last executing test programs: 4.734251433s ago: executing program 0 (id=5146): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xb62ca000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) 3.701876825s ago: executing program 0 (id=5160): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x180840f, &(0x7f0000000d00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) 3.55602869s ago: executing program 0 (id=5162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x437, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x74583, 0x1}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x80}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x3}]}}}]}, 0x5c}}, 0x4880) 3.28863381s ago: executing program 0 (id=5163): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x22, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3fffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xfffffffc, 0x800, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x2, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 2.925886918s ago: executing program 0 (id=5166): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x1, 0x7, 0xb, {0x7, 0x2, 0x1, 0x80, 0x6572}, {0x2, 0x1, 0x400, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.780314794s ago: executing program 0 (id=5168): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000280)={0x40, 0x0, 0x3, "30a988"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.913523589s ago: executing program 2 (id=5188): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xffffc000) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.748983434s ago: executing program 2 (id=5191): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x71, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x63, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4f, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908"}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 1.666764138s ago: executing program 1 (id=5192): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x80) 1.660565043s ago: executing program 2 (id=5193): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.500013436s ago: executing program 1 (id=5195): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0x10}}}}}}}, 0x0) 1.437414325s ago: executing program 4 (id=5196): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000200)={{@my=0x0, 0x5}, {@any, 0x200}, 0x400, "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"}, 0x418, 0x8}) 1.307474542s ago: executing program 1 (id=5197): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000000)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) preadv(r0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000800)=""/21, 0x15}], 0x2, 0x1001000, 0x3) 1.287446803s ago: executing program 4 (id=5199): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0xa9ea, 0x5, 0x0, 0x0) 1.167630058s ago: executing program 4 (id=5200): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) 1.084228002s ago: executing program 4 (id=5202): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvfrom(r0, 0x0, 0xffffffffffffff74, 0x101, 0x0, 0x0) syz_emit_ethernet(0x6f, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x68, 0x0, 0x5, 0x88, 0x0, @remote, @local}, {0xfffe, 0x4e24, 0x4d, 0x0, @gue={{0x2, 0x1, 0x1, 0x8, 0x100}, "411fef25f56e34fca8dad07105315806cdd1418ddcba0d45173fde4fbc8fcc882b32e5629284378de8f755cf58ae4b784458ae74564e0ceb56226d5531"}}}}}}, 0x0) 938.344207ms ago: executing program 4 (id=5204): r0 = creat(&(0x7f0000001340)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 874.333748ms ago: executing program 2 (id=5206): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x8, 0x6, 0x3c, 0xffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x7], [0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x401, 0x0, 0x0, 0xfffd]}}]}}]}, 0x8c}}, 0x0) 793.622348ms ago: executing program 4 (id=5207): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@main=@item_012={0x1, 0x0, 0xa, "f3"}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x9, "4603c365"}, @global=@item_012={0x1, 0x1, 0x1, "84"}, @global=@item_012={0x0, 0x1, 0x6}]}}, 0x0}, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, 0x0) 748.239729ms ago: executing program 2 (id=5208): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) 740.238909ms ago: executing program 3 (id=5209): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x8b28, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 629.99916ms ago: executing program 3 (id=5210): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000019c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x4, @remote, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000280)="e9", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)='T', 0x1}], 0x1}}], 0x2, 0x931766f6319eed44) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x6, 0x30}, &(0x7f0000000280)=0xc) 562.100347ms ago: executing program 1 (id=5211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000073, 0x0, 0x5}]}) 475.19885ms ago: executing program 3 (id=5212): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x4, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb99, 0xfffffffc, 0x4, 0xfffffff7, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x101, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0xffffffff, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x6, 0x3, 0x1, 0x29a, 0x5, 0x0, 0x981, 0xbe, 0x103, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0x8001, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x8001, 0x2, 0x7, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x12d, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x7, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x9, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x84, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0x4002, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) read(r0, 0x0, 0x0) 324.714062ms ago: executing program 1 (id=5213): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x7c41, &(0x7f0000000300)={0x0, 0xfb68, 0x800, 0x0, 0x99}) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780), 0xa) 254.46878ms ago: executing program 3 (id=5214): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000200)={0x5, 0x10, 0xfa00, {0x0, r2, 0x1}}, 0x18) 166.068704ms ago: executing program 2 (id=5215): r0 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$setown(r0, 0x8, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 158.530097ms ago: executing program 3 (id=5216): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 132.549162ms ago: executing program 1 (id=5217): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x15f1, 0xff98, 0x69, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) 0s ago: executing program 3 (id=5218): mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x130) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x105) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 3568': attribute type 2 has an invalid length. [ 317.560330][ T29] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.574554][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.590902][ T29] usb 3-1: Product: syz [ 317.598671][ T29] usb 3-1: Manufacturer: syz [ 317.612258][T15983] !: entered promiscuous mode [ 317.617326][ T29] usb 3-1: SerialNumber: syz [ 317.667228][T15786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.719745][T15786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.817549][ T3585] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.862911][ T29] usb 3-1: 0:2 : does not exist [ 317.877299][ T3585] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.906813][ T29] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 317.958562][ T3585] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.986110][ T3585] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.081353][ T29] usb 3-1: USB disconnect, device number 31 [ 318.130627][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.150933][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.300499][ T3585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.309695][ T3585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.495412][T16013] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 318.928705][ T5824] Bluetooth: hci0: command tx timeout [ 319.084766][ T5882] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 319.244722][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 319.281202][ T5882] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 319.294488][ T5882] usb 5-1: config 1 has no interface number 0 [ 319.314483][ T5882] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 319.335059][ T5882] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 319.356753][ T5882] usb 5-1: config 1 interface 105 has no altsetting 0 [ 319.400271][ T5882] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 319.424423][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.432533][ T5882] usb 5-1: Product: syz [ 319.475644][ T5882] usb 5-1: Manufacturer: syz [ 319.480353][ T5882] usb 5-1: SerialNumber: syz [ 319.537742][T16026] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.548952][T16026] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 319.625353][T16050] loop8: detected capacity change from 0 to 8 [ 319.807051][T16050] loop8: detected capacity change from 8 to 7 [ 319.995338][T16026] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 320.037746][T16026] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 320.117388][T16050] Dev loop8: unable to read RDB block 7 [ 320.124157][T16050] loop8: unable to read partition table [ 320.130352][T16050] loop8: partition table beyond EOD, truncated [ 320.136833][T16050] loop_reread_partitions: partition scan of loop8 (”Q˜y,øÿÿÿüFê¦)) failed (rc=-5) [ 320.461481][ T5882] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 320.494976][ T5882] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 320.519362][ T5882] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 320.573972][ T5882] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8a:2f:5a:3f:7f:aa [ 320.618828][ T5882] usb 5-1: USB disconnect, device number 21 [ 320.673172][ T5882] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 320.777544][ T5882] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 320.787195][ T5882] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 320.814584][ T5882] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 322.472391][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3618'. [ 322.494182][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3618'. [ 322.564510][ T5882] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 322.725192][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 322.745745][ T5882] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 322.757589][ T5882] usb 2-1: config 1 has no interface number 0 [ 322.784504][ T5882] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 322.804554][ T5882] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 322.824005][ T5882] usb 2-1: config 1 interface 105 has no altsetting 0 [ 322.841610][ T5882] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 322.861721][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.878642][ T5882] usb 2-1: Product: syz [ 322.883022][ T5882] usb 2-1: Manufacturer: syz [ 322.893168][ T5882] usb 2-1: SerialNumber: syz [ 322.907985][T16147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 322.919335][T16147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.407758][T16147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.432872][T16147] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.544592][T13107] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 323.648802][T16190] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 323.666243][T16190] pim6reg: entered allmulticast mode [ 323.714501][T13107] usb 3-1: Using ep0 maxpacket: 16 [ 323.729012][T13107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.747590][T13107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.757525][T13107] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 323.768000][T13107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.795090][T13107] usb 3-1: config 0 descriptor?? [ 323.846919][ T5882] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 323.874934][ T5882] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 323.895071][ T5882] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 323.935031][ T5882] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8e:a9:7d:ec:36:30 [ 323.957128][ T5882] usb 2-1: USB disconnect, device number 26 [ 323.967584][ T5882] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 324.045365][ T5882] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 324.055060][ T5882] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 324.066355][ T5882] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 324.215719][T13107] apple 0003:05AC:024B.001E: fixing up MacBook JIS keyboard report descriptor [ 324.235149][T13107] apple 0003:05AC:024B.001E: unknown global tag 0xe [ 324.241836][T13107] apple 0003:05AC:024B.001E: item 0 1 1 14 parsing failed [ 324.260248][T13107] apple 0003:05AC:024B.001E: parse failed [ 324.274549][T13107] apple 0003:05AC:024B.001E: probe with driver apple failed with error -22 [ 324.436281][T13107] usb 3-1: USB disconnect, device number 32 [ 324.570283][T16201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3643'. [ 324.608529][T16201] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3643'. [ 324.709308][T13107] IPVS: starting estimator thread 0... [ 324.717414][T16207] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 324.804564][T16208] IPVS: using max 25 ests per chain, 60000 per kthread [ 325.014498][ T5882] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 325.196439][ T5882] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 325.216083][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.237510][ T5882] usb 4-1: Product: syz [ 325.241750][ T5882] usb 4-1: Manufacturer: syz [ 325.248391][ T5882] usb 4-1: SerialNumber: syz [ 325.267100][ T5882] usb 4-1: config 0 descriptor?? [ 325.539958][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3661'. [ 325.549812][T16240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3661'. [ 325.634716][ T5897] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 325.645411][T16244] vivid-004: disconnect [ 325.657369][T16244] vivid-004: reconnect [ 325.713862][ T5882] usb 4-1: Firmware: major: 71, minor: 109, hardware type: ATUSB (2) [ 325.806709][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 325.816095][ T5897] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 325.836882][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.855070][ T5897] usb 3-1: config 0 descriptor?? [ 325.934921][ T5882] usb 4-1: failed to fetch extended address, random address set [ 325.962210][T16255] random: crng reseeded on system resumption [ 326.017627][ T5882] usb 4-1: USB disconnect, device number 24 [ 326.071537][ T5897] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 326.100080][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 326.125750][T16261] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 3580128042 out of range (51000000..2150000000) [ 326.140935][ T5897] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 326.152707][ T5897] usb 3-1: media controller created [ 326.173923][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 326.273190][ T5897] az6027: usb out operation failed. (-71) [ 326.284996][ T5897] az6027: usb out operation failed. (-71) [ 326.291368][ T5897] stb0899_attach: Driver disabled by Kconfig [ 326.306180][ T5897] az6027: no front-end attached [ 326.306180][ T5897] [ 326.325101][ T5897] az6027: usb out operation failed. (-71) [ 326.330944][ T5897] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 326.350235][ T5897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 326.375180][ T5897] dvb-usb: schedule remote query interval