz.4.14370" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6a2d19c799 code=0x0 [ 1275.770852][T27833] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1275.946482][T27833] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1275.979272][T27833] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1276.064607][T27833] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1276.076442][T27833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.299406][T27833] usb 3-1: usb_control_msg returned -32 [ 1276.323556][T27833] usbtmc 3-1:16.0: can't read capabilities [ 1276.900172][T19455] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14382'. [ 1277.476739][T19469] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.14385'. [ 1277.580082][T19474] Invalid argument reading file caps for ./file0 [ 1277.943931][T19482] Invalid argument reading file caps for ./file0 [ 1278.023425][T19484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14392'. [ 1278.496237][T14782] usb 3-1: USB disconnect, device number 75 [ 1279.851085][T27833] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1280.028813][T27833] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1280.050500][T27833] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1280.087196][T27833] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.130977][T27833] usb 6-1: config 220 has no interface number 2 [ 1280.144553][T27833] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1280.196627][T27833] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1280.214720][T27833] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1280.235423][T27833] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1280.254149][T27833] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1280.268834][T27833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.306896][T27833] usb 6-1: Product: syz [ 1280.321259][T27833] usb 6-1: Manufacturer: syz [ 1280.336339][T27833] usb 6-1: SerialNumber: syz [ 1280.451587][T14774] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1280.609615][T27833] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1280.625410][T27833] uvcvideo 6-1:220.0: No valid video chain found. [ 1280.641013][T14774] usb 3-1: Using ep0 maxpacket: 32 [ 1280.651227][T27833] usb 6-1: selecting invalid altsetting 0 [ 1280.661345][T14774] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1280.671480][T14774] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1280.691261][T27833] usb 6-1: selecting invalid altsetting 0 [ 1280.709820][T27833] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1280.711428][T14774] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1280.750504][T27833] usb 6-1: USB disconnect, device number 99 [ 1280.772694][T14774] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1280.825688][T14774] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1280.961810][T14774] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1280.990895][T14774] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1281.030707][T14774] usb 3-1: Product: syz [ 1281.041656][T14774] usb 3-1: Manufacturer: syz [ 1281.056771][T14774] usb 3-1: SerialNumber: syz [ 1281.080500][T14774] usb 3-1: config 0 descriptor?? [ 1281.104723][T14774] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1281.141689][T14774] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1281.526312][T19543] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 1281.527426][ T5093] usb 3-1: USB disconnect, device number 76 [ 1281.534208][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 1281.561359][ T5093] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1281.902530][T19603] loop2: detected capacity change from 0 to 7 [ 1281.931041][T19603] Dev loop2: unable to read RDB block 7 [ 1281.936685][T19603] loop2: unable to read partition table [ 1281.951490][T19603] loop2: partition table beyond EOD, truncated [ 1281.968099][T19603] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1282.880904][ T5093] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1283.044141][ T5093] usb 5-1: Using ep0 maxpacket: 32 [ 1283.073830][ T5093] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.120754][ T5093] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1283.173744][ T5093] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1283.221489][ T5093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.229663][ T5093] usb 5-1: Product: syz [ 1283.278144][ T5093] usb 5-1: Manufacturer: syz [ 1283.298511][ T5093] usb 5-1: SerialNumber: syz [ 1283.332311][ T5093] usb 5-1: config 0 descriptor?? [ 1283.444687][T19664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1283.590198][ T5093] usb 5-1: USB disconnect, device number 74 [ 1284.006823][T19684] tipc: Enabling of bearer rejected, already enabled [ 1284.031659][T19694] tipc: New replicast peer: 255.255.255.255 [ 1285.997944][T19715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14436'. [ 1286.081587][T19715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14436'. [ 1287.112705][ T5093] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1287.282173][ T5093] usb 4-1: Using ep0 maxpacket: 32 [ 1287.305592][ T5093] usb 4-1: config 0 has no interfaces? [ 1287.311720][ T5093] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1287.340963][ T5093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.381928][ T5093] usb 4-1: config 0 descriptor?? [ 1287.981466][T27833] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1288.183544][T27833] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1288.205438][T27833] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1288.225860][T27833] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1288.245355][T27833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.290796][T19869] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1288.331327][T27833] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1288.731836][T27833] usb 5-1: USB disconnect, device number 75 [ 1289.554504][T19960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14472'. [ 1289.916097][T14782] usb 4-1: USB disconnect, device number 53 [ 1289.986611][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14476'. [ 1290.014673][T19975] netlink: 'syz.7.14476': attribute type 30 has an invalid length. [ 1290.045286][T19975] netlink: 'syz.7.14476': attribute type 29 has an invalid length. [ 1290.097476][T19975] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14476'. [ 1290.111058][T19984] input: syz0 as /devices/virtual/input/input126 [ 1290.367770][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14481'. [ 1290.852177][T14782] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1291.020831][T14782] usb 5-1: Using ep0 maxpacket: 8 [ 1291.035535][T14782] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1291.055660][T14782] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1291.085102][T14782] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1291.108736][T14782] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1291.146242][T14782] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1291.189479][T14782] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1291.227714][T14782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.419451][T20038] loop4: detected capacity change from 0 to 1 [ 1291.557016][T18746] Dev loop4: unable to read RDB block 1 [ 1291.574152][T18746] loop4: unable to read partition table [ 1291.611290][T18746] loop4: partition table beyond EOD, truncated [ 1291.641788][T20038] Dev loop4: unable to read RDB block 1 [ 1291.671538][T20038] loop4: unable to read partition table [ 1291.691090][T20038] loop4: partition table beyond EOD, truncated [ 1291.707978][T20038] loop_reread_partitions: partition scan of loop4 (ݷU@:B${Wɴ) failed (rc=-5) [ 1292.231334][T20058] usbtmc 5-1:16.0: simple control status returned 0 [ 1292.347671][T20059] syzkaller1: entered promiscuous mode [ 1292.370147][T20059] syzkaller1: entered allmulticast mode [ 1292.434994][T14782] usb 5-1: USB disconnect, device number 76 [ 1293.173282][T13057] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 1293.332758][T13057] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1293.355170][T13057] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.377972][T13057] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1293.400686][T13057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.442024][T13057] usb 