to 400 msecs. [ 326.389378][ T5897] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 326.417280][ T5897] usb 3-1: USB disconnect, device number 33 [ 326.517104][ T5897] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 326.716006][T16278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3676'. [ 326.726212][T16278] netlink: 'syz.3.3676': attribute type 6 has an invalid length. [ 326.734882][T16278] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3676'. [ 326.918084][T16286] input: syz0 as /devices/virtual/input/input28 [ 327.668022][T16309] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 327.715248][T16309] syzkaller1: linktype set to 6 [ 328.857931][T16346] program syz.2.3707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.911038][T16348] program syz.2.3707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.403233][ T30] audit: type=1326 audit(1771257960.241:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 329.413294][T13111] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 329.458338][ T30] audit: type=1326 audit(1771257960.271:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 329.534681][ T30] audit: type=1326 audit(1771257960.281:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 329.571983][ T30] audit: type=1326 audit(1771257960.281:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 329.595918][ T30] audit: type=1326 audit(1771257960.281:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 329.620671][ T30] audit: type=1326 audit(1771257960.281:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 329.642999][ T30] audit: type=1326 audit(1771257960.281:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 329.656810][T13111] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 329.666168][ T30] audit: type=1326 audit(1771257960.281:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 329.697563][T13111] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 329.722082][ T30] audit: type=1326 audit(1771257960.281:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=229 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 329.734533][T13111] usb 3-1: config 0 interface 0 has no altsetting 0 [ 329.751240][ T30] audit: type=1326 audit(1771257960.281:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16360 comm="syz.3.3714" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f98f6c code=0x7ffc0000 [ 329.788497][T13111] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 329.813805][T13111] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 329.832536][T13111] usb 3-1: Product: syz [ 329.844429][T13111] usb 3-1: Manufacturer: syz [ 329.849095][T13111] usb 3-1: SerialNumber: syz [ 329.893312][T13111] usb 3-1: config 0 descriptor?? [ 329.907220][T16370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3718'. [ 329.918997][T13111] hub 3-1:0.0: bad descriptor, ignoring hub [ 329.926481][T13111] hub 3-1:0.0: probe with driver hub failed with error -5 [ 329.937859][T13111] usb 3-1: selecting invalid altsetting 0 [ 330.376162][T16389] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3727'. [ 330.571018][T13111] usb 3-1: USB disconnect, device number 34 [ 330.825864][T13111] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 331.027472][T13111] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 331.044517][T13111] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 331.062438][T13111] usb 3-1: config 0 interface 0 has no altsetting 0 [ 331.081803][T13111] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 331.094463][T13111] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 331.113853][T13111] usb 3-1: Product: syz [ 331.130032][T13111] usb 3-1: Manufacturer: syz [ 331.145365][T13111] usb 3-1: SerialNumber: syz [ 331.157034][T13111] usb 3-1: config 0 descriptor?? [ 331.165433][T13111] hub 3-1:0.0: bad descriptor, ignoring hub [ 331.184040][T13111] hub 3-1:0.0: probe with driver hub failed with error -5 [ 331.211673][T13111] usb 3-1: selecting invalid altsetting 0 [ 331.228707][T16417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3738'. [ 331.350467][T16417] bond2: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 331.369801][T13111] usb 3-1: USB disconnect, device number 35 [ 331.380638][T16417] bond2 (unregistering): Released all slaves [ 331.434161][ T5832] udevd[5832]: setting owner of /dev/snd/pcmC3D0p to uid=0, gid=29 failed: No such file or directory [ 331.474937][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 331.544083][ T5882] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 331.714466][ T5882] usb 2-1: Using ep0 maxpacket: 32 [ 331.751763][ T5882] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 331.769504][ T5882] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 331.789824][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 331.810169][ T5882] usb 2-1: config 1 has no interface number 0 [ 331.823497][ T5882] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 331.840903][ T5882] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 331.856393][ T5882] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 331.874543][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.907809][ T5882] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 332.057943][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3751'. [ 332.128448][ T5882] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 332.255397][T16451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3756'. [ 332.559725][ T5882] usb 2-1: USB disconnect, device number 27 [ 332.593060][ T5882] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 333.775981][T16512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3783'. [ 333.813569][T16512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3783'. [ 333.853886][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3784'. [ 334.390406][T16535] cifs: Unknown parameter '/sys/kernel/mm/ksm/run' [ 334.528768][T16537] erspan0: entered promiscuous mode [ 336.185950][ T29] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 336.203024][T16595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3820'. [ 336.236379][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3821'. [ 336.238561][T16595] bond3: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 336.266676][T16595] bond3 (unregistering): Released all slaves [ 336.345650][ T29] usb 3-1: Using ep0 maxpacket: 32 [ 336.356638][ T29] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 336.394555][ T29] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 336.413463][ T29] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 336.432660][ T29] usb 3-1: config 1 has no interface number 0 [ 336.446172][ T29] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.471882][ T29] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 336.496740][ T29] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 336.506381][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.570902][ T29] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 336.751391][ T29] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 336.954230][T16582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.979689][T16582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.059784][T16626] netlink: 'syz.4.3835': attribute type 2 has an invalid length. [ 337.092352][T16626] !: entered promiscuous mode [ 337.123817][T16626] netlink: 'syz.4.3835': attribute type 2 has an invalid length. [ 337.218519][ T5897] usb 3-1: USB disconnect, device number 36 [ 337.226540][ T5897] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 338.501348][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3873'. [ 339.014123][ T5824] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 339.117031][ T29] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 339.277240][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 339.303889][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.344474][ T29] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 339.353727][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.395250][ T29] usb 5-1: config 0 descriptor?? [ 339.447402][T16717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3877'. [ 339.832283][ T29] isku 0003:1E7D:319C.001F: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 340.264548][T13111] usb 5-1: USB disconnect, device number 22 [ 340.401212][T16753] cifs: Unknown parameter '/sys/kernel/mm/ksm/run' [ 340.514479][ T5882] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 340.703341][ T5882] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 340.711894][ T5882] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 340.723085][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0 [ 340.733584][ T5882] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 340.742935][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 340.751492][ T5882] usb 2-1: Product: syz [ 340.755783][ T5882] usb 2-1: Manufacturer: syz [ 340.761330][ T5882] usb 2-1: SerialNumber: syz [ 340.771863][ T5882] usb 2-1: config 0 descriptor?? [ 340.787556][ T5882] hub 2-1:0.0: bad descriptor, ignoring hub [ 340.804169][ T5882] hub 2-1:0.0: probe with driver hub failed with error -5 [ 340.817400][ T5882] usb 2-1: selecting invalid altsetting 0 [ 340.895575][T16763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3898'. [ 341.177979][T13111] usb 2-1: USB disconnect, device number 28 [ 341.675037][T13111] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 341.866450][T13111] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 341.892082][T13111] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 341.912353][T13111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 341.929468][T13111] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 341.944468][T13111] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 341.962945][T13111] usb 2-1: Product: syz [ 341.976499][T13111] usb 2-1: Manufacturer: syz [ 341.981255][T13111] usb 2-1: SerialNumber: syz [ 342.044061][T13111] usb 2-1: config 0 descriptor?? [ 342.077455][T13111] hub 2-1:0.0: bad descriptor, ignoring hub [ 342.083434][T13111] hub 2-1:0.0: probe with driver hub failed with error -5 [ 342.110577][T13111] usb 2-1: selecting invalid altsetting 0 [ 342.282363][T16813] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 342.355320][T16813] pim6reg: entered allmulticast mode [ 342.505132][ T5882] usb 2-1: USB disconnect, device number 29 [ 343.277958][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3930'. [ 344.854125][T16893] netlink: 'syz.2.3959': attribute type 14 has an invalid length. [ 344.867265][T16893] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3959'. [ 344.880913][T16898] netlink: 212 bytes leftover after parsing attributes in process `syz.3.3962'. [ 344.891723][T16893] bond0: option xmit_hash_policy: invalid value (8) [ 344.911631][T16896] vlan2: entered allmulticast mode [ 344.922945][T16896] veth0_to_bond: entered allmulticast mode [ 345.320684][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3969'. [ 345.660846][T16931] sctp: [Deprecated]: syz.1.3976 (pid 16931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 345.660846][T16931] Use struct sctp_sack_info instead [ 345.736470][T13107] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 345.894555][T13107] usb 3-1: Using ep0 maxpacket: 32 [ 345.902138][T13107] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 345.910954][T13107] usb 3-1: config 0 has no interface number 0 [ 345.920146][T13107] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 345.931239][T13107] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 345.941652][T13107] usb 3-1: config 0 interface 126 has no altsetting 0 [ 345.951595][T13107] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 345.961254][T13107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.969754][T13107] usb 3-1: Product: syz [ 345.977027][T13107] usb 3-1: Manufacturer: syz [ 345.982801][T13107] usb 3-1: SerialNumber: syz [ 345.991077][T13107] usb 3-1: config 0 descriptor?? [ 345.999272][T16922] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 346.006998][T13111] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 346.016233][T16922] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 346.174556][T13111] usb 2-1: Using ep0 maxpacket: 8 [ 346.187788][T13111] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 346.197520][T13111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.206440][T13111] usb 2-1: Product: syz [ 346.211070][T13111] usb 2-1: Manufacturer: syz [ 346.216367][T13111] usb 2-1: SerialNumber: syz [ 346.238577][T13111] usb 2-1: config 0 descriptor?? [ 346.252812][T13111] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 346.264326][T13111] dvb-usb: bulk message failed: -22 (2/0) [ 346.276864][T13111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 346.288127][T13111] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 346.297684][T13111] usb 2-1: media controller created [ 346.321869][T13111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.447370][T13107] ir_usb 3-1:0.126: IR Dongle converter detected [ 346.485961][T13111] cxusb: set interface failed [ 346.510714][T13111] dvb-usb: bulk message failed: -22 (1/0) [ 346.595988][T13111] DVB: Unable to find symbol mt352_attach() [ 346.602002][T13111] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 346.647085][T13107] usb 3-1: IRDA class descriptor not found, device not bound [ 346.708349][T13111] rc_core: IR keymap rc-dvico-portable not found [ 346.734486][T13111] Registered IR keymap rc-empty [ 346.740861][T13111] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 346.758686][T13111] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input29 [ 346.772808][T13111] dvb-usb: schedule remote query interval to 100 msecs. [ 346.796423][T13111] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 346.828004][T13111] usb 2-1: USB disconnect, device number 30 [ 346.869156][T13107] usb 3-1: USB disconnect, device number 37 [ 346.988292][T13111] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 347.010889][T16959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3988'. [ 347.313559][T16974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3995'. [ 347.462649][T16980] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3997'. [ 347.839909][T17000] netlink: 'syz.2.4008': attribute type 6 has an invalid length. [ 347.864575][T17000] netlink: 14623 bytes leftover after parsing attributes in process `syz.2.4008'. [ 347.996991][T17007] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4011'. [ 348.164508][ T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 348.326646][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 348.344536][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 348.356101][T17021] team0: Device gtp0 is of different type [ 348.368552][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.413260][ T9] usb 4-1: config 0 descriptor?? [ 348.442871][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4019'. [ 348.453362][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4019'. [ 348.865128][ T9] kye 0003:0458:5015.0020: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 348.887284][ T9] kye 0003:0458:5015.0020: unknown main item tag 0x0 [ 348.894119][ T9] kye 0003:0458:5015.0020: unknown main item tag 0x0 [ 348.919825][ T9] kye 0003:0458:5015.0020: unknown main item tag 0x0 [ 348.928248][ T9] kye 0003:0458:5015.0020: unknown main item tag 0x0 [ 348.946478][ T9] kye 0003:0458:5015.0020: unknown main item tag 0x0 [ 348.954147][ T9] kye 0003:0458:5015.0020: unknown main item tag 0x0 [ 348.961409][ T9] kye 0003:0458:5015.0020: unknown main item tag 0x0 [ 348.973004][ T9] kye 0003:0458:5015.0020: hidraw0: USB HID v0.00 Device [HID 0458:5015] on usb-dummy_hcd.3-1/input0 [ 349.000014][ T9] kye 0003:0458:5015.0020: tablet-enabling feature report not found [ 349.016644][ T9] kye 0003:0458:5015.0020: tablet enabling failed [ 349.045389][ T9] usb 4-1: USB disconnect, device number 25 [ 349.123616][T17048] fido_id[17048]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 349.714478][ T9] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 349.902935][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.933248][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 349.952206][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.982022][ T9] usb 3-1: config 0 descriptor?? [ 350.301292][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4052'. [ 350.345379][T17102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4053'. [ 350.407212][ T9] elecom 0003:056E:010D.0021: item fetching failed at offset 0/3 [ 350.417889][ T9] elecom 0003:056E:010D.0021: probe with driver elecom failed with error -22 [ 350.624866][T13111] usb 3-1: USB disconnect, device number 38 [ 351.394124][T17135] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4068'. [ 351.649199][T17145] netlink: 'syz.4.4073': attribute type 15 has an invalid length. [ 352.668817][T17188] netlink: 'syz.0.4091': attribute type 8 has an invalid length. [ 352.680377][T17188] netlink: 'syz.0.4091': attribute type 4 has an invalid length. [ 352.690789][T17188] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4091'. [ 352.836750][T17195] input: syz0 as /devices/virtual/input/input30 [ 353.277829][T17208] delete_channel: no stack [ 353.779921][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4111'. [ 353.793384][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4111'. [ 354.194460][ T5882] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 354.238210][T17250] team0: Device gtp0 is of different type [ 354.347325][ T5882] usb 4-1: unable to get BOS descriptor or descriptor too short [ 354.370485][ T5882] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 354.389016][ T5882] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024 [ 354.403670][ T5882] usb 4-1: config 1 interface 0 has no altsetting 0 [ 354.413517][ T5882] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 354.433400][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.443560][ T5882] usb 4-1: Product: syz [ 354.453700][ T5882] usb 4-1: Manufacturer: syz [ 354.461731][ T5882] usb 4-1: SerialNumber: syz [ 354.474241][T17241] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 354.777007][ T5897] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 354.915975][ T5882] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input31 [ 354.957638][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.982224][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.995545][ T5897] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 355.008308][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.028927][ T5897] usb 2-1: config 0 descriptor?? [ 355.174914][ T29] usb 4-1: USB disconnect, device number 26 [ 355.749974][T17276] program syz.4.4132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.789954][T17279] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4133'. [ 355.843481][T17280] program syz.4.4132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.877367][ T5897] hid-led 0003:0FC5:B080.0022: probe with driver hid-led failed with error -71 [ 355.900544][ T5897] usb 2-1: USB disconnect, device number 31 [ 355.985375][T13111] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 356.144475][T13111] usb 3-1: Using ep0 maxpacket: 32 [ 356.151785][T13111] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 356.160350][T13111] usb 3-1: config 0 has no interface number 0 [ 356.166601][T13111] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 356.177774][T13111] usb 3-1: config 0 interface 85 has no altsetting 0 [ 356.187001][T13111] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 356.196204][T13111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.204234][T13111] usb 3-1: Product: syz [ 356.208597][T13111] usb 3-1: Manufacturer: syz [ 356.213289][T13111] usb 3-1: SerialNumber: syz [ 356.223176][T13111] usb 3-1: config 0 descriptor?? [ 356.254481][ T5897] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 356.406247][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.417574][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.428275][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 356.441194][ T5897] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.456096][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.468332][ T5897] usb 4-1: config 0 descriptor?? [ 356.693416][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4140'. [ 356.898944][ T5897] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 356.920436][ T5897] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 356.948148][ T5897] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 356.959438][ T5897] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 356.967570][ T5897] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 356.975121][ T5897] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 356.983700][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 356.983718][ T30] audit: type=1326 audit(1771257987.821:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 357.013535][ T5897] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 357.022582][ T5897] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 357.023388][T13111] appletouch 3-1:0.85: Geyser mode initialized. [ 357.030343][ T5897] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 357.045378][ T30] audit: type=1326 audit(1771257987.821:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 357.067656][T13111] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input32 [ 357.077925][ T5897] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 357.078741][ C1] appletouch 3-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 357.103334][ T5897] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 357.125808][ T30] audit: type=1326 audit(1771257987.851:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 357.166676][ T5897] usb 4-1: USB disconnect, device number 27 [ 357.174916][T13107] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 357.207381][ T30] audit: type=1326 audit(1771257987.851:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 357.272253][ T30] audit: type=1326 audit(1771257987.851:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 357.314462][ T5882] usb 3-1: USB disconnect, device number 39 [ 357.314562][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 357.341903][T13107] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 357.360819][T13107] usb 2-1: config 0 has no interface number 0 [ 357.377029][T17305] fido_id[17305]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 357.402198][ T30] audit: type=1326 audit(1771257987.861:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 357.412096][T13107] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 357.433115][ T5882] appletouch 3-1:0.85: input: appletouch disconnected [ 357.469407][T13107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.478644][T13107] usb 2-1: Product: syz [ 357.482862][T13107] usb 2-1: Manufacturer: syz [ 357.488321][ T30] audit: type=1326 audit(1771257987.861:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 357.513317][T13107] usb 2-1: SerialNumber: syz [ 357.523618][ T30] audit: type=1326 audit(1771257987.861:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17302 comm="syz.0.4145" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 357.546867][T13107] usb 2-1: config 0 descriptor?? [ 357.795266][T17318] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4152'. [ 357.984312][T13107] usb 2-1: Firmware: major: 0, minor: 107, hardware type: RZUSB (3) [ 358.203587][T13107] usb 2-1: failed to fetch extended address, random address set [ 358.301052][T13107] usb 2-1: USB disconnect, device number 32 [ 358.340891][T17338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4161'. [ 358.405688][T17342] program syz.0.4162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.470725][T17344] program syz.0.4162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 359.034540][T13111] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 359.156956][ T29] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 359.184484][T13111] usb 5-1: Using ep0 maxpacket: 32 [ 359.196614][T13111] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 359.205380][T13111] usb 5-1: config 0 has no interface number 0 [ 359.211534][T13111] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 359.222267][T13111] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 359.234086][T13111] usb 5-1: config 0 interface 126 has no altsetting 0 [ 359.247140][T13111] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 359.257059][T13111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.265691][T13111] usb 5-1: Product: syz [ 359.270039][T13111] usb 5-1: Manufacturer: syz [ 359.274934][T13111] usb 5-1: SerialNumber: syz [ 359.281955][T13111] usb 5-1: config 0 descriptor?? [ 359.288110][T17361] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 359.297147][T17361] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 359.314516][ T29] usb 2-1: Using ep0 maxpacket: 16 [ 359.321636][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.334075][ T29] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 359.343313][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.357002][ T29] usb 2-1: config 0 descriptor?? [ 359.726823][T13111] ir_usb 5-1:0.126: IR Dongle converter detected [ 359.777561][ T29] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 359.926793][T13111] usb 5-1: IRDA class descriptor not found, device not bound [ 360.139832][ T29] usb 5-1: USB disconnect, device number 23 [ 360.179003][T13111] usb 2-1: USB disconnect, device number 33 [ 361.205061][T13111] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 361.339647][T17411] input: syz0 as /devices/virtual/input/input33 [ 361.386235][T13111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.398798][T13111] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.411882][T13111] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 361.429966][T13111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.441765][T13111] usb 4-1: config 0 descriptor?? [ 361.454567][ T5823] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 361.614475][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 361.622877][ T5823] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 361.631801][ T5823] usb 2-1: config 0 has no interface number 0 [ 361.638485][ T5823] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 361.653275][ T5823] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 361.675796][ T5823] usb 2-1: config 0 interface 126 has no altsetting 0 [ 361.685529][ T5823] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 361.703263][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.711887][ T5823] usb 2-1: Product: syz [ 361.717252][ T5823] usb 2-1: Manufacturer: syz [ 361.722046][ T5823] usb 2-1: SerialNumber: syz [ 361.738144][ T5823] usb 2-1: config 0 descriptor?? [ 361.752085][T17407] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 361.761092][T17407] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 361.894110][T13111] samsung 0003:0419:0600.0025: item fetching failed at offset 5/7 [ 361.914325][T13111] samsung 0003:0419:0600.0025: parse failed [ 361.921360][T13111] samsung 0003:0419:0600.0025: probe with driver samsung failed with error -22 [ 362.117447][T13111] usb 4-1: USB disconnect, device number 28 [ 362.207324][ T5823] ir_usb 2-1:0.126: IR Dongle converter detected [ 362.404703][ T5823] usb 2-1: IRDA class descriptor not found, device not bound [ 362.629785][T13113] usb 2-1: USB disconnect, device number 34 [ 363.014648][ T5823] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 363.216470][ T5823] usb 3-1: unable to get BOS descriptor or descriptor too short [ 363.237472][ T5823] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 363.254555][ T5823] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1048, setting to 1024 [ 363.285597][ T5823] usb 3-1: config 1 interface 0 has no altsetting 0 [ 363.296360][ T5823] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 363.306096][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.327458][ T5823] usb 3-1: Product: syz [ 363.331754][ T5823] usb 3-1: Manufacturer: syz [ 363.341880][ T5823] usb 3-1: SerialNumber: syz [ 363.359273][T17448] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 363.799751][ T5823] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input34 [ 364.039603][T13111] usb 3-1: USB disconnect, device number 40 [ 364.154588][T13113] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 364.316136][T13113] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 364.324335][T13113] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 364.334756][T13113] usb 5-1: config 0 interface 0 has no altsetting 0 [ 364.343604][T13113] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 364.353138][T13113] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 364.364106][T13113] usb 5-1: Product: syz [ 364.368416][T13113] usb 5-1: Manufacturer: syz [ 364.373057][T13113] usb 5-1: SerialNumber: syz [ 364.380620][T13113] usb 5-1: config 0 descriptor?? [ 364.388528][T13113] hub 5-1:0.0: bad descriptor, ignoring hub [ 364.395478][T13113] hub 5-1:0.0: probe with driver hub failed with error -5 [ 364.405395][T13113] usb 5-1: selecting invalid altsetting 0 [ 364.504822][ T5882] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 364.625083][ T5823] IPVS: starting estimator thread 0... [ 364.632788][T17500] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 364.657318][ T5882] usb 4-1: Using ep0 maxpacket: 16 [ 364.667672][ T5882] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.692182][ T5882] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 364.705844][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.714518][T17501] IPVS: using max 26 ests per chain, 62400 per kthread [ 364.723479][ T5882] usb 4-1: config 0 descriptor?? [ 365.166561][ T5882] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 365.337669][T13111] usb 5-1: USB disconnect, device number 24 [ 365.504574][T13111] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 365.603452][ T5882] usb 4-1: USB disconnect, device number 29 [ 365.666249][T13111] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 365.683239][T13111] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 365.696011][T13111] usb 5-1: config 0 interface 0 has no altsetting 0 [ 365.706473][T13111] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 365.715787][T13111] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 365.723995][T13111] usb 5-1: Product: syz [ 365.728778][T13111] usb 5-1: Manufacturer: syz [ 365.733425][T13111] usb 5-1: SerialNumber: syz [ 365.741205][T13111] usb 5-1: config 0 descriptor?? [ 365.751979][T13111] hub 5-1:0.0: bad descriptor, ignoring hub [ 365.758873][T13111] hub 5-1:0.0: probe with driver hub failed with error -5 [ 365.777925][T13111] usb 5-1: selecting invalid altsetting 0 [ 366.064844][ T5882] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 366.126072][T13107] usb 5-1: USB disconnect, device number 25 [ 366.239052][ T5882] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 366.250828][ T5882] usb 3-1: config 0 has no interface number 0 [ 366.270789][ T5882] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 366.294618][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.323092][ T5882] usb 3-1: Product: syz [ 366.337934][ T5882] usb 3-1: Manufacturer: syz [ 366.350519][ T5882] usb 3-1: SerialNumber: syz [ 366.369423][ T5882] usb 3-1: config 0 descriptor?? [ 366.598391][T17548] could not allocate digest TFM handle _!5Á’›ã(ìÛiÀ£ïÕHP,ƒomñ«xúÄ™í©*Ô71U"~Âß ‘2.