6-1: config 0 descriptor?? [ 1293.898341][T13057] isku 0003:1E7D:319C.0061: unknown main item tag 0x0 [ 1293.926302][T13057] isku 0003:1E7D:319C.0061: unknown main item tag 0x0 [ 1293.948674][T13057] isku 0003:1E7D:319C.0061: unknown main item tag 0x0 [ 1294.026533][T13057] isku 0003:1E7D:319C.0061: unknown main item tag 0x0 [ 1294.115558][T13057] isku 0003:1E7D:319C.0061: unknown main item tag 0x0 [ 1294.146562][T13057] isku 0003:1E7D:319C.0061: unknown main item tag 0x0 [ 1294.161181][T13057] isku 0003:1E7D:319C.0061: unknown main item tag 0x0 [ 1294.194731][T13057] isku 0003:1E7D:319C.0061: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 1294.507866][T13057] usb 6-1: USB disconnect, device number 100 [ 1295.613600][T18702] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1295.810822][T18702] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.850747][T18702] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 1295.896902][T18702] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1295.958160][T18702] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1296.010712][T18702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.018785][T18702] usb 6-1: Product: syz [ 1296.050974][T13057] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1296.060763][T18702] usb 6-1: Manufacturer: syz [ 1296.065402][T18702] usb 6-1: SerialNumber: syz [ 1296.232740][T13057] usb 5-1: config index 0 descriptor too short (expected 30768, got 18) [ 1296.258244][T13057] usb 5-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 1296.303250][T13057] usb 5-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 1296.351102][T13057] usb 5-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 1296.388712][T13057] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1296.411009][T13057] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.439644][T13057] usb 5-1: Product: syz [ 1296.450508][T13057] usb 5-1: Manufacturer: syz [ 1296.465757][T13057] usb 5-1: SerialNumber: syz [ 1296.930550][T13057] usb 5-1: USB disconnect, device number 77 [ 1297.130855][T18702] cdc_ncm 6-1:1.0: bind() failure [ 1297.160340][T18702] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 1297.201033][T18702] usb 6-1: USB disconnect, device number 101 [ 1297.220968][T27833] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1297.395686][T27833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1297.420886][T27833] usb 4-1: config 1 has no interface number 0 [ 1297.437226][T27833] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.466687][T27833] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1297.514375][T27833] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1297.574735][T27833] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1297.641507][T27833] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1297.675450][T27833] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1297.726967][T27833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.751273][T27833] usb 4-1: Product: syz [ 1297.755789][T27833] usb 4-1: Manufacturer: syz [ 1297.796057][T27833] usb 4-1: SerialNumber: syz [ 1298.048993][T20219] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1298.680571][T20219] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1298.697427][T27833] cdc_ncm 4-1:1.1: bind() failure [ 1298.704203][T14782] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 1298.874238][T14782] usb 5-1: config 0 has no interfaces? [ 1298.887829][T14782] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1298.923632][T14782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1298.963459][T14782] usb 5-1: Product: syz [ 1298.966607][ T5093] usb 4-1: USB disconnect, device number 54 [ 1298.977899][T14782] usb 5-1: Manufacturer: syz [ 1299.005893][T14782] usb 5-1: SerialNumber: syz [ 1299.047991][T14782] usb 5-1: config 0 descriptor?? [ 1299.352961][ T5093] usb 5-1: USB disconnect, device number 78 [ 1300.221889][T20324] netlink: 'syz.3.14545': attribute type 29 has an invalid length. [ 1300.260986][T20324] netlink: 'syz.3.14545': attribute type 29 has an invalid length. [ 1300.288904][T20324] netlink: 500 bytes leftover after parsing attributes in process `syz.3.14545'. [ 1300.401601][T27833] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1300.439935][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.448589][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.603280][T27833] usb 5-1: Using ep0 maxpacket: 32 [ 1300.634143][T27833] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1300.651741][T27833] usb 5-1: config 0 has no interface number 0 [ 1300.688550][T27833] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1300.715327][T27833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.731015][T13057] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1300.767479][T27833] usb 5-1: Product: syz [ 1300.781162][T27833] usb 5-1: Manufacturer: syz [ 1300.791068][T27833] usb 5-1: SerialNumber: syz [ 1300.822089][T27833] usb 5-1: config 0 descriptor?? [ 1300.919568][T13057] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1300.945295][T13057] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.003210][T13057] usb 3-1: config 0 descriptor?? [ 1301.029898][T13057] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1301.443048][T13057] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1301.668695][T27833] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1301.876629][T13057] gspca_cpia1: usb_control_msg 02, error -71 [ 1301.889101][T27833] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1301.923017][T13057] gspca_cpia1: usb_control_msg 05, error -71 [ 1301.929446][T13057] cpia1 3-1:0.0: unexpected systemstate: 00 [ 1301.939074][T27833] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1301.975677][T14782] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1301.995497][T13057] usb 3-1: USB disconnect, device number 77 [ 1302.024254][T27833] usb 5-1: USB disconnect, device number 79 [ 1302.152539][T14782] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.197362][T14782] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.233820][T14782] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1302.263103][T14782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.280839][T14782] usb 4-1: Product: syz [ 1302.291261][T14782] usb 4-1: Manufacturer: syz [ 1302.297270][T14782] usb 4-1: SerialNumber: syz [ 1302.501559][T13057] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1302.675797][T13057] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.701928][T13057] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1302.724136][T13057] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1302.759507][T13057] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1302.811586][T13057] usb 6-1: SerialNumber: syz [ 1303.104181][T13057] usb 6-1: 0:2 : does not exist [ 1303.199154][T20448] netlink: 'syz.2.14563': attribute type 13 has an invalid length. [ 1303.242617][T20448] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1303.272301][T13057] usb 6-1: USB disconnect, device number 102 [ 1303.313281][T20448] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1303.346071][T14782] cdc_ncm 4-1:1.0: bind() failure [ 1303.353002][T20448] gretap1: entered promiscuous mode [ 1303.358258][T20448] gretap1: entered allmulticast mode [ 1303.421010][T14782] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1303.427910][T14782] cdc_ncm 4-1:1.1: bind() failure [ 1303.466978][T14782] usb 4-1: USB disconnect, device number 55 [ 1303.750839][T13057] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1303.912142][T13057] usb 5-1: Using ep0 maxpacket: 8 [ 1303.923518][T13057] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.957555][T13057] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1303.979842][T13057] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1304.027348][T13057] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1304.069161][T13057] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1304.101103][T13057] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.167378][T13057] hub 5-1:1.0: bad descriptor, ignoring hub [ 1304.197333][T13057] hub 5-1:1.0: probe with driver hub failed with error -5 [ 1304.233872][T13057] cdc_wdm 5-1:1.0: skipping garbage [ 1304.263780][T13057] cdc_wdm 5-1:1.0: skipping garbage [ 1304.443339][T13057] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1304.460736][T13057] cdc_wdm 5-1:1.0: Unknown control protocol [ 1304.502947][T13057] usb 5-1: USB disconnect, device number 80 [ 1304.890800][ T5093] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1305.072041][ T5093] usb 4-1: Using ep0 maxpacket: 32 [ 1305.101285][ T5093] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1305.110469][ T5093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.203087][ T5093] usb 4-1: Product: syz [ 1305.207419][ T5093] usb 4-1: Manufacturer: syz [ 1305.251623][ T5093] usb 4-1: SerialNumber: syz [ 1305.292051][ T5093] usb 4-1: config 0 descriptor?? [ 1305.309015][T20534] ksmbd: Unknown IPC event: 4, ignore. [ 1305.336043][ T5093] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1306.180867][ T30] audit: type=1326 audit(1773739434.266:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20549 comm="syz.7.14580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f409299c799 code=0x0 [ 1306.216197][T20536] bridge0: port 3(bond0) entered disabled state [ 1306.223091][T20536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.322749][ T5093] gspca_ov534_9: reg_w failed -71 [ 1306.575099][T20567] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1306.590338][T20567] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1306.599754][T20567] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1306.608899][T20567] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1306.618777][T20567] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1306.638330][ T5093] gspca_ov534_9: Unknown sensor 0000 [ 1306.638434][ T5093] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 1306.701818][ T5093] usb 4-1: USB disconnect, device number 56 [ 1307.483655][T20536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.495588][T20589] netlink: 27 bytes leftover after parsing attributes in process `syz.7.14586'. [ 1307.641631][T20536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1308.586261][T20536] ip6gretap1: left allmulticast mode [ 1308.605799][T20536] ip6gre1: left promiscuous mode [ 1308.615912][T20536] ip6gre1: left allmulticast mode [ 1308.674181][T18910] Bluetooth: hci4: command tx timeout [ 1308.701404][T12649] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1308.710445][T12649] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.824609][T12649] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1308.910893][T12649] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.920388][ T1327] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1308.966212][ T1327] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.222810][T14791] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1309.245532][T12655] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1309.298740][T12655] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.385212][ T1327] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1309.411065][T14791] usb 6-1: Using ep0 maxpacket: 16 [ 1309.420026][ T1327] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.434747][T14791] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1309.467647][T14791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.504481][T14791] usb 6-1: Product: syz [ 1309.544256][T14791] usb 6-1: Manufacturer: syz [ 1309.549315][T14791] usb 6-1: SerialNumber: syz [ 1309.604215][T14791] usb 6-1: config 0 descriptor?? [ 1309.623986][T14791] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1309.687311][T12655] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1309.792643][T12655] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1309.842126][T14791] gspca_spca508: reg_read err -32 [ 1309.879283][T14791] gspca_spca508: reg_read err -32 [ 1309.908029][T14791] gspca_spca508: reg_read err -32 [ 1310.128162][T14791] gspca_spca508: reg_read err -71 [ 1310.138312][T14791] gspca_spca508: reg write: error -71 [ 1310.189134][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14599'. [ 1310.189563][T14791] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 1310.241060][T20644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14599'. [ 1310.285421][T14791] usb 6-1: USB disconnect, device number 103 [ 1310.327184][T12655] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1310.366862][T12655] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.592993][T12655] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1310.641420][T12655] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.751621][T18910] Bluetooth: hci4: command tx timeout [ 1311.341383][T27833] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1311.489089][T12655] bridge_slave_1: left allmulticast mode [ 1311.498442][T12655] bridge_slave_1: left promiscuous mode [ 1311.512499][T12655] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.528478][T12655] bridge_slave_0: left allmulticast mode [ 1311.535678][T27833] usb 4-1: Using ep0 maxpacket: 32 [ 1311.542693][T12655] bridge_slave_0: left promiscuous mode [ 1311.556066][T27833] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1311.566011][T12655] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.576188][T27833] usb 4-1: config 0 has no interface number 0 [ 1311.587443][T27833] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1311.599181][T27833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.615108][T27833] usb 4-1: Product: syz [ 1311.621925][T27833] usb 4-1: Manufacturer: syz [ 1311.627554][T27833] usb 4-1: SerialNumber: syz [ 1311.650207][T27833] usb 4-1: config 0 descriptor?? [ 1311.688354][T27833] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1311.908933][T27833] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1312.000028][T27833] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1312.356373][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1312.356977][T18702] usb 4-1: USB disconnect, device number 57 [ 1312.440494][T18702] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1312.447032][T20754] sctp: [Deprecated]: syz.4.14613 (pid 20754) Use of int in maxseg socket option. [ 1312.447032][T20754] Use struct sctp_assoc_value instead [ 1312.542795][T18702] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1312.558091][T12655] bond0 (unregistering): left promiscuous mode [ 1312.578675][T18702] quatech2 4-1:0.51: device disconnected [ 1312.597245][T12655] bond_slave_0: left promiscuous mode [ 1312.643432][T12655] bond_slave_1: left promiscuous mode [ 1312.676467][T12655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1312.706952][T12655] bond_slave_0: left allmulticast mode [ 1312.725020][T12655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1312.741106][T12655] bond_slave_1: left allmulticast mode [ 1312.757238][T20767] netlink: 'syz.4.14614': attribute type 11 has an invalid length. [ 1312.758285][T12655] bond0 (unregistering): Released all slaves [ 1312.830759][T18910] Bluetooth: hci4: command tx timeout [ 1313.046529][T20572] chnl_net:caif_netlink_parms(): no params data found [ 1314.003222][T27833] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1314.132702][T20572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.163420][T20572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.170786][T27833] usb 6-1: Using ep0 maxpacket: 16 [ 1314.185883][T27833] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1314.206203][T20572] bridge_slave_0: entered allmulticast mode [ 1314.224928][T27833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.242834][T20572] bridge_slave_0: entered promiscuous mode [ 1314.253260][T27833] usb 6-1: Product: syz [ 1314.257569][T27833] usb 6-1: Manufacturer: syz [ 1314.300035][T27833] usb 6-1: SerialNumber: syz [ 1314.331702][T20881] input: syz1 as /devices/virtual/input/input127 [ 1314.362279][T27833] usb 6-1: config 0 descriptor?? [ 1314.395863][T20572] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.423207][T20572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.461874][T20572] bridge_slave_1: entered allmulticast mode [ 1314.497712][T20572] bridge_slave_1: entered promiscuous mode [ 1314.780113][T27833] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1314.817226][T27833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1314.860158][T27833] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1314.882592][T20900] bridge0: port 1(syz_tun) entered blocking state [ 1314.908210][T27833] usb 6-1: media controller created [ 1314.914942][T20900] bridge0: port 1(syz_tun) entered disabled state [ 1314.921551][T18910] Bluetooth: hci4: command tx timeout [ 1314.957727][T20900] syz_tun: entered allmulticast mode [ 1315.008644][T27833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1315.035931][T20900] syz_tun: entered promiscuous mode [ 1315.101486][T20572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1315.116443][T27833] zl10353_read_register: readreg error (reg=127, ret==0) [ 1315.159060][T27833] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1315.177499][T27833] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1315.205155][T27833] usb 6-1: USB disconnect, device number 104 [ 1315.237776][T12655] batadv0: left promiscuous mode [ 1315.331764][T12655] hsr_slave_0: left promiscuous mode [ 1315.338909][T27833] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1315.364680][T12655] hsr_slave_1: left promiscuous mode [ 1315.399114][T12655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1315.446716][T12655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1315.483695][T12655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1315.506998][T12655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1315.576109][T12655] team_slave_0: left promiscuous mode [ 1315.582111][T12655] team_slave_1: left promiscuous mode [ 1315.612181][T12655] veth1_vlan: left promiscuous mode [ 1315.630451][T12655] veth0_vlan: left promiscuous mode [ 1316.638640][T27833] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1316.829064][T27833] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1316.859687][T27833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.926706][T27833] usb 4-1: config 0 descriptor?? [ 1316.948206][T27833] cp210x 4-1:0.0: cp210x converter detected [ 1317.060458][T12655] team0 (unregistering): Port device team_slave_1 removed [ 1317.097660][T12655] team0 (unregistering): Port device team_slave_0 removed [ 1317.355760][T27833] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1317.384599][T27833] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1317.454944][T20572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.609297][T27833] usb 4-1: USB disconnect, device number 58 [ 1317.646349][T27833] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1317.675550][T27833] cp210x 4-1:0.0: device disconnected [ 1317.723573][T21025] batadv_slave_0: left promiscuous mode [ 1317.731255][T21025] batadv_slave_0: left allmulticast mode [ 1317.755600][T21025] ip6tnl1: left promiscuous mode [ 1317.772485][T21025] bond1: left allmulticast mode [ 1317.778102][T21025] vti0: left promiscuous mode [ 1317.791439][T21025] vti0: left allmulticast mode [ 1317.801238][T21025] ip6erspan0: left promiscuous mode [ 1317.814746][T21025] bond3: left promiscuous mode [ 1317.825888][T21025] bond3: left allmulticast mode [ 1317.884772][T20572] team0: Port device team_slave_0 added [ 1317.963142][T20572] team0: Port device team_slave_1 added [ 1318.185181][T20572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1318.210899][T20572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.336018][T20572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1318.489185][T20572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1318.537350][T20572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1318.663835][T20572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1319.093560][T12655] IPVS: stop unused estimator thread 0... [ 1319.134056][T20572] hsr_slave_0: entered promiscuous mode [ 1319.175895][T20572] hsr_slave_1: entered promiscuous mode [ 1319.214805][T20572] debugfs: 'hsr0' already exists in 'hsr' [ 1319.242417][T20572] Cannot create hsr debugfs directory [ 1319.406447][T21125] bridge0: port 3(netdevsim0) entered blocking state [ 1319.421913][T21125] bridge0: port 3(netdevsim0) entered disabled state [ 1319.491540][T21125] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1320.490950][T20556] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1320.545036][T20572] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1320.585818][T20572] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1320.647251][T20572] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1320.693581][T20572] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1320.721189][T20556] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1320.740044][T20556] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1320.769528][T21230] netlink: 67 bytes leftover after parsing attributes in process `syz.3.14656'. [ 1320.779076][T20556] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1320.811978][T20556] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1320.823388][T20556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.866837][T20556] usb 5-1: config 0 descriptor?? [ 1320.905926][T21232] syzkaller1: entered promiscuous mode [ 1320.945101][T21232] syzkaller1: entered allmulticast mode [ 1321.372084][T20556] plantronics 0003:047F:FFFF.0062: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1321.728940][T20572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.877858][T20572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.937072][T12655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.944545][T12655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1322.077778][T12645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.085196][T12645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.514193][T20572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.706688][ C0] plantronics 0003:047F:FFFF.0062: usb_submit_urb(ctrl) failed: -1 [ 1322.752036][T20572] veth0_vlan: entered promiscuous mode [ 1322.814622][T20572] veth1_vlan: entered promiscuous mode [ 1323.389180][T20572] veth0_macvtap: entered promiscuous mode [ 1323.455928][T20572] veth1_macvtap: entered promiscuous mode [ 1323.608624][T20572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.666048][T20572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.746023][ T9159] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.797845][T18706] usb 5-1: USB disconnect, device number 81 [ 1323.810505][T12649] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.893787][T12649] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.940143][T12649] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.453865][ T9159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.480688][ T9159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.676021][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.713043][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.151741][T21339] netlink: 80 bytes leftover after parsing attributes in process `syz.4.14671'. [ 1325.209464][T21339] netlink: 80 bytes leftover after parsing attributes in process `syz.4.14671'. [ 1326.643618][T21388] netlink: 'syz.4.14680': attribute type 3 has an invalid length. [ 1326.680175][T21388] netlink: 'syz.4.14680': attribute type 3 has an invalid length. [ 1326.721675][T21388] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14680'. [ 1326.732479][T21392] batadv_slave_1: entered promiscuous mode [ 1326.760143][T21389] batadv_slave_1: left promiscuous mode [ 1327.290757][T27833] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1327.561327][T27833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1327.580907][T27833] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 1327.599529][T27833] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.691533][T27833] usb 5-1: config 63 has no interface number 0 [ 1327.743601][T27833] usb 5-1: config 63 interface 66 has no altsetting 0 [ 1327.795409][T27833] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1327.833409][T27833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.898818][T27833] usb 5-1: Product: syz [ 1327.910768][T27833] usb 5-1: Manufacturer: syz [ 1327.925796][T27833] usb 5-1: SerialNumber: syz [ 1328.204937][T27833] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1328.244793][T27833] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1328.276655][T27833] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1328.352856][T27833] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1328.371215][T27833] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1328.429899][T27833] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1328.471108][T27833] uvcvideo 