Ë>£~e’…ñŠ>/yµ™ [ 366.620378][T17549] random: crng reseeded on system resumption [ 366.819236][ T5882] usb 3-1: Firmware: major: 0, minor: 107, hardware type: RZUSB (3) [ 367.032011][ T5882] usb 3-1: failed to fetch extended address, random address set [ 367.101909][ T5882] usb 3-1: USB disconnect, device number 41 [ 367.954529][T13111] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 368.117836][T13111] usb 2-1: config 1 has an invalid descriptor of length 93, skipping remainder of the config [ 368.128283][T13111] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 368.137530][T13111] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.153697][T13111] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 368.163105][T13111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.171216][T13111] usb 2-1: Product: syz [ 368.175799][T13111] usb 2-1: Manufacturer: syz [ 368.180465][T13111] usb 2-1: SerialNumber: syz [ 368.193693][T13111] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 368.201498][T13111] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 368.208648][T13111] cdc_ncm 2-1:1.0: bind() failure [ 368.397570][ T5823] usb 2-1: USB disconnect, device number 35 [ 368.594493][ T5882] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 368.744478][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 368.751579][ T5882] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 368.763306][ T5882] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 368.772880][ T5882] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 368.782064][ T5882] usb 4-1: Product: syz [ 368.794665][ T5882] usb 4-1: Manufacturer: syz [ 368.804471][ T5882] usb 4-1: SerialNumber: syz [ 368.919412][T17622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4288'. [ 369.031474][ T5882] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 369.050747][ T5882] usb 4-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 369.074688][ T5882] usb 4-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 369.090654][ T5882] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 369.099036][ T5897] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 369.232570][ T5882] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 369.264215][ T5882] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 369.279683][ T5897] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 369.290027][ T5897] usb 5-1: config 0 has no interface number 0 [ 369.299322][ T5882] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 369.310730][ T5897] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 369.334489][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.349638][ T5897] usb 5-1: Product: syz [ 369.363029][ T5897] usb 5-1: Manufacturer: syz [ 369.370297][ T5897] usb 5-1: SerialNumber: syz [ 369.388635][ T5897] usb 5-1: config 0 descriptor?? [ 369.484133][T13111] usb 4-1: USB disconnect, device number 30 [ 369.507933][T13111] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 369.550698][T13111] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 369.563478][T13111] visor 4-1:1.0: device disconnected [ 369.847353][ T5897] usb 5-1: Firmware: major: 0, minor: 107, hardware type: RZUSB (3) [ 370.048537][ T5897] usb 5-1: failed to fetch extended address, random address set [ 370.113823][ T5897] usb 5-1: USB disconnect, device number 26 [ 370.119999][T13107] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 370.274584][T13107] usb 2-1: Using ep0 maxpacket: 32 [ 370.282244][T13107] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 370.293660][T13107] usb 2-1: config 1 interface 0 has no altsetting 0 [ 370.305242][T13107] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 370.318002][T13107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.326331][T13107] usb 2-1: Product: syz [ 370.331086][T13107] usb 2-1: Manufacturer: syz [ 370.336157][T13107] usb 2-1: SerialNumber: syz [ 370.365413][ T5824] Bluetooth: hci2: command 0x0406 tx timeout [ 370.418437][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4305'. [ 370.587063][T13107] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input35 [ 370.636489][T13107] usb 2-1: USB disconnect, device number 36 [ 370.636489][ C0] appletouch 2-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 370.701464][T17672] binder: 17671:17672 ioctl c018620c 80000900 returned -1 [ 370.702005][T13107] appletouch 2-1:1.0: input: appletouch disconnected [ 370.771234][T17676] loop4: detected capacity change from 0 to 1 [ 370.793218][T17676] Dev loop4: unable to read RDB block 1 [ 370.819935][T17676] loop4: unable to read partition table [ 370.831948][T17676] loop4: partition table beyond EOD, truncated [ 370.847200][T17676] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 371.051540][T17687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4316'. [ 372.029379][T17722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4330'. [ 372.134435][ T5897] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 372.314545][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 372.326307][ T5897] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 372.354913][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.415112][ T5897] usb 4-1: config 0 descriptor?? [ 372.657929][ T5897] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 372.678456][ T5897] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 372.712487][ T5897] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 372.731175][ T5897] usb 4-1: media controller created [ 372.766910][ T5897] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 372.867663][ T5897] az6027: usb out operation failed. (-71) [ 372.885187][ T5897] az6027: usb out operation failed. (-71) [ 372.895638][ T5897] stb0899_attach: Driver disabled by Kconfig [ 372.912254][ T5897] az6027: no front-end attached [ 372.912254][ T5897] [ 372.927671][ T5897] az6027: usb out operation failed. (-71) [ 372.943787][ T5897] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 372.957841][ T5897] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 372.974908][T13113] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 372.984203][ T5897] dvb-usb: schedule remote query interval to 400 msecs. [ 372.998020][ T5897] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 373.028993][ T5897] usb 4-1: USB disconnect, device number 31 [ 373.113219][ T5897] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 373.144633][T13113] usb 5-1: Using ep0 maxpacket: 8 [ 373.174153][T13113] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 373.186625][T13113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.194958][T13113] usb 5-1: Product: syz [ 373.199168][T13113] usb 5-1: Manufacturer: syz [ 373.203797][T13113] usb 5-1: SerialNumber: syz [ 373.225180][T13113] usb 5-1: config 0 descriptor?? [ 373.238065][T13113] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 373.255727][T13113] dvb-usb: bulk message failed: -22 (2/0) [ 373.271082][T13113] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 373.297257][T13113] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 373.307875][T13113] usb 5-1: media controller created [ 373.329873][T13113] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.427156][T17757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4346'. [ 373.448149][T13113] cxusb: set interface failed [ 373.470232][T13113] dvb-usb: bulk message failed: -22 (1/0) [ 373.535384][T13113] DVB: Unable to find symbol mt352_attach() [ 373.541627][T13113] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 373.654656][T13113] rc_core: IR keymap rc-dvico-portable not found [ 373.664027][T13113] Registered IR keymap rc-empty [ 373.680782][T13113] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 373.723601][T13113] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input37 [ 373.769165][T13113] dvb-usb: schedule remote query interval to 100 msecs. [ 373.784608][T13113] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 373.813762][T13113] usb 5-1: USB disconnect, device number 27 [ 373.937643][T13113] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 373.990975][T17779] syz_tun: entered allmulticast mode [ 373.999074][T17778] syz_tun: left allmulticast mode [ 374.164452][ T5882] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 374.349293][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 374.385351][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 374.413339][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 374.433379][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 374.447656][ T5882] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.469779][ T5882] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 374.489375][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.514529][ T5882] usb 3-1: Product: syz [ 374.518980][ T5882] usb 3-1: Manufacturer: syz [ 374.523692][ T5882] usb 3-1: SerialNumber: syz [ 374.547233][ T5882] usb 3-1: config 0 descriptor?? [ 374.573017][ T5882] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input38 [ 374.842786][T13113] usb 3-1: USB disconnect, device number 42 [ 375.524444][ T5882] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 375.643355][T17820] tap0: tun_chr_ioctl cmd 1074025677 [ 375.659555][T17820] tap0: linktype set to 780 [ 375.708762][ T5882] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 375.718087][ T5882] usb 4-1: config 0 has no interface number 0 [ 375.749580][ T5882] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 375.770562][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.790835][ T5882] usb 4-1: Product: syz [ 375.795390][ T5882] usb 4-1: Manufacturer: syz [ 375.800037][ T5882] usb 4-1: SerialNumber: syz [ 375.846770][ T5882] usb 4-1: config 0 descriptor?? [ 376.284530][ T5882] usb 4-1: Firmware: major: 0, minor: 107, hardware type: RZUSB (3) [ 376.488922][ T5882] usb 4-1: failed to fetch extended address, random address set [ 376.496808][T13107] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 376.578507][ T5882] usb 4-1: USB disconnect, device number 32 [ 376.655438][T13107] usb 5-1: Using ep0 maxpacket: 8 [ 376.663402][T13107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 376.707161][T13107] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 376.725098][T13107] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 376.737659][T13107] usb 5-1: Product: syz [ 376.741893][T13107] usb 5-1: Manufacturer: syz [ 376.760994][T13107] usb 5-1: SerialNumber: syz [ 377.005436][T13107] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 377.014016][T13107] usb 5-1: Handspring Visor / Palm OS: port 109, is for unknown use [ 377.044022][T13107] usb 5-1: Handspring Visor / Palm OS: port 211, is for unknown use [ 377.052625][T13107] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 377.206930][T13107] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 377.241407][T13107] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 377.293087][T13107] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 377.340285][T17885] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4403'. [ 377.385680][T17885] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 377.455291][T13107] usb 5-1: USB disconnect, device number 28 [ 377.488927][T13107] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 377.529639][T13107] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 377.557666][T13107] visor 5-1:1.0: device disconnected [ 378.529950][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.536463][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.914982][T13113] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 379.076318][T13113] usb 3-1: Using ep0 maxpacket: 32 [ 379.090736][T13113] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.122188][T13113] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.145701][T13113] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 379.164000][T13113] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 379.202860][T13113] usb 3-1: Product: syz [ 379.207553][T13113] usb 3-1: Manufacturer: syz [ 379.226553][ T30] audit: type=1326 audit(1771258010.061:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17939 comm="syz.4.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 379.236317][T13113] hub 3-1:4.0: USB hub found [ 379.272138][ T30] audit: type=1326 audit(1771258010.061:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17939 comm="syz.4.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 379.312177][ T30] audit: type=1326 audit(1771258010.061:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17939 comm="syz.4.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 379.355068][ T30] audit: type=1326 audit(1771258010.061:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17939 comm="syz.4.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 379.388949][ T30] audit: type=1326 audit(1771258010.061:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17939 comm="syz.4.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 379.428702][ T30] audit: type=1326 audit(1771258010.111:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17939 comm="syz.4.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 379.456077][ T30] audit: type=1326 audit(1771258010.111:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17939 comm="syz.4.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 379.489044][ T30] audit: type=1326 audit(1771258010.111:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17939 comm="syz.4.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52f6c code=0x7ffc0000 [ 379.517383][T13113] hub 3-1:4.0: config failed, hub has too many ports! (err -19) [ 379.863645][T13113] usb 3-1: USB disconnect, device number 43 [ 380.615266][T13107] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 380.705173][T13113] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 380.787924][T13107] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.814534][T13107] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 380.844973][T13111] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 380.859954][T13107] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.875418][T13107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.883507][T13107] usb 3-1: Product: syz [ 380.887994][T13113] usb 2-1: Using ep0 maxpacket: 32 [ 380.893411][T13107] usb 3-1: Manufacturer: syz [ 380.898773][T13107] usb 3-1: SerialNumber: syz [ 380.905139][T13113] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.913446][T13113] usb 2-1: config 0 has no interface number 0 [ 380.924222][T13113] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 380.934913][T13113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.944176][T13113] usb 2-1: Product: syz [ 380.954068][T13113] usb 2-1: Manufacturer: syz [ 380.958998][T13113] usb 2-1: SerialNumber: syz [ 380.968876][T13113] usb 2-1: config 0 descriptor?? [ 380.978875][T13113] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 380.988662][T13113] usb 2-1: selecting invalid altsetting 1 [ 380.994845][T13113] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 381.007795][T13113] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 381.018418][T13111] usb 4-1: Using ep0 maxpacket: 16 [ 381.025066][T13113] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 381.033679][T13113] usb 2-1: media controller created [ 381.039636][T13111] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 381.054479][T13111] usb 4-1: config 0 has no interface number 0 [ 381.060693][T13111] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 381.076839][T13113] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.088314][T13111] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 381.114056][T13111] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 381.124204][T13111] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 381.132704][T13111] usb 4-1: Product: syz [ 381.137247][T13111] usb 4-1: SerialNumber: syz [ 381.147138][T13111] usb 4-1: config 0 descriptor?? [ 381.158269][T13111] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 381.168310][T13111] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input39 [ 