5-1:63.66: No streaming interface found for terminal 29. [ 1328.479250][T27833] uvcvideo 5-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1328.569322][T27833] usb 5-1: USB disconnect, device number 82 [ 1328.754195][T21470] Invalid argument reading file caps for ./file0 [ 1328.922111][T27833] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 1329.037919][T21478] netlink: set zone limit has 4 unknown bytes [ 1329.122281][T17671] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1329.139245][T27833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1329.164631][T27833] usb 5-1: not running at top speed; connect to a high speed hub [ 1329.202692][T27833] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 1329.218885][T27833] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.263406][T27833] usb 5-1: config 63 has no interface number 0 [ 1329.289598][T27833] usb 5-1: config 63 interface 66 has no altsetting 0 [ 1329.296639][T17671] usb 4-1: Using ep0 maxpacket: 8 [ 1329.316507][T17671] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1329.336515][T27833] usb 5-1: string descriptor 0 read error: -22 [ 1329.343685][T27833] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1329.355449][T17671] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1329.381007][T27833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.392117][T17671] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1329.425123][T27833] uvcvideo 5-1:63.66: Found UVC 0.07 device (174f:8acf) [ 1329.433672][T17671] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1329.486991][T17671] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1329.522114][T17671] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1329.558109][T17671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.688952][T27833] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC error code control 6 on unit 1: -71 (exp. 1). [ 1329.723358][T27833] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1329.748427][T27833] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1329.775030][T27833] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1329.797203][T27833] uvcvideo 5-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1329.808964][T17671] usb 4-1: GET_CAPABILITIES returned 0 [ 1329.820155][T17671] usbtmc 4-1:16.0: can't read capabilities [ 1329.834317][T27833] uvcvideo 5-1:63.66: No streaming interface found for terminal 29. [ 1329.868020][T27833] uvcvideo 5-1:63.66: Entity type for entity Output 32773 was not initialized! [ 1329.920486][T27833] usb 5-1: USB disconnect, device number 83 [ 1330.036229][T17671] usb 4-1: USB disconnect, device number 59 [ 1331.320999][T17671] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 1331.431078][T27833] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1331.535396][T17671] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1331.572309][T17671] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1331.615375][T17671] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1331.625507][T27833] usb 4-1: Using ep0 maxpacket: 32 [ 1331.649221][T27833] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1331.661880][T17671] usb 5-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 1331.688034][T27833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.701381][T17671] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.723554][T27833] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1331.738908][T17671] usb 5-1: config 0 descriptor?? [ 1332.209581][T17671] hid (null): bogus close delimiter [ 1332.290320][T17671] uclogic 0003:28BD:0078.0063: interface is invalid, ignoring [ 1332.421755][T17671] usb 5-1: USB disconnect, device number 84 [ 1332.534252][T21619] batadv_slave_0: entered promiscuous mode [ 1332.560020][T21617] batadv_slave_0: left promiscuous mode [ 1332.780527][T27833] gspca_nw80x: reg_w err -71 [ 1332.805680][T27833] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 1332.851327][T27833] usb 4-1: USB disconnect, device number 60 [ 1333.016317][T21650] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1333.066848][T21650] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1333.352435][T21669] Invalid argument reading file caps for ./file0 [ 1333.579969][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14731'. [ 1333.633129][T21677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1333.730013][T21677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.655337][T21734] input: syz1 as /devices/virtual/input/input128 [ 1337.534877][T21839] input: syz1 as /devices/virtual/input/input129 [ 1337.903239][T21859] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14763'. [ 1337.940325][T21859] bond0: ARP target 128.0.0.0 is already present [ 1337.955170][T21859] bond0: option arp_ip_target: invalid value (128) [ 1337.964933][T21860] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1338.202156][T21867] bond0: entered promiscuous mode [ 1338.245462][T21867] bond_slave_0: entered promiscuous mode [ 1338.276572][T21867] bond_slave_1: entered promiscuous mode [ 1338.310450][T21867] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1338.341098][T21867] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1338.391750][T21867] batadv0: entered promiscuous mode [ 1338.630729][T18706] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1338.825618][T18706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.860255][T18706] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.911080][T18706] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1338.957500][T18706] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1338.998435][T18706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.064456][T18706] usb 6-1: config 0 descriptor?? [ 1339.527634][T18706] plantronics 0003:047F:FFFF.0064: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1339.561818][T21939] loop4: detected capacity change from 0 to 7 [ 1339.568877][T21939] buffer_io_error: 11 callbacks suppressed [ 1339.568894][T21939] Buffer I/O error on dev loop4, logical block 0, async page read [ 1339.642726][T21939] Buffer I/O error on dev loop4, logical block 0, async page read [ 1339.698915][T21939] Buffer I/O error on dev loop4, logical block 0, async page read [ 1339.781242][T21955] Invalid logical block size (4) [ 1339.789516][T21939] Buffer I/O error on dev loop4, logical block 0, async page read [ 1339.814462][T18706] usb 6-1: USB disconnect, device number 105 [ 1339.851244][T21939] Buffer I/O error on dev loop4, logical block 0, async page read [ 1339.859191][T21939] Buffer I/O error on dev loop4, logical block 0, async page read [ 1339.865056][T21953] fido_id[21953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 1339.920950][T20556] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1339.929270][T21939] Buffer I/O error on dev loop4, logical block 0, async page read [ 1339.955845][T21939] ldm_validate_partition_table(): Disk read failed. [ 1339.982915][T21939] Buffer I/O error on dev loop4, logical block 0, async page read [ 1340.014624][T21939] Buffer I/O error on dev loop4, logical block 0, async page read [ 1340.070938][T21939] Buffer I/O error on dev loop4, logical block 0, async page read [ 1340.089279][T21939] Dev loop4: unable to read RDB block 0 [ 1340.123068][T21939] loop4: unable to read partition table [ 1340.128949][T20556] usb 9-1: Using ep0 maxpacket: 32 [ 1340.142876][T21939] loop4: partition table beyond EOD, truncated [ 1340.165044][T21939] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 1340.184438][T20556] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1340.218016][T20556] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.245905][T20556] usb 9-1: config 0 descriptor?? [ 1340.501274][T20556] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1340.570568][T20556] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1340.652948][T20556] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1340.660306][T20556] usb 9-1: media controller created [ 1340.802408][T20556] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1341.461156][T20556] az6027: usb out operation failed. (-71) [ 1341.468112][T20556] stb0899_attach: Driver disabled by Kconfig [ 1341.485533][T20556] az6027: no front-end attached [ 1341.485533][T20556] [ 1341.514670][T20556] az6027: usb out operation failed. (-71) [ 1341.537731][T20556] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1341.560827][T18702] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1341.569977][T20556] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input130 [ 1341.633919][T20556] dvb-usb: schedule remote query interval to 400 msecs. [ 1341.663244][T20556] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1341.717459][T20556] usb 9-1: USB disconnect, device number 2 [ 1341.765587][T18702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.801525][T18702] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1341.862474][T18702] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1341.904602][T18702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1341.940944][T18702] usb 5-1: SerialNumber: syz [ 1342.027989][T20556] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1342.196270][T18702] usb 5-1: 0:2 : does not exist [ 1342.431507][T18702] usb 5-1: USB disconnect, device number 85 [ 1342.571966][T18746] udevd[18746]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1342.902211][T22098] loop7: detected capacity change from 0 to 5 [ 1344.781448][T22148] [ 1344.783933][T22148] ===================================================== [ 1344.791257][T22148] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1344.798850][T22148] syzkaller #0 Tainted: G L [ 1344.804929][T22148] ----------------------------------------------------- [ 1344.812128][T22148] syz.4.14815/22148 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1344.819946][T22148] ffffffff8e40c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420 [ 1344.828943][T22148] [ 1344.828943][T22148] and this task is already holding: [ 1344.836692][T22148] ffff88802900f420 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1344.845500][T22148] which would create a new lock dependency: [ 1344.851490][T22148] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1344.859076][T22148] [ 1344.859076][T22148] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1344.868573][T22148] (&dev->event_lock#2){..-.}-{3:3} [ 1344.868603][T22148] [ 1344.868603][T22148] ... which became SOFTIRQ-irq-safe at: [ 1344.881813][T22148] lock_acquire+0xf0/0x2e0 [ 1344.886420][T22148] _raw_spin_lock_irqsave+0x40/0x60 [ 1344.891714][T22148] input_inject_event+0xa5/0x340 [ 1344.896744][T22148] led_trigger_event+0x138/0x210 [ 1344.901946][T22148] kbd_bh+0x1f3/0x300 [ 1344.906457][T22148] tasklet_action_common+0x2da/0x4b0 [ 1344.911852][T22148] handle_softirqs+0x22a/0x870 [ 1344.916737][T22148] __irq_exit_rcu+0x5f/0x150 [ 1344.921496][T22148] irq_exit_rcu+0x9/0x30 [ 1344.925927][T22148] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1344.931772][T22148] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1344.938289][T22148] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1344.944308][T22148] do_con_write+0x4243/0x5300 [ 1344.949275][T22148] con_write+0x27/0x290 [ 1344.953541][T22148] n_tty_write+0xd84/0x12a0 [ 1344.958489][T22148] file_tty_write+0x559/0xa20 [ 1344.963367][T22148] vfs_write+0x61d/0xb90 [ 1344.967893][T22148] ksys_write+0x150/0x270 [ 1344.972406][T22148] do_syscall_64+0x14d/0xf80 [ 1344.977366][T22148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.983457][T22148] [ 1344.983457][T22148] to a SOFTIRQ-irq-unsafe lock: [ 1344.990851][T22148] (tasklist_lock){.+.+}-{3:3} [ 1344.990885][T22148] [ 1344.990885][T22148] ... which became SOFTIRQ-irq-unsafe at: [ 1345.003777][T22148] ... [ 1345.003786][T22148] lock_acquire+0xf0/0x2e0 [ 1345.011106][T22148] _raw_read_lock+0x36/0x50 [ 1345.015887][T22148] __do_wait+0xde/0x740 [ 1345.020328][T22148] do_wait+0x1e7/0x540 [ 1345.024486][T22148] kernel_wait+0xd6/0x1c0 [ 1345.028988][T22148] call_usermodehelper_exec_work+0xbe/0x230 [ 1345.035056][T22148] process_scheduled_works+0xb6e/0x18c0 [ 1345.040954][T22148] worker_thread+0xa53/0xfc0 [ 1345.045825][T22148] kthread+0x388/0x470 [ 1345.049995][T22148] ret_from_fork+0x51e/0xb90 [ 1345.055044][T22148] ret_from_fork_asm+0x1a/0x30 [ 1345.060117][T22148] [ 1345.060117][T22148] other info that might help us debug this: [ 1345.060117][T22148] [ 1345.070820][T22148] Chain exists of: [ 1345.070820][T22148] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1345.070820][T22148] [ 1345.083916][T22148] Possible interrupt unsafe locking scenario: [ 1345.083916][T22148] [ 1345.092465][T22148] CPU0 CPU1 [ 1345.097933][T22148] ---- ---- [ 1345.103477][T22148] lock(tasklist_lock); [ 1345.107727][T22148] local_irq_disable(); [ 1345.114760][T22148] lock(&dev->event_lock#2); [ 1345.122082][T22148] lock(&f_owner->lock); [ 1345.129325][T22148] [ 1345.132956][T22148] lock(&dev->event_lock#2); [ 1345.137908][T22148] [ 1345.137908][T22148] *** DEADLOCK *** [ 1345.137908][T22148] [ 1345.146052][T22148] 2 locks held by syz.4.14815/22148: [ 1345.151552][T22148] #0: ffff8880786fa9e0 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0 [ 1345.160484][T22148] #1: ffff88802900f420 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420 [ 1345.169717][T22148] [ 1345.169717][T22148] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1345.180238][T22148] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1345.186070][T22148] IN-SOFTIRQ-W at: [ 1345.190404][T22148] lock_acquire+0xf0/0x2e0 [ 1345.197081][T22148] _raw_spin_lock_irqsave+0x40/0x60 [ 1345.205157][T22148] input_inject_event+0xa5/0x340 [ 1345.212620][T22148] led_trigger_event+0x138/0x210 [ 1345.219908][T22148] kbd_bh+0x1f3/0x300 [ 1345.226063][T22148] tasklet_action_common+0x2da/0x4b0 [ 1345.233626][T22148] handle_softirqs+0x22a/0x870 [ 1345.240743][T22148] __irq_exit_rcu+0x5f/0x150 [ 1345.247690][T22148] irq_exit_rcu+0x9/0x30 [ 1345.254110][T22148] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1345.262196][T22148] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1345.270537][T22148] _raw_spin_unlock_irqrestore+0x47/0x80 [ 1345.278376][T22148] do_con_write+0x4243/0x5300 [ 1345.285243][T22148] con_write+0x27/0x290 [ 1345.291572][T22148] n_tty_write+0xd84/0x12a0 [ 1345.298340][T22148] file_tty_write+0x559/0xa20 [ 1345.305281][T22148] vfs_write+0x61d/0xb90 [ 1345.311739][T22148] ksys_write+0x150/0x270 [ 1345.318334][T22148] do_syscall_64+0x14d/0xf80 [ 1345.325355][T22148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.333421][T22148] INITIAL USE at: [ 1345.337666][T22148] lock_acquire+0xf0/0x2e0 [ 1345.344173][T22148] _raw_spin_lock_irqsave+0x40/0x60 [ 1345.351812][T22148] input_inject_event+0xa5/0x340 [ 1345.358897][T22148] kbd_led_trigger_activate+0xbc/0x100 [ 1345.366712][T22148] led_trigger_set+0x535/0x960 [ 1345.373567][T22148] led_trigger_set_default+0x260/0x2a0 [ 1345.381731][T22148] led_classdev_register_ext+0x787/0x9c0 [ 1345.389631][T22148] input_leds_connect+0x517/0x790 [ 1345.396841][T22148] input_register_device+0xd00/0x1160 [ 1345.404393][T22148] atkbd_connect+0x731/0xa50 [ 1345.411417][T22148] serio_driver_probe+0x82/0xd0 [ 1345.418359][T22148] really_probe+0x267/0xaf0 [ 1345.425303][T22148] __driver_probe_device+0x18c/0x320 [ 1345.432693][T22148] driver_probe_device+0x4f/0x240 [ 1345.439809][T22148] __driver_attach+0x349/0x640 [ 1345.446668][T22148] bus_for_each_dev+0x23b/0x2c0 [ 1345.453785][T22148] serio_handle_event+0x20a/0xdd0 [ 1345.461079][T22148] process_scheduled_works+0xb6e/0x18c0 [ 1345.468719][T22148] worker_thread+0xa53/0xfc0 [ 1345.475745][T22148] kthread+0x388/0x470 [ 1345.481898][T22148] ret_from_fork+0x51e/0xb90 [ 1345.488756][T22148] ret_from_fork_asm+0x1a/0x30 [ 1345.495611][T22148] } [ 1345.498370][T22148] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 1345.507800][T22148] -> (&client->buffer_lock){....}-{3:3} { [ 1345.513891][T22148] INITIAL USE at: [ 1345.517969][T22148] lock_acquire+0xf0/0x2e0 [ 1345.524428][T22148] _raw_spin_lock_irqsave+0x40/0x60 [ 1345.532341][T22148] evdev_ioctl_handler+0x10fb/0x1fe0 [ 1345.539887][T22148] __se_sys_ioctl+0xfc/0x170 [ 1345.546405][T22148] do_syscall_64+0x14d/0xf80 [ 1345.552919][T22148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.560725][T22148] } [ 1345.563420][T22148] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 1345.571841][T22148] ... acquired at: [ 1345.575814][T22148] _raw_spin_lock+0x2e/0x40 [ 1345.580520][T22148] evdev_handle_get_val+0x70/0x9f0 [ 1345.585805][T22148] evdev_ioctl_handler+0x127b/0x1fe0 [ 1345.591445][T22148] __se_sys_ioctl+0xfc/0x170 [ 1345.596212][T22148] do_syscall_64+0x14d/0xf80 [ 1345.601152][T22148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.607397][T22148] [ 1345.609810][T22148] -> (&new->fa_lock){....