381.182976][T17972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.197765][T17972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.213279][T13113] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 381.220856][T13113] zl10353_read_register: readreg error (reg=127, ret==-71) [ 381.229693][T13113] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 381.245722][ T5823] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 381.258504][T13107] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 381.289604][T13107] usb 3-1: USB disconnect, device number 44 [ 381.337027][T13113] usb 2-1: USB disconnect, device number 37 [ 381.379998][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.389379][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.396653][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.403943][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.412072][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.419683][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.427080][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.434548][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.441843][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.449110][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 381.456746][ T5823] usb 5-1: Using ep0 maxpacket: 8 [ 381.459834][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 381.471182][T13111] usb 4-1: USB disconnect, device number 33 [ 381.498470][ T5823] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 381.521396][T13111] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 381.524769][ T5823] usb 5-1: config 0 has no interface number 0 [ 381.537923][ T5823] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 381.550049][ T5823] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 381.562615][ T5823] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 381.575145][ T5823] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 381.593220][ T5823] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 381.604799][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.626769][ T5823] usb 5-1: config 0 descriptor?? [ 381.641301][ T5823] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 381.764746][ T5897] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 381.847874][T17997] ldusb 5-1:0.55: Write buffer overflow, 1819634927 bytes dropped [ 381.859521][ T5823] usb 5-1: USB disconnect, device number 29 [ 381.870395][ T5823] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 381.931533][ T5897] usb 3-1: config index 0 descriptor too short (expected 301, got 72) [ 381.940231][ T5897] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 381.950654][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 381.960578][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 381.974034][ T5897] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.987255][ T5897] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 381.996446][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.217350][ T5897] usb 3-1: usb_control_msg returned -71 [ 382.244512][ T5897] usbtmc 3-1:16.0: can't read capabilities [ 382.276665][ T5897] usb 3-1: USB disconnect, device number 45 [ 382.370909][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 383.034740][ T30] audit: type=1326 audit(1771258013.871:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18042 comm="syz.2.4477" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x0 [ 383.324956][T13113] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 383.468346][T18055] futex_wake_op: syz.3.4481 tries to shift op by 35; fix this program [ 383.479353][T13113] usb 5-1: config 0 has no interfaces? [ 383.495053][T13113] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 383.504179][T13113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.525718][T13113] usb 5-1: config 0 descriptor?? [ 383.738838][T13107] usb 5-1: USB disconnect, device number 30 [ 383.749999][T18063] sctp: [Deprecated]: syz.1.4484 (pid 18063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.749999][T18063] Use struct sctp_sack_info instead [ 385.001180][ T30] audit: type=1326 audit(1771258015.841:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 385.049157][ T30] audit: type=1326 audit(1771258015.841:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 385.094420][ T30] audit: type=1326 audit(1771258015.881:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 385.135385][ T30] audit: type=1326 audit(1771258015.881:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 385.190737][ T30] audit: type=1326 audit(1771258015.881:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 385.224569][ T5897] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 385.264422][ T30] audit: type=1326 audit(1771258015.881:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=400 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 385.305130][ T30] audit: type=1326 audit(1771258015.881:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 385.359067][ T30] audit: type=1326 audit(1771258015.881:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 385.414465][ T30] audit: type=1326 audit(1771258015.891:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=401 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 385.424983][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 385.462702][ T30] audit: type=1326 audit(1771258015.891:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18092 comm="syz.0.4496" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 385.478659][ T5897] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 385.520294][ T5897] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 385.544615][ T5897] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 385.569231][ T5897] usb 4-1: config 1 has no interface number 0 [ 385.584486][ T5897] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.604412][ T5897] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 385.634473][ T5897] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 385.664570][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.690690][ T5897] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 385.719533][T18106] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.899332][ T5897] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 385.974633][T18114] netlink: 'syz.0.4506': attribute type 8 has an invalid length. [ 386.286339][T13111] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 386.362513][ T5897] usb 4-1: USB disconnect, device number 34 [ 386.373598][ T5897] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 386.393342][T18130] input: syz0 as /devices/virtual/input/input40 [ 386.465205][T13111] usb 3-1: Using ep0 maxpacket: 32 [ 386.472699][T13111] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 386.492466][T13111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.513130][T13111] usb 3-1: config 0 descriptor?? [ 386.743610][T13111] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 386.763731][T13111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 386.796973][T13111] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 386.804479][T13111] usb 3-1: media controller created [ 386.829243][T13111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 386.947925][T13111] az6027: usb out operation failed. (-71) [ 386.959847][T13111] az6027: usb out operation failed. (-71) [ 386.975827][T13111] stb0899_attach: Driver disabled by Kconfig [ 386.982142][T13111] az6027: no front-end attached [ 386.982142][T13111] [ 386.998041][T13111] az6027: usb out operation failed. (-71) [ 387.008654][T13111] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 387.023120][T13111] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input41 [ 387.046490][T13111] dvb-usb: schedule remote query interval to 400 msecs. [ 387.064281][T13111] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 387.096351][T13111] usb 3-1: USB disconnect, device number 46 [ 387.132916][ T5832] udevd[5832]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 387.212135][T13111] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 387.584450][T13111] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 387.697241][T13107] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 387.744556][T13111] usb 4-1: Using ep0 maxpacket: 32 [ 387.756467][T13111] usb 4-1: config 0 interface 0 has no altsetting 0 [ 387.774476][T13111] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 387.784853][T13111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.794490][T13111] usb 4-1: Product: syz [ 387.801145][T13111] usb 4-1: Manufacturer: syz [ 387.808615][T13111] usb 4-1: SerialNumber: syz [ 387.811124][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4533'. [ 387.835820][T13111] usb 4-1: config 0 descriptor?? [ 387.877165][T13107] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 387.894664][T13107] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 387.905412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 387.924432][T13107] usb 5-1: config 220 has no interface number 2 [ 387.931101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 387.939865][T13107] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 387.964427][T13107] usb 5-1: config 220 interface 0 has no altsetting 0 [ 387.971399][T13107] usb 5-1: config 220 interface 76 has no altsetting 0 [ 387.984490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 387.993424][T13107] usb 5-1: config 220 interface 1 has no altsetting 0 [ 388.005035][T13107] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 388.024692][T13107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.032850][T13107] usb 5-1: Product: syz [ 388.055213][T13107] usb 5-1: Manufacturer: syz [ 388.064439][T13107] usb 5-1: SerialNumber: syz [ 388.278776][T13111] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 388.302462][T13107] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 388.314479][T13107] uvcvideo 5-1:220.0: No valid video chain found. [ 388.321084][T13107] usb 5-1: selecting invalid altsetting 0 [ 388.343955][T13107] usb 5-1: selecting invalid altsetting 0 [ 388.348427][ C0] hrtimer: interrupt took 225082 ns [ 388.351010][T13107] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 388.376816][T13107] usb 5-1: USB disconnect, device number 31 [ 388.490726][T13111] gs_usb 4-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 388.510307][T13111] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -22 [ 388.700574][ T5823] usb 4-1: USB disconnect, device number 35 [ 389.124499][T13111] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 389.284825][T13111] usb 2-1: Using ep0 maxpacket: 16 [ 389.302845][T13111] usb 2-1: config 0 has no interfaces? [ 389.311663][T13111] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 389.321595][T13111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.334445][T13111] usb 2-1: Product: syz [ 389.338679][T13111] usb 2-1: Manufacturer: syz [ 389.346200][T13111] usb 2-1: SerialNumber: syz [ 389.356911][T13111] usb 2-1: config 0 descriptor?? [ 389.589618][T13113] usb 2-1: USB disconnect, device number 38 [ 389.614454][T13111] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 389.706761][T18216] cgroup: fork rejected by pids controller in /syz4 [ 389.780938][T13111] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 389.794086][T13111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.810234][T13111] usb 3-1: Product: syz [ 389.816492][T13111] usb 3-1: Manufacturer: syz [ 389.821234][T13111] usb 3-1: SerialNumber: syz [ 389.841708][T13111] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 389.931732][T13113] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 390.446970][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 390.710757][T13111] usb 3-1: USB disconnect, device number 47 [ 390.887220][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 390.897896][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 390.906595][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 390.917431][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 390.925398][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 391.123584][ T49] bridge_slave_1: left allmulticast mode [ 391.133890][ T49] bridge_slave_1: left promiscuous mode [ 391.141390][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.168453][ T49] bridge_slave_0: left allmulticast mode [ 391.174182][ T49] bridge_slave_0: left promiscuous mode [ 391.197509][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.275029][T13113] usb 3-1: Service connection timeout for: 256 [ 391.281309][T13113] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 391.334440][T13113] ath9k_htc: Failed to initialize the device [ 391.350932][T13111] usb 3-1: ath9k_htc: USB layer deinitialized [ 391.813152][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.847319][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.878768][ T49] bond0 (unregistering): Released all slaves [ 391.915588][ T49] bond1 (unregistering): Released all slaves [ 391.984138][ T49] bond2 (unregistering): Released all slaves [ 392.198038][ T49] !: left promiscuous mode [ 392.220624][T18268] input: syz1 as /devices/virtual/input/input42 [ 392.384551][ T49] tipc: Disabling bearer [ 392.392334][ T49] tipc: Left network mode [ 392.805249][T18228] chnl_net:caif_netlink_parms(): no params data found [ 393.004519][ T5826] Bluetooth: hci3: command tx timeout [ 393.239646][T18298] netlink: 'syz.2.4579': attribute type 10 has an invalid length. [ 393.307287][T18298] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4579'. [ 393.358344][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.391895][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.413200][ T49] pim6reg (unregistering): left allmulticast mode [ 393.787963][ T49] team0 (unregistering): Port device team_slave_1 removed [ 393.835656][ T49] team0 (unregistering): Port device team_slave_0 removed [ 393.976551][T18321] input: syz1 as /devices/virtual/input/input43 [ 394.274235][T18228] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.303526][T18228] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.324956][T18228] bridge_slave_0: entered allmulticast mode [ 394.336933][T18228] bridge_slave_0: entered promiscuous mode [ 394.359781][T18228] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.375701][T18228] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.393353][T18228] bridge_slave_1: entered allmulticast mode [ 394.423363][T18228] bridge_slave_1: entered promiscuous mode [ 394.556431][T18228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.617413][T18228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.743270][T18228] team0: Port device team_slave_0 added [ 394.797557][T18228] team0: Port device team_slave_1 added [ 394.933706][T18228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.963527][T18228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.999947][T18351] input: syz1 as /devices/virtual/input/input44 [ 395.025831][T18228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.061539][T18228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.074688][ T5823] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 395.079999][T18228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.085416][ T5826] Bluetooth: hci3: command tx timeout [ 395.168405][T18228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.244270][ T49] IPVS: stop unused estimator thread 0... [ 395.293987][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.321296][ T5823] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 395.341285][T18363] erspan0: entered promiscuous mode [ 395.377989][ T5823] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.402955][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.484597][ T5823] usb 2-1: Product: syz [ 395.494440][ T5823] usb 2-1: Manufacturer: syz [ 395.499110][ T5823] usb 2-1: SerialNumber: syz [ 395.573506][T18228] hsr_slave_0: entered promiscuous mode [ 395.597506][T18228] hsr_slave_1: entered promiscuous mode [ 