}-{3:3} { [ 1345.615036][T22148] INITIAL USE at: [ 1345.619017][T22148] lock_acquire+0xf0/0x2e0 [ 1345.625350][T22148] _raw_write_lock_irq+0x3d/0x50 [ 1345.632122][T22148] fasync_remove_entry+0xf1/0x1c0 [ 1345.639065][T22148] __fput+0x8a5/0xa70 [ 1345.644976][T22148] task_work_run+0x1d9/0x270 [ 1345.651310][T22148] exit_to_user_mode_loop+0xed/0x480 [ 1345.658539][T22148] do_syscall_64+0x32d/0xf80 [ 1345.664955][T22148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.672847][T22148] INITIAL READ USE at: [ 1345.677440][T22148] lock_acquire+0xf0/0x2e0 [ 1345.684033][T22148] _raw_read_lock_irqsave+0x48/0x60 [ 1345.691490][T22148] kill_fasync+0x199/0x4d0 [ 1345.698455][T22148] evdev_pass_values+0x627/0xbd0 [ 1345.705593][T22148] evdev_events+0x1e6/0x340 [ 1345.712277][T22148] input_pass_values+0x288/0x890 [ 1345.719391][T22148] input_event_dispose+0x330/0x6b0 [ 1345.726678][T22148] input_inject_event+0x1dd/0x340 [ 1345.733883][T22148] evdev_write+0x325/0x4c0 [ 1345.740679][T22148] vfs_write+0x29a/0xb90 [ 1345.747120][T22148] ksys_write+0x150/0x270 [ 1345.753768][T22148] do_syscall_64+0x14d/0xf80 [ 1345.760552][T22148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.768706][T22148] } [ 1345.771297][T22148] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1345.780078][T22148] ... acquired at: [ 1345.783970][T22148] _raw_read_lock_irqsave+0x48/0x60 [ 1345.789351][T22148] kill_fasync+0x199/0x4d0 [ 1345.794120][T22148] evdev_pass_values+0x627/0xbd0 [ 1345.799242][T22148] evdev_events+0x1e6/0x340 [ 1345.803953][T22148] input_pass_values+0x288/0x890 [ 1345.809083][T22148] input_event_dispose+0x330/0x6b0 [ 1345.814504][T22148] input_inject_event+0x1dd/0x340 [ 1345.819722][T22148] evdev_write+0x325/0x4c0 [ 1345.824410][T22148] vfs_write+0x29a/0xb90 [ 1345.828921][T22148] ksys_write+0x150/0x270 [ 1345.833431][T22148] do_syscall_64+0x14d/0xf80 [ 1345.838392][T22148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.844655][T22148] [ 1345.847015][T22148] -> (&f_owner->lock){....}-{3:3} { [ 1345.852338][T22148] INITIAL USE at: [ 1345.856250][T22148] lock_acquire+0xf0/0x2e0 [ 1345.862250][T22148] _raw_write_lock_irq+0x3d/0x50 [ 1345.868842][T22148] __f_setown+0x67/0x370 [ 1345.874653][T22148] f_setown+0x23a/0x300 [ 1345.880373][T22148] sock_ioctl+0x615/0x7f0 [ 1345.886276][T22148] __se_sys_ioctl+0xfc/0x170 [ 1345.892432][T22148] do_syscall_64+0x14d/0xf80 [ 1345.898624][T22148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.906093][T22148] INITIAL READ USE at: [ 1345.910481][T22148] lock_acquire+0xf0/0x2e0 [ 1345.917246][T22148] _raw_read_lock_irq+0x45/0x60 [ 1345.924268][T22148] do_fcntl+0x30f/0x1a20 [ 1345.930507][T22148] __se_sys_fcntl+0xc8/0x150 [ 1345.937108][T22148] do_syscall_64+0x14d/0xf80 [ 1345.943791][T22148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1345.951684][T22148] } [ 1345.954186][T22148] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1345.963060][T22148] ... acquired at: [ 1345.966993][T22148] _raw_read_lock_irqsave+0x48/0x60 [ 1345.972375][T22148] send_sigio+0x38/0x370 [ 1345.976963][T22148] kill_fasync+0x24d/0x4d0 [ 1345.981557][T22148] lease_break_callback+0x26/0x30 [ 1345.986765][T22148] __break_lease+0x81c/0x1e80 [ 1345.991637][T22148] vfs_truncate+0x449/0x540 [ 1345.996405][T22148] do_sys_truncate+0xf3/0x1c0 [ 1346.001371][T22148] __x64_sys_truncate+0x5b/0x70 [ 1346.006423][T22148] do_syscall_64+0x14d/0xf80 [ 1346.011289][T22148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.017752][T22148] [ 1346.020081][T22148] [ 1346.020081][T22148] the dependencies between the lock to be acquired [ 1346.020089][T22148] and SOFTIRQ-irq-unsafe lock: [ 1346.033789][T22148] -> (tasklist_lock){.+.+}-{3:3} { [ 1346.039111][T22148] HARDIRQ-ON-R at: [ 1346.043187][T22148] lock_acquire+0xf0/0x2e0 [ 1346.049349][T22148] _raw_read_lock+0x36/0x50 [ 1346.055623][T22148] __do_wait+0xde/0x740 [ 1346.061617][T22148] do_wait+0x1e7/0x540 [ 1346.067430][T22148] kernel_wait+0xd6/0x1c0 [ 1346.073415][T22148] call_usermodehelper_exec_work+0xbe/0x230 [ 1346.081056][T22148] process_scheduled_works+0xb6e/0x18c0 [ 1346.088259][T22148] worker_thread+0xa53/0xfc0 [ 1346.094680][T22148] kthread+0x388/0x470 [ 1346.100400][T22148] ret_from_fork+0x51e/0xb90 [ 1346.106796][T22148] ret_from_fork_asm+0x1a/0x30 [ 1346.113306][T22148] SOFTIRQ-ON-R at: [ 1346.117292][T22148] lock_acquire+0xf0/0x2e0 [ 1346.123365][T22148] _raw_read_lock+0x36/0x50 [ 1346.129522][T22148] __do_wait+0xde/0x740 [ 1346.135444][T22148] do_wait+0x1e7/0x540 [ 1346.141190][T22148] kernel_wait+0xd6/0x1c0 [ 1346.147307][T22148] call_usermodehelper_exec_work+0xbe/0x230 [ 1346.155236][T22148] process_scheduled_works+0xb6e/0x18c0 [ 1346.162802][T22148] worker_thread+0xa53/0xfc0 [ 1346.169156][T22148] kthread+0x388/0x470 [ 1346.174873][T22148] ret_from_fork+0x51e/0xb90 [ 1346.181127][T22148] ret_from_fork_asm+0x1a/0x30 [ 1346.187556][T22148] INITIAL USE at: [ 1346.191490][T22148] lock_acquire+0xf0/0x2e0 [ 1346.197499][T22148] _raw_write_lock_irq+0x3d/0x50 [ 1346.204024][T22148] copy_process+0x247a/0x3cd0 [ 1346.210274][T22148] kernel_clone+0x248/0x8e0 [ 1346.216355][T22148] user_mode_thread+0x110/0x180 [ 1346.222778][T22148] rest_init+0x23/0x300 [ 1346.228846][T22148] start_kernel+0x385/0x3d0 [ 1346.235144][T22148] x86_64_start_reservations+0x24/0x30 [ 1346.242348][T22148] x86_64_start_kernel+0x143/0x1c0 [ 1346.249030][T22148] common_startup_64+0x13e/0x147 [ 1346.255542][T22148] INITIAL READ USE at: [ 1346.259870][T22148] lock_acquire+0xf0/0x2e0 [ 1346.266377][T22148] _raw_read_lock+0x36/0x50 [ 1346.272909][T22148] __do_wait+0xde/0x740 [ 1346.279066][T22148] do_wait+0x1e7/0x540 [ 1346.285132][T22148] kernel_wait+0xd6/0x1c0 [ 1346.291458][T22148] call_usermodehelper_exec_work+0xbe/0x230 [ 1346.299439][T22148] process_scheduled_works+0xb6e/0x18c0 [ 1346.307161][T22148] worker_thread+0xa53/0xfc0 [ 1346.313756][T22148] kthread+0x388/0x470 [ 1346.319912][T22148] ret_from_fork+0x51e/0xb90 [ 1346.326732][T22148] ret_from_fork_asm+0x1a/0x30 [ 1346.337515][T22148] } [ 1346.342648][T22148] ... key at: [] tasklist_lock+0x18/0x40 [ 1346.351314][T22148] ... acquired at: [ 1346.355208][T22148] _raw_read_lock+0x36/0x50 [ 1346.359973][T22148] send_sigurg+0x12b/0x420 [ 1346.365436][T22148] sk_send_sigurg+0x6c/0x2e0 [ 1346.370207][T22148] queue_oob+0x42c/0x4f0 [ 1346.374638][T22148] unix_stream_sendmsg+0xcb1/0xe80 [ 1346.380014][T22148] ____sys_sendmsg+0x972/0x9f0 [ 1346.385050][T22148] ___sys_sendmsg+0x2a5/0x360 [ 1346.389989][T22148] __sys_sendmmsg+0x27c/0x4e0 [ 1346.394932][T22148] __x64_sys_sendmmsg+0xa0/0xc0 [ 1346.400347][T22148] do_syscall_64+0x14d/0xf80 [ 1346.405200][T22148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.411270][T22148] [ 1346.413608][T22148] [ 1346.413608][T22148] stack backtrace: [ 1346.419590][T22148] CPU: 1 UID: 0 PID: 22148 Comm: syz.4.14815 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.419613][T22148] Tainted: [L]=SOFTLOCKUP [ 1346.419618][T22148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1346.419628][T22148] Call Trace: [ 1346.419636][T22148] [ 1346.419643][T22148] dump_stack_lvl+0xe8/0x150 [ 1346.419664][T22148] __lock_acquire+0x2a94/0x2cf0 [ 1346.419690][T22148] lock_acquire+0xf0/0x2e0 [ 1346.419707][T22148] ? send_sigurg+0x12b/0x420 [ 1346.419725][T22148] _raw_read_lock+0x36/0x50 [ 1346.419738][T22148] ? send_sigurg+0x12b/0x420 [ 1346.419751][T22148] send_sigurg+0x12b/0x420 [ 1346.419767][T22148] sk_send_sigurg+0x6c/0x2e0 [ 1346.419786][T22148] queue_oob+0x42c/0x4f0 [ 1346.419807][T22148] ? __pfx_queue_oob+0x10/0x10 [ 1346.419827][T22148] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1346.419845][T22148] unix_stream_sendmsg+0xcb1/0xe80 [ 1346.419863][T22148] ? finish_task_switch+0x240/0x920 [ 1346.419881][T22148] ? rcu_is_watching+0x15/0xb0 [ 1346.419900][T22148] ? trace_sched_exit_tp+0x3a/0x150 [ 1346.419917][T22148] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1346.419937][T22148] ? aa_sock_msg_perm+0xda/0x1b0 [ 