395.623313][T18228] debugfs: 'hsr0' already exists in 'hsr' [ 395.639840][T18228] Cannot create hsr debugfs directory [ 395.769456][T18347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.808106][T18347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.865706][ T5823] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 395.896107][ T5823] usb 2-1: USB disconnect, device number 39 [ 396.384777][ T5823] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 396.547736][ T5823] usb 2-1: config index 0 descriptor too short (expected 301, got 72) [ 396.559875][ T5823] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 396.589905][ T5823] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 396.613936][ T5823] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 396.629319][ T5823] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 396.653792][ T5823] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.670109][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.752532][T18228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 396.770280][T18228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 396.782369][T18228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 396.812668][T18228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 396.831702][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 396.831721][ T30] audit: type=1326 audit(1771258027.661:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18374 comm="syz.2.4604" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7fc00000 [ 396.907675][ T5823] usb 2-1: usb_control_msg returned -71 [ 396.967420][ T5823] usbtmc 2-1:16.0: can't read capabilities [ 397.010156][ T5823] usb 2-1: USB disconnect, device number 40 [ 397.145292][T18228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.165535][ T5826] Bluetooth: hci3: command tx timeout [ 397.202198][T18228] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.240315][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.247684][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.320321][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.327633][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.406841][ T30] audit: type=1326 audit(1771258028.241:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18396 comm="syz.0.4607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 397.430667][T18228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.441684][ T30] audit: type=1326 audit(1771258028.251:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18396 comm="syz.0.4607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 397.559740][T18228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.581920][ T30] audit: type=1326 audit(1771258028.421:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18396 comm="syz.0.4607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=280 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 397.665260][ T30] audit: type=1326 audit(1771258028.421:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18396 comm="syz.0.4607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 397.753487][ T30] audit: type=1326 audit(1771258028.421:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18396 comm="syz.0.4607" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f78f6c code=0x7ffc0000 [ 397.754079][T18228] veth0_vlan: entered promiscuous mode [ 397.908963][T18228] veth1_vlan: entered promiscuous mode [ 397.980150][T18228] veth0_macvtap: entered promiscuous mode [ 398.007159][T18228] veth1_macvtap: entered promiscuous mode [ 398.165735][T18228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.212572][T18228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.285459][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.336568][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.357895][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.423219][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.481648][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4622'. [ 398.638932][ T3585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.659820][ T3585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.779187][T18452] batman_adv: batadv0: Adding interface: ipvlan2 [ 398.799215][T18452] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.845179][T18452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.875216][T18452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.895565][T18452] batman_adv: batadv0: Interface activated: ipvlan2 [ 398.917755][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.934439][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.206117][T18471] usb usb7: usbfs: process 18471 (syz.1.4629) did not claim interface 0 before use [ 399.233823][T18471] usb usb7: usbfs: process 18471 (syz.1.4629) did not claim interface 0 before use [ 399.245942][ T5826] Bluetooth: hci3: command tx timeout [ 400.310121][T18507] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4639'. [ 400.592637][T18520] pimreg: tun_chr_ioctl cmd 21731 [ 401.492289][T18551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4650'. [ 403.657739][T18612] batman_adv: batadv0: Adding interface: ipvlan2 [ 403.677749][T18612] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.749165][T18612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.764107][T18612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.804217][T18612] batman_adv: batadv0: Interface activated: ipvlan2 [ 403.957824][T18620] netlink: 'syz.4.4675': attribute type 2 has an invalid length. [ 404.267295][T18632] netlink: 'syz.1.4682': attribute type 9 has an invalid length. [ 404.280815][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4681'. [ 404.303751][T18632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4682'. [ 404.483721][T18644] kvm_intel: kvm [18641]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 405.018340][T18670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4699'. [ 405.861494][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4713'. [ 405.916253][T18701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4713'. [ 405.956247][T18706] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4716'. [ 406.179706][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4718'. [ 406.420609][T18722] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.476532][T18722] bond3: entered allmulticast mode [ 406.485609][T18722] bond0: (slave bond3): Enslaving as an active interface with a down link [ 406.946003][T18742] bridge0: entered promiscuous mode [ 406.974613][T18742] macvlan2: entered promiscuous mode [ 407.234472][ T5897] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 407.397533][ T5897] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 407.424857][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.435872][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.447156][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.455777][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.476994][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.494777][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.511697][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.524561][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.538835][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.550540][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.561712][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.573461][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.581758][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.613546][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.644566][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.659253][T13107] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 407.663984][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.680667][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.713784][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.722072][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.734448][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.775228][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.783632][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.802075][ T5897] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.821228][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0 [ 407.836511][T13107] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.845287][ T5897] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 407.845318][ T5897] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 407.845339][ T5897] usb 4-1: Product: syz [ 407.845355][ T5897] usb 4-1: Manufacturer: syz [ 407.845371][ T5897] usb 4-1: SerialNumber: syz [ 407.875490][ T5897] usb 4-1: config 0 descriptor?? [ 407.911505][ T5897] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 407.954800][T13107] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 407.971890][T13107] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.983936][T13107] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 407.995202][T13107] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 408.024557][T13107] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 408.036640][T13107] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 408.045000][T13107] usb 5-1: Product: syz [ 408.049445][T13107] usb 5-1: Manufacturer: syz [ 408.062804][T13107] cdc_wdm 5-1:1.0: skipping garbage [ 408.073020][T13107] cdc_wdm 5-1:1.0: skipping garbage [ 408.082940][T13107] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 408.089471][T13107] cdc_wdm 5-1:1.0: Unknown control protocol [ 408.196171][ C0] usb 4-1: yurex_control_callback - control failed: -71 [ 408.206251][ T5897] usb 4-1: USB disconnect, device number 36 [ 408.222648][ T5897] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 408.272381][ T5823] usb 5-1: USB disconnect, device number 32 [ 408.890482][T18809] netlink: 'syz.4.4762': attribute type 1 has an invalid length. [ 408.898807][T18809] netlink: 'syz.4.4762': attribute type 2 has an invalid length. [ 408.907070][T18809] netlink: 'syz.4.4762': attribute type 1 has an invalid length. [ 408.915399][T18809] netlink: 'syz.4.4762': attribute type 3 has an invalid length. [ 408.923163][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4762'. [ 410.279637][T18855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4782'. [ 410.317866][T18855] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4782'. [ 410.548861][T18869] netlink: 'syz.2.4789': attribute type 3 has an invalid length. [ 410.557979][T18869] netlink: 776 bytes leftover after parsing attributes in process `syz.2.4789'. [ 410.661403][ T30] audit: type=1326 audit(1771258041.501:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18874 comm="syz.2.4791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 410.684071][ T30] audit: type=1326 audit(1771258041.501:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18874 comm="syz.2.4791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 410.708609][ T30] audit: type=1326 audit(1771258041.551:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18874 comm="syz.2.4791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 410.732860][ T30] audit: type=1326 audit(1771258041.551:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18874 comm="syz.2.4791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 410.755722][ T30] audit: type=1326 audit(1771258041.551:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18874 comm="syz.2.4791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 410.778636][ T30] audit: type=1326 audit(1771258041.571:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18874 comm="syz.2.4791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=177 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 410.900839][ T30] audit: type=1326 audit(1771258041.641:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18874 comm="syz.2.4791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 410.939728][ T30] audit: type=1326 audit(1771258041.641:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18874 comm="syz.2.4791" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f35f6c code=0x7ffc0000 [ 411.077951][T18886] cifs: Unknown parameter 'fd' [ 411.245115][T13107] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 411.264991][T13111] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 411.275365][T18899] netlink: 'syz.0.4802': attribute type 3 has an invalid length. [ 411.412805][T13107] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 411.422546][T13111] usb 2-1: Using ep0 maxpacket: 8 [ 411.427677][T13107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.437694][T13107] usb 4-1: Product: syz [ 411.442464][T13107] usb 4-1: Manufacturer: syz [ 411.447375][T13111] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 411.457222][T13107] usb 4-1: SerialNumber: syz [ 411.463656][T13111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.473122][T13107] usb 4-1: config 0 descriptor?? [ 411.478382][T13113] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 411.499819][T13107] gspca_main: sq930x-2.14.0 probing 2770:930c [ 411.511076][T13111] pvrusb2: Hardware description: Terratec Grabster AV400 [ 411.526098][T13111] pvrusb2: ********** [ 411.530237][T13111] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 411.541411][T13111] pvrusb2: Important functionality might not be entirely working. [ 411.549652][T13111] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 411.562710][T13111] pvrusb2: ********** [ 411.638457][T13113] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 411.659640][T13113] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.668573][T13113] usb 3-1: Product: syz [ 411.673198][T13113] usb 3-1: Manufacturer: syz [ 411.678303][T13113] usb 3-1: SerialNumber: syz [ 411.680550][T18906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4805'. [ 411.692338][T18906] netlink: 'syz.4.4805': attribute type 18 has an invalid length. [ 411.701823][T13113] usb 3-1: config 0 descriptor?? [ 411.709905][T18906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4805'. [ 411.727520][T13113] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 411.737823][ T2346] pvrusb2: Invalid write control endpoint [ 411.829592][ T2346] pvrusb2: Invalid write control endpoint [ 411.838317][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 411.849887][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 411.860855][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 411.871514][ T2346] pvrusb2: Device being rendered inoperable [ 411.881383][ T2346] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 411.889212][ T2346] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 411.903299][ T2346] pvrusb2: Attached sub-driver cx25840 [ 411.915407][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 411.926735][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 411.958545][ T5897] usb 2-1: USB disconnect, device number 41 [ 412.186877][T18916] netlink: 'syz.4.4809': attribute type 3 has an invalid length. [ 412.194926][T18916] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4809'. [ 412.313199][T13107] gspca_sq930x: ucbus_write failed -71 [ 412.544441][T13107] gspca_sq930x: Sensor ov9630 not yet treated [ 412.550670][T13107] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 412.576497][T13115] usb 3-1: USB disconnect, device number 48 [ 412.583646][T13107] usb 4-1: USB disconnect, device number 37 [ 413.833423][ C1] sd 0:0:1:0: [sda] tag#4754 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 413.843994][ C1] sd 0:0:1:0: [sda] tag#4754 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 413.924431][T13115] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 414.084923][T13115] usb 2-1: Using ep0 maxpacket: 8 [ 414.096181][T13115] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.114821][T13115] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.125007][T13115] usb 2-1: config 0 interface 0 has no altsetting 0 [ 414.131674][T13115] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 