1346.419958][T22148] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1346.419974][T22148] ____sys_sendmsg+0x972/0x9f0 [ 1346.419992][T22148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1346.420010][T22148] ? import_iovec+0x73/0xa0 [ 1346.420032][T22148] ___sys_sendmsg+0x2a5/0x360 [ 1346.420049][T22148] ? __pfx____sys_sendmsg+0x10/0x10 [ 1346.420066][T22148] ? __pfx_futex_wake_mark+0x10/0x10 [ 1346.420094][T22148] ? __fget_files+0x2a/0x420 [ 1346.420114][T22148] ? __fget_files+0x3a0/0x420 [ 1346.420137][T22148] __sys_sendmmsg+0x27c/0x4e0 [ 1346.420154][T22148] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1346.420168][T22148] ? do_futex+0x333/0x420 [ 1346.420187][T22148] ? __pfx_do_fcntl+0x10/0x10 [ 1346.420207][T22148] ? rcu_is_watching+0x15/0xb0 [ 1346.420227][T22148] __x64_sys_sendmmsg+0xa0/0xc0 [ 1346.420243][T22148] do_syscall_64+0x14d/0xf80 [ 1346.420258][T22148] ? trace_irq_disable+0x3b/0x150 [ 1346.420278][T22148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.420292][T22148] ? clear_bhb_loop+0x40/0x90 [ 1346.420307][T22148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.420335][T22148] RIP: 0033:0x7f6a2d19c799 [ 1346.420350][T22148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.420363][T22148] RSP: 002b:00007f6a2df92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1346.420380][T22148] RAX: ffffffffffffffda RBX: 00007f6a2d415fa0 RCX: 00007f6a2d19c799 [ 1346.420391][T22148] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000003 [ 1346.420401][T22148] RBP: 00007f6a2d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1346.420410][T22148] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000 [ 1346.420420][T22148] R13: 00007f6a2d416038 R14: 00007f6a2d415fa0 R15: 00007f6a2d53fa48 [ 1346.420435][T22148] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1348.357526][ T3617] syz_tun (unregistering): left allmulticast mode [ 1348.380874][ T3617] syz_tun (unregistering): left promiscuous mode [ 1348.401728][ T3617] bridge0: port 1(syz_tun) entered disabled state [ 1348.531607][T14311] syz_tun (unregistering): left allmulticast mode [ 1348.828337][T12645] bond0: (slave netdevsim0): Releasing backup interface [ 1348.845342][T12645] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 1348.994272][T12645] bridge_slave_1: left allmulticast mode [ 1349.003998][T12645] bridge_slave_1: left promiscuous mode [ 1349.009773][T12645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.042653][T12645] bridge_slave_0: left promiscuous mode [ 1349.048538][T12645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.545279][T12645] bond0 (unregistering): left promiscuous mode [ 1349.557379][T12645] bond_slave_0: left promiscuous mode [ 1349.566210][T12645] bond_slave_1: left promiscuous mode [ 1349.573325][T12645] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 1349.586222][T12645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.596869][T12645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.614066][T12645] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1349.632739][T12645] bond0 (unregistering): Released all slaves [ 1349.647239][T12645] bond1 (unregistering): Released all slaves [ 1349.664957][T12645] bond2 (unregistering): Released all slaves [ 1349.676449][T12645] bond3 (unregistering): Released all slaves [ 1349.690054][T12645] bond4 (unregistering): Released all slaves [ 1349.794529][T12645] : left promiscuous mode [ 1349.837789][T12645] tipc: Disabling bearer [ 1349.843691][T12645] tipc: Left network mode [ 1350.160105][T12645] batadv0: left promiscuous mode [ 1350.170252][T12645] hsr_slave_0: left promiscuous mode [ 1350.184132][T12645] hsr_slave_1: left promiscuous mode [ 1350.193783][T12645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1350.205182][T12645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.436521][T12645] team0 (unregistering): Port device team_slave_1 removed [ 1350.461266][T12645] team0 (unregistering): Port device team_slave_0 removed [ 1350.846214][T12645] IPVS: stop unused estimator thread 0... [ 1351.189449][T12645] netdevsim netdevsim7 netdevsim0 (unregistering): left allmulticast mode [ 1351.202212][T12645] netdevsim netdevsim7 netdevsim0 (unregistering): left promiscuous mode [ 1351.212720][T12645] bridge0: port 3(netdevsim0) entered disabled state [ 1351.819202][T12645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1351.835742][T12645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.912939][T12645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1351.932444][T12645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.027599][T12645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.039019][T12645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.155646][T12645] `: Port device netdevsim0 removed [ 1352.167699][T12645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1352.180536][T12645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.356348][T12645] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.433553][T12645] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.481593][T12645] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.552110][T12645] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.697558][T12645] bridge_slave_1: left allmulticast mode [ 1352.707581][T12645] bridge_slave_1: left promiscuous mode [ 1352.716790][T12645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.728663][T12645] bridge_slave_0: left allmulticast mode [ 1352.734859][T12645] bridge_slave_0: left promiscuous mode [ 1352.742142][T12645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.754352][T12645] bond0: left allmulticast mode [ 1352.759542][T12645] bond_slave_0: left allmulticast mode [ 1352.767212][T12645] bond_slave_1: left allmulticast mode [ 1352.774250][T12645] bond0: left promiscuous mode [ 1352.779130][T12645] bond_slave_0: left promiscuous mode [ 1352.787683][T12645] bond_slave_1: left promiscuous mode [ 1352.794639][T12645] bridge0: port 3(bond0) entered disabled state [ 1352.802853][T12645] bridge_slave_1: left allmulticast mode [ 1352.808624][T12645] bridge_slave_1: left promiscuous mode [ 1352.817427][T12645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.834393][T12645] bridge_slave_1: left allmulticast mode [ 1352.840106][T12645] bridge_slave_1: left promiscuous mode [ 1352.847142][T12645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.859753][T12645] bridge_slave_0: left allmulticast mode [ 1352.866420][T12645] bridge_slave_0: left promiscuous mode [ 1352.873101][T12645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.169912][T12645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.179731][T12645] bond_slave_0: left promiscuous mode [ 1353.186936][T12645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.197853][T12645] bond_slave_1: left promiscuous mode [ 1353.204210][T12645] bond0 (unregistering): Released all slaves [ 1353.407300][T12645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.417951][T12645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.430209][T12645] bond0 (unregistering): Released all slaves [ 1353.730788][T12645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.741813][T12645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1353.753070][T12645] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1353.763748][T12645] bond0 (unregistering): Released all slaves [ 1353.775444][T12645] bond1 (unregistering): Released all slaves [ 1353.787534][T12645] bond2 (unregistering): Released all slaves [ 1353.798381][T12645] bond3 (unregistering): Released all slaves [ 1353.813762][T12645] bond4 (unregistering): Released all slaves [ 1353.827827][T12645] bond5 (unregistering): Released all slaves [ 1353.849708][T12645] bond6 (unregistering): Released all slaves [ 1353.862095][T12645] bond7 (unregistering): Released all slaves [ 1353.981617][T12645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1353.993336][T12645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1354.004466][T12645] bond0 (unregistering): Released all slaves [ 1354.206107][T12645] #{6c: left promiscuous mode [ 1354.263022][T12645] : left promiscuous mode [ 1354.339761][T12645] tipc: Disabling bearer [ 1354.350829][T12645] tipc: Left network mode [ 1354.380977][T12645] tipc: Left network mode [ 1354.391168][T12645] tipc: Disabling bearer [ 1354.409564][T12645] tipc: Left network mode