414.151966][T13115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.166806][T13115] usb 2-1: config 0 descriptor?? [ 414.294413][ T5823] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 414.474201][ T5823] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 414.495427][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.503629][ T5823] usb 4-1: Product: syz [ 414.508414][ T5823] usb 4-1: Manufacturer: syz [ 414.513054][ T5823] usb 4-1: SerialNumber: syz [ 414.527731][ T5823] usb 4-1: config 0 descriptor?? [ 414.547158][ T5823] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 414.600569][T13115] hid_parser_main: 28 callbacks suppressed [ 414.600596][T13115] ntrig 0003:1B96:0004.0027: unknown main item tag 0x0 [ 414.627130][T13115] ntrig 0003:1B96:0004.0027: unknown main item tag 0x0 [ 414.634100][T13115] ntrig 0003:1B96:0004.0027: unknown main item tag 0x0 [ 414.658259][T13115] ntrig 0003:1B96:0004.0027: unknown main item tag 0x0 [ 414.666400][T13115] ntrig 0003:1B96:0004.0027: unknown main item tag 0x0 [ 414.685252][T13115] ntrig 0003:1B96:0004.0027: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.1-1/input0 [ 414.724744][T18991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4842'. [ 414.817577][T13115] ntrig 0003:1B96:0004.0027: Firmware version: 1.9.21.44.7 (6673 8fb5) [ 414.995394][T19000] netlink: 'syz.0.4846': attribute type 32 has an invalid length. [ 415.009619][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4846'. [ 415.053351][T13115] usb 2-1: USB disconnect, device number 42 [ 415.136093][T19000] bond1: option coupled_control: invalid value (170) [ 415.168604][T19000] bond1 (unregistering): Released all slaves [ 415.368261][ T5823] gspca_sunplus: reg_r err -71 [ 415.373232][ T5823] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 415.408487][ T5823] usb 4-1: USB disconnect, device number 38 [ 416.118317][T19044] netlink: 'syz.3.4863': attribute type 21 has an invalid length. [ 417.358185][T19121] macsec2: entered promiscuous mode [ 417.414560][T13115] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 417.576988][T13115] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 417.594577][T13115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.610021][T13115] usb 2-1: config 0 descriptor?? [ 417.784621][T13107] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 417.844581][T13115] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 417.956354][T13107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.968754][T13107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.981109][T13107] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 417.990838][T13107] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 417.999935][T13107] usb 4-1: Manufacturer: syz [ 418.010083][T13107] usb 4-1: config 0 descriptor?? [ 418.054745][T13113] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 418.099037][T13115] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 418.106142][T13115] [drm] Initialized udl on minor 2 [ 418.134503][T13111] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 418.234689][T13113] usb 5-1: Using ep0 maxpacket: 8 [ 418.241877][T13113] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 418.253080][T13113] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.263595][T13113] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.275038][T13113] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.285766][T13113] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.300377][T13113] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 418.311305][T13111] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.320128][T13113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.328745][T13111] usb 3-1: config 0 has no interface number 0 [ 418.344064][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4893'. [ 418.349209][T13111] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 418.381020][T13111] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 418.392803][T13111] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 418.402647][T13111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.431842][T13111] usb 3-1: config 0 descriptor?? [ 418.444897][T19141] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 418.458038][T13115] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 418.496662][T13115] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 418.508234][T13111] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 418.531657][T13112] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 418.547465][T13113] usb 5-1: GET_CAPABILITIES returned 0 [ 418.553399][T13115] usb 2-1: USB disconnect, device number 43 [ 418.563259][T13113] usbtmc 5-1:16.0: can't read capabilities [ 418.571531][T13112] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 418.698074][T13113] usb 3-1: USB disconnect, device number 49 [ 418.752348][ T5823] usb 5-1: USB disconnect, device number 33 [ 418.839897][T13107] uclogic 0003:256C:006D.0028: failed retrieving Huion firmware version: -71 [ 418.851562][T13107] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 418.860861][T13107] uclogic 0003:256C:006D.0028: probe with driver uclogic failed with error -71 [ 418.876480][T13107] usb 4-1: USB disconnect, device number 39 [ 419.838808][T19179] misc userio: Can't change port type on an already running userio instance [ 420.922277][T19219] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.4925'. [ 421.240537][T19230] netlink: 'syz.1.4930': attribute type 5 has an invalid length. [ 421.262536][T19230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4930'. [ 421.272217][T19230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4930'. [ 423.536403][ T30] audit: type=1326 audit(1771258054.381:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19300 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 423.607058][ T30] audit: type=1326 audit(1771258054.381:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19300 comm="syz.4.4963" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701ef6c code=0x7ffc0000 [ 424.123718][T19327] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4973'. [ 424.534471][T13113] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 424.716680][T13113] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 424.747070][T13113] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 424.770040][T13113] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 424.790574][T13113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.821942][T19331] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 424.848355][T13113] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 425.135206][T13113] usb 5-1: USB disconnect, device number 34 [ 425.201795][T19364] autofs4:pid:19364:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1803188595.1701604449), cmd(0xc0189371) [ 425.255009][T19364] autofs4:pid:19364:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189371) [ 428.158328][T19465] input: syz0 as /devices/virtual/input/input46 [ 428.420895][T19477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5038'. [ 428.462359][T19477] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5038'. [ 428.487010][T19477] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5038'. [ 428.506379][T19482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5040'. [ 429.204638][ T5823] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 429.366252][ T5823] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 429.375123][ T5823] usb 4-1: config 0 has no interface number 1 [ 429.381290][ T5823] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 429.412981][ T5823] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 429.439729][ T5823] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 429.451748][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 429.468755][ T5823] usb 4-1: SerialNumber: syz [ 429.479035][ T5823] usb 4-1: config 0 descriptor?? [ 429.699108][ T5823] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 429.715607][ T5823] uvcvideo 4-1:0.199: No valid video chain found. [ 429.942799][T13115] usb 4-1: USB disconnect, device number 40 [ 430.064413][T13113] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 430.224430][T13113] usb 5-1: Using ep0 maxpacket: 16 [ 430.235484][T13113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.254484][T13113] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 430.264833][T13113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.286188][T13113] usb 5-1: config 0 descriptor?? [ 430.334432][T13115] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 430.515373][T13115] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.544759][T13115] usb 2-1: config 0 interface 0 has no altsetting 0 [ 430.551596][T13115] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 430.568464][T13115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.590777][T13115] usb 2-1: config 0 descriptor?? [ 430.669488][T19554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5071'. [ 430.752375][T13113] mcp2221 0003:04D8:00DD.0029: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 431.054826][T13115] playstation 0003:054C:0BA0.002A: unknown main item tag 0x0 [ 431.062414][T13115] playstation 0003:054C:0BA0.002A: unknown main item tag 0x0 [ 431.105881][T13115] playstation 0003:054C:0BA0.002A: unknown main item tag 0x0 [ 431.134692][T13115] playstation 0003:054C:0BA0.002A: hidraw0: USB HID v0.03 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 431.194825][T13113] usb 5-1: USB disconnect, device number 35 [ 431.282276][T13115] playstation 0003:054C:0BA0.002A: Invalid reportID received, expected 18 got 15 [ 431.296172][T13115] playstation 0003:054C:0BA0.002A: Failed to retrieve DualShock4 pairing info: -22 [ 431.317596][T13115] playstation 0003:054C:0BA0.002A: Failed to get MAC address from DualShock4 [ 431.326857][T13115] playstation 0003:054C:0BA0.002A: Failed to create dualshock4. [ 431.342606][T13115] playstation 0003:054C:0BA0.002A: probe with driver playstation failed with error -22 [ 431.518799][T13113] usb 2-1: USB disconnect, device number 44 [ 431.906496][T19591] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5087'. [ 431.916945][T19591] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 432.180890][ T30] audit: type=1326 audit(1771258063.021:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.1.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f6c code=0x7ffc0000 [ 432.208570][ T30] audit: type=1326 audit(1771258063.021:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.1.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f6c code=0x7ffc0000 [ 432.234626][ T30] audit: type=1326 audit(1771258063.051:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.1.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7fe3f6c code=0x7ffc0000 [ 432.277540][ T30] audit: type=1326 audit(1771258063.051:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.1.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f6c code=0x7ffc0000 [ 432.328690][ T30] audit: type=1326 audit(1771258063.051:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.1.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f6c code=0x7ffc0000 [ 432.351394][ T30] audit: type=1326 audit(1771258063.051:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.1.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7fe3f6c code=0x7ffc0000 [ 432.375377][ T30] audit: type=1326 audit(1771258063.051:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.1.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f6c code=0x7ffc0000 [ 432.398212][ T30] audit: type=1326 audit(1771258063.061:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.1.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f6c code=0x7ffc0000 [ 432.422002][ T30] audit: type=1326 audit(1771258063.071:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.1.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf7fe3f6c code=0x7ffc0000 [ 432.484633][ T30] audit: type=1326 audit(1771258063.101:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19604 comm="syz.1.5093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe3f6c code=0x7ffc0000 [ 432.581240][T19614] tun0: tun_chr_ioctl cmd 35108 [ 432.911248][T19622] sctp: [Deprecated]: syz.4.5101 (pid 19622) Use of int in maxseg socket option. [ 432.911248][T19622] Use struct sctp_assoc_value instead [ 433.160434][T19637] netlink: 'syz.1.5108': attribute type 6 has an invalid length. [ 434.812213][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5135'. [ 434.821512][T19700] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5135'. [ 434.831953][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5135'. [ 435.621684][T19742] input: syz1 as /devices/virtual/input/input47 [ 435.704774][ T5823] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 435.877433][ T5823] usb 3-1: Using ep0 maxpacket: 16 [ 435.885081][ T5823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.904049][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 435.944453][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 435.958973][ T5823] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 435.983132][ T5823] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.006639][ T5823] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 436.025125][ T5823] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 436.043803][ T5823] usb 3-1: Manufacturer: syz [ 436.060199][ T5823] usb 3-1: config 0 descriptor?? [ 436.402113][ T5823] rc_core: IR keymap rc-hauppauge not found [ 436.408396][ T5823] Registered IR keymap rc-empty [ 436.415977][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.434523][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.455980][ T5823] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 436.484942][ T5823] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input48 [ 436.517602][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.554548][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.584559][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.614640][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.634533][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.654912][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.684592][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.704507][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.724984][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.745478][ T5823] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 436.779649][ T5823] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 436.803005][ T5823] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 436.818416][T19768] input: syz0 as /devices/virtual/input/input49 [ 436.846662][ T5823] usb 3-1: USB disconnect, device number 50 [ 436.927560][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 437.375765][T19787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5172'. [ 437.630606][T19800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5178'. [ 437.944167][T19814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5186'. [ 437.995078][T19814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5186'. [ 439.444438][T13112] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 439.560319][T19871] input: syz1 as /devices/virtual/input/input52 [ 439.616259][T13112] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.630911][T13112] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.658637][T13112] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.698669][T13112] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.714872][T13112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.738373][T13112] usb 5-1: config 0 descriptor?? [ 439.903683][T19880] [ 439.906079][T19880] ===================================================== [ 439.913040][T19880] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 439.920547][T19880] syzkaller #0 Tainted: G L [ 439.926563][T19880] ----------------------------------------------------- [ 439.933524][T19880] syz.2.5215/19880 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 439.941275][T19880] ffffffff8e40c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 439.949955][T19880] [ 439.949955][T19880] and this task is already holding: [ 439.957349][T19880] ffff888034f85da0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 439.966033][T19880] which would create a new lock dependency: [ 439.971966][T19880] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 439.979600][T19880] [ 439.979600][T19880] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 439.989098][T19880] (&dev->event_lock#2){..-.}-{3:3} [ 439.989154][T19880] [ 439.989154][T19880] ... which became SOFTIRQ-irq-safe at: [ 440.002100][T19880] lock_acquire+0xf0/0x2e0 [ 440.006658][T19880] _raw_spin_lock_irqsave+0x40/0x60 [ 440.011991][T19880] input_event+0x76/0xe0 [ 440.016361][T19880] atp_complete_geyser_3_4+0xf0c/0x1d90 [ 440.022033][T19880] __usb_hcd_giveback_urb+0x376/0x540 [ 440.027584][T19880] dummy_timer+0xbbd/0x45d0 [ 440.032220][T19880] __hrtimer_run_queues+0x53a/0xcc0 [ 440.037557][T19880] hrtimer_run_softirq+0x182/0x5a0 [ 440.042810][T19880] handle_softirqs+0x22a/0x870 [ 440.046047][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.047708][T19880] __irq_exit_rcu+0x5f/0x150 [ 440.047741][T19880] irq_exit_rcu+0x9/0x30 [ 440.054181][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.058689][T19880] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 440.058716][T19880] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 440.058738][T19880] _raw_spin_unlock_irqrestore+0x47/0x80 [ 440.086898][T19880] dummy_urb_enqueue+0x58a/0x780 [ 440.091977][T19880] usb_hcd_submit_urb+0x328/0x1b70 [ 440.097226][T19880] atp_open+0x60/0x90 [ 440.101339][T19880] input_open_device+0x1f8/0x3b0 [ 440.106414][T19880] mousedev_open_device+0xcc/0x150 [ 440.111658][T19880] mousedev_open+0x2ef/0x4a0 [ 440.116377][T19880] chrdev_open+0x4cd/0x5e0 [ 440.120922][T19880] do_dentry_open+0x785/0x14e0 [ 440.125820][T19880] vfs_open+0x3b/0x340 [ 440.130023][T19880] path_openat+0x2e08/0x3860 [ 440.134755][T19880] do_file_open+0x23e/0x4a0 [ 440.139399][T19880] do_sys_openat2+0x113/0x200 [ 440.144204][T19880] __x64_sys_openat+0x138/0x170 [ 440.149185][T19880] do_syscall_64+0x14d/0xf80 [ 440.153910][T19880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.159932][T19880] [ 440.159932][T19880] to a SOFTIRQ-irq-unsafe lock: [ 440.166985][T19880] (tasklist_lock){.+.+}-{3:3} [ 440.167028][T19880] [ 440.167028][T19880] ... which became SOFTIRQ-irq-unsafe at: [ 440.179710][T19880] ... [ 440.179725][T19880] lock_acquire+0xf0/0x2e0 [ 440.186882][T19880] _raw_read_lock+0x36/0x50 [ 440.191536][T19880] __do_wait+0xde/0x740 [ 440.195818][T19880] do_wait+0x1e7/0x540 [ 440.200027][T19880] kernel_wait+0xd6/0x1c0 [ 440.204507][T19880] call_usermodehelper_exec_work+0xbe/0x230 [ 440.210524][T19880] process_scheduled_works+0xb02/0x1830 [ 440.216204][T19880] worker_thread+0xa50/0xfc0 [ 440.220924][T19880] kthread+0x388/0x470 [ 440.225120][T19880] ret_from_fork+0x51e/0xb90 [ 440.229841][T19880] ret_from_fork_asm+0x1a/0x30 [ 440.234754][T19880] [ 440.234754][T19880] other info that might help us debug this: [ 440.234754][T19880] [ 440.245031][T19880] Chain exists of: [ 440.245031][T19880] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 440.245031][T19880] [ 440.258165][T19880] Possible interrupt unsafe locking scenario: [ 440.258165][T19880] [ 440.266564][T19880] CPU0 CPU1 [ 440.271967][T19880] ---- ---- [ 440.277376][T19880] lock(tasklist_lock); [ 440.281690][T19880] local_irq_disable(); [ 440.288477][T19880] lock(&dev->event_lock#2); [ 440.295736][T19880] lock(&f_owner->lock); [ 440.302627][T19880] [ 440.306127][T19880] lock(&dev->event_lock#2); [ 440.311034][T19880] [ 440.311034][T19880] *** DEADLOCK *** [ 440.311034][T19880] [ 440.319224][T19880] 5 locks held by syz.2.5215/19880: [ 440.324456][T19880] #0: ffff8880711de420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 440.333677][T19880] #1: ffff88807dd65068 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0xb4c/0x3860 [ 440.343944][T19880] #2: ffffffff9a2e00f8 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x74c/0x1ae0 [ 440.353571][T19880] #3: ffff88805a164678 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 440.363269][T19880] #4: ffff888034f85da0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 440.372367][T19880] [ 440.372367][T19880] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 440.382805][T19880] -> (&dev->event_lock#2){..-.}-{3:3} { [ 440.388671][T19880] IN-SOFTIRQ-W at: [ 440.392942][T19880] lock_acquire+0xf0/0x2e0 [ 440.399571][T19880] _raw_spin_lock_irqsave+0x40/0x60 [ 440.406977][T19880] input_event+0x76/0xe0 [ 440.413421][T19880] atp_complete_geyser_3_4+0xf0c/0x1d90 [ 440.421165][T19880] __usb_hcd_giveback_urb+0x376/0x540 [ 440.428742][T19880] dummy_timer+0xbbd/0x45d0 [ 440.435492][T19880] __hrtimer_run_queues+0x53a/0xcc0 [ 440.442904][T19880] hrtimer_run_softirq+0x182/0x5a0 [ 440.450213][T19880] handle_softirqs+0x22a/0x870 [ 440.457179][T19880] __irq_exit_rcu+0x5f/0x150 [ 440.463964][T19880] irq_exit_rcu+0x9/0x30 [ 440.470403][T19880] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 440.478239][T19880] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 440.486409][T19880] _raw_spin_unlock_irqrestore+0x47/0x80 [ 440.494249][T19880] dummy_urb_enqueue+0x58a/0x780 [ 440.501397][T19880] usb_hcd_submit_urb+0x328/0x1b70 [ 440.508715][T19880] atp_open+0x60/0x90 [ 440.514892][T19880] input_open_device+0x1f8/0x3b0 [ 440.522035][T19880] mousedev_open_device+0xcc/0x150 [ 440.529387][T19880] mousedev_open+0x2ef/0x4a0 [ 440.536181][T19880] chrdev_open+0x4cd/0x5e0 [ 440.542792][T19880] do_dentry_open+0x785/0x14e0 [ 440.549755][T19880] vfs_open+0x3b/0x340 [ 440.556020][T19880] path_openat+0x2e08/0x3860 [ 440.562827][T19880] do_file_open+0x23e/0x4a0 [ 440.569538][T19880] do_sys_openat2+0x113/0x200 [ 440.576413][T19880] __x64_sys_openat+0x138/0x170 [ 440.583458][T19880] do_syscall_64+0x14d/0xf80 [ 440.590237][T19880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.598319][T19880] INITIAL USE at: [ 440.602486][T19880] lock_acquire+0xf0/0x2e0 [ 440.609017][T19880] _raw_spin_lock_irqsave+0x40/0x60 [ 440.616343][T19880] input_inject_event+0xa5/0x340 [ 440.623387][T19880] kbd_led_trigger_activate+0xbc/0x100 [ 440.630961][T19880] led_trigger_set+0x535/0x960 [ 440.637833][T19880] led_trigger_set_default+0x260/0x2a0 [ 440.645406][T19880] led_classdev_register_ext+0x787/0x9c0 [ 440.653147][T19880] input_leds_connect+0x517/0x790 [ 440.660288][T19880] input_register_device+0xd00/0x1160 [ 440.667778][T19880] atkbd_connect+0x731/0xa50 [ 440.674485][T19880] serio_driver_probe+0x82/0xd0 [ 440.681458][T19880] really_probe+0x267/0xaf0 [ 440.688093][T19880] __driver_probe_device+0x18c/0x320 [ 440.695503][T19880] driver_probe_device+0x4f/0x240 [ 440.702647][T19880] __driver_attach+0x3e7/0x710 [ 440.709527][T19880] bus_for_each_dev+0x23b/0x2c0 [ 440.716482][T19880] serio_handle_event+0x20a/0xdd0 [ 440.723619][T19880] process_scheduled_works+0xb02/0x1830 [ 440.731272][T19880] worker_thread+0xa50/0xfc0 [ 440.737975][T19880] kthread+0x388/0x470 [ 440.744150][T19880] ret_from_fork+0x51e/0xb90 [ 440.750851][T19880] ret_from_fork_asm+0x1a/0x30 [ 440.757733][T19880] } [ 440.760507][T19880] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 440.769819][T19880] -> (&client->buffer_lock){....}-{3:3} { [ 440.775752][T19880] INITIAL USE at: [ 440.779834][T19880] lock_acquire+0xf0/0x2e0 [ 440.786188][T19880] _raw_spin_lock+0x2e/0x40 [ 440.792634][T19880] evdev_pass_values+0xb9/0xbd0 [ 440.799423][T19880] evdev_events+0x1e6/0x340 [ 440.805870][T19880] input_pass_values+0x288/0x890 [ 440.812744][T19880] input_event_dispose+0x330/0x6b0 [ 440.819797][T19880] input_inject_event+0x1dd/0x340 [ 440.826757][T19880] evdev_write+0x325/0x4c0 [ 440.833106][T19880] vfs_write+0x29a/0xb90 [ 440.839294][T19880] ksys_write+0x150/0x270 [ 440.845568][T19880] __do_fast_syscall_32+0x20d/0x640 [ 440.852702][T19880] do_fast_syscall_32+0x33/0x70 [ 440.859502][T19880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.867764][T19880] } [ 440.870452][T19880] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 440.878808][T19880] ... acquired at: [ 440.882801][T19880] _raw_spin_lock+0x2e/0x40 [ 440.887522][T19880] evdev_pass_values+0xb9/0xbd0 [ 440.892573][T19880] evdev_events+0x1e6/0x340 [ 440.897274][T19880] input_pass_values+0x288/0x890 [ 440.902413][T19880] input_event_dispose+0x330/0x6b0 [ 440.907724][T19880] input_inject_event+0x1dd/0x340 [ 440.912945][T19880] evdev_write+0x325/0x4c0 [ 440.917559][T19880] vfs_write+0x29a/0xb90 [ 440.922011][T19880] ksys_write+0x150/0x270 [ 440.926548][T19880] __do_fast_syscall_32+0x20d/0x640 [ 440.931940][T19880] do_fast_syscall_32+0x33/0x70 [ 440.936984][T19880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 440.943514][T19880] [ 440.945858][T19880] -> (&new->fa_lock){....}-{3:3} { [ 440.951101][T19880] INITIAL USE at: [ 440.955108][T19880] lock_acquire+0xf0/0x2e0 [ 440.961302][T19880] _raw_write_lock_irq+0x3d/0x50 [ 440.968012][T19880] fasync_remove_entry+0xf1/0x1c0 [ 440.974812][T19880] lease_modify+0x4f7/0x6c0 [ 440.981080][T19880] locks_remove_file+0x5f0/0xf70 [ 440.987784][T19880] __fput+0x3ae/0xa70 [ 440.993531][T19880] task_work_run+0x1d9/0x270 [ 440.999884][T19880] exit_to_user_mode_loop+0xed/0x480 [ 441.006936][T19880] __do_fast_syscall_32+0x415/0x640 [ 441.013893][T19880] do_fast_syscall_32+0x33/0x70 [ 441.020508][T19880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.028606][T19880] INITIAL READ USE at: [ 441.033051][T19880] lock_acquire+0xf0/0x2e0 [ 441.039683][T19880] _raw_read_lock_irqsave+0x48/0x60 [ 441.047096][T19880] kill_fasync+0x199/0x4d0 [ 441.053716][T19880] sock_wake_async+0x137/0x160 [ 441.060684][T19880] sock_def_readable+0x3c1/0x580 [ 441.067820][T19880] netlink_sendskb+0xa1/0x140 [ 441.074716][T19880] netlink_unicast+0x3a3/0x9b0 [ 441.081691][T19880] netlink_rcv_skb+0x2b6/0x4b0 [ 441.088660][T19880] netlink_unicast+0x80f/0x9b0 [ 441.095619][T19880] netlink_sendmsg+0x813/0xb40 [ 441.102586][T19880] ____sys_sendmsg+0xa68/0xad0 [ 441.109544][T19880] ___sys_sendmsg+0x2a5/0x360 [ 441.116413][T19880] __sys_sendmsg+0x183/0x260 [ 441.123209][T19880] __do_fast_syscall_32+0x20d/0x640 [ 441.130609][T19880] do_fast_syscall_32+0x33/0x70 [ 441.137681][T19880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.146223][T19880] } [ 441.148844][T19880] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 441.157637][T19880] ... acquired at: [ 441.161564][T19880] _raw_read_lock_irqsave+0x48/0x60 [ 441.166990][T19880] kill_fasync+0x199/0x4d0 [ 441.171631][T19880] evdev_pass_values+0x627/0xbd0 [ 441.176777][T19880] evdev_events+0x1e6/0x340 [ 441.181493][T19880] input_pass_values+0x288/0x890 [ 441.186650][T19880] input_event_dispose+0x330/0x6b0 [ 441.191977][T19880] input_inject_event+0x1dd/0x340 [ 441.197227][T19880] evdev_write+0x325/0x4c0 [ 441.201855][T19880] vfs_write+0x29a/0xb90 [ 441.206309][T19880] ksys_write+0x150/0x270 [ 441.210852][T19880] __do_fast_syscall_32+0x20d/0x640 [ 441.216265][T19880] do_fast_syscall_32+0x33/0x70 [ 441.221333][T19880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.227864][T19880] [ 441.230205][T19880] -> (&f_owner->lock){....}-{3:3} { [ 441.235442][T19880] INITIAL USE at: [ 441.239353][T19880] lock_acquire+0xf0/0x2e0 [ 441.245368][T19880] _raw_write_lock_irq+0x3d/0x50 [ 441.251896][T19880] __f_setown+0x67/0x370 [ 441.257737][T19880] fcntl_dirnotify+0x3f9/0x6a0 [ 441.264083][T19880] do_fcntl+0x77e/0x1a20 [ 441.269903][T19880] do_compat_fcntl64+0x51e/0x7e0 [ 441.276434][T19880] __do_fast_syscall_32+0x20d/0x640 [ 441.283254][T19880] do_fast_syscall_32+0x33/0x70 [ 441.289693][T19880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.297610][T19880] INITIAL READ USE at: [ 441.301960][T19880] lock_acquire+0xf0/0x2e0 [ 441.308402][T19880] _raw_read_lock_irqsave+0x48/0x60 [ 441.315635][T19880] send_sigio+0x38/0x370 [ 441.321907][T19880] dnotify_handle_event+0x169/0x440 [ 441.329128][T19880] fsnotify+0x1831/0x1ae0 [ 441.335483][T19880] fsnotify_xattr+0x1a3/0x200 [ 441.342202][T19880] vfs_fileattr_set+0xa34/0xc90 [ 441.349091][T19880] ioctl_fssetxattr+0x21a/0x290 [ 441.355988][T19880] do_vfs_ioctl+0x900/0x1530 [ 441.362607][T19880] __ia32_compat_sys_ioctl+0x572/0x950 [ 441.370089][T19880] __do_fast_syscall_32+0x20d/0x640 [ 441.377310][T19880] do_fast_syscall_32+0x33/0x70 [ 441.384184][T19880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.392536][T19880] } [ 441.395047][T19880] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 441.403914][T19880] ... acquired at: [ 441.407735][T19880] _raw_read_lock_irqsave+0x48/0x60 [ 441.413144][T19880] send_sigio+0x38/0x370 [ 441.417595][T19880] kill_fasync+0x24d/0x4d0 [ 441.422226][T19880] lease_break_callback+0x26/0x30 [ 441.427479][T19880] __break_lease+0x81c/0x1e80 [ 441.432366][T19880] vfs_truncate+0x449/0x540 [ 441.437067][T19880] do_sys_truncate+0xf3/0x1c0 [ 441.441946][T19880] __ia32_compat_sys_truncate+0x5b/0x70 [ 441.447728][T19880] __do_fast_syscall_32+0x20d/0x640 [ 441.453128][T19880] do_fast_syscall_32+0x33/0x70 [ 441.458176][T19880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.464720][T19880] [ 441.467064][T19880] [ 441.467064][T19880] the dependencies between the lock to be acquired [ 441.467074][T19880] and SOFTIRQ-irq-unsafe lock: [ 441.480621][T19880] -> (tasklist_lock){.+.+}-{3:3} { [ 441.485782][T19880] HARDIRQ-ON-R at: [ 441.489782][T19880] lock_acquire+0xf0/0x2e0 [ 441.495879][T19880] _raw_read_lock+0x36/0x50 [ 441.502072][T19880] __do_wait+0xde/0x740 [ 441.507903][T19880] do_wait+0x1e7/0x540 [ 441.513640][T19880] kernel_wait+0xd6/0x1c0 [ 441.519640][T19880] call_usermodehelper_exec_work+0xbe/0x230 [ 441.527248][T19880] process_scheduled_works+0xb02/0x1830 [ 441.534476][T19880] worker_thread+0xa50/0xfc0 [ 441.540743][T19880] kthread+0x388/0x470 [ 441.546480][T19880] ret_from_fork+0x51e/0xb90 [ 441.552756][T19880] ret_from_fork_asm+0x1a/0x30 [ 441.559202][T19880] SOFTIRQ-ON-R at: [ 441.563205][T19880] lock_acquire+0xf0/0x2e0 [ 441.569301][T19880] _raw_read_lock+0x36/0x50 [ 441.575504][T19880] __do_wait+0xde/0x740 [ 441.581329][T19880] do_wait+0x1e7/0x540 [ 441.587105][T19880] kernel_wait+0xd6/0x1c0 [ 441.593113][T19880] call_usermodehelper_exec_work+0xbe/0x230 [ 441.600707][T19880] process_scheduled_works+0xb02/0x1830 [ 441.607943][T19880] worker_thread+0xa50/0xfc0 [ 441.614216][T19880] kthread+0x388/0x470 [ 441.619951][T19880] ret_from_fork+0x51e/0xb90 [ 441.626229][T19880] ret_from_fork_asm+0x1a/0x30 [ 441.632683][T19880] INITIAL USE at: [ 441.636595][T19880] lock_acquire+0xf0/0x2e0 [ 441.642605][T19880] _raw_write_lock_irq+0x3d/0x50 [ 441.649128][T19880] copy_process+0x247a/0x3cf0 [ 441.655396][T19880] kernel_clone+0x248/0x8e0 [ 441.661531][T19880] user_mode_thread+0x110/0x180 [ 441.667985][T19880] rest_init+0x23/0x300 [ 441.673749][T19880] start_kernel+0x385/0x3d0 [ 441.679840][T19880] x86_64_start_reservations+0x24/0x30 [ 441.687001][T19880] x86_64_start_kernel+0x143/0x1c0 [ 441.693707][T19880] common_startup_64+0x13e/0x147 [ 441.700227][T19880] INITIAL READ USE at: [ 441.704579][T19880] lock_acquire+0xf0/0x2e0 [ 441.711019][T19880] _raw_read_lock+0x36/0x50 [ 441.717554][T19880] __do_wait+0xde/0x740 [ 441.723728][T19880] do_wait+0x1e7/0x540 [ 441.729827][T19880] kernel_wait+0xd6/0x1c0 [ 441.736186][T19880] call_usermodehelper_exec_work+0xbe/0x230 [ 441.744118][T19880] process_scheduled_works+0xb02/0x1830 [ 441.751688][T19880] worker_thread+0xa50/0xfc0 [ 441.758307][T19880] kthread+0x388/0x470 [ 441.764400][T19880] ret_from_fork+0x51e/0xb90 [ 441.771023][T19880] ret_from_fork_asm+0x1a/0x30 [ 441.777816][T19880] } [ 441.780339][T19880] ... key at: [] tasklist_lock+0x18/0x40 [ 441.788092][T19880] ... acquired at: [ 441.791912][T19880] _raw_read_lock+0x36/0x50 [ 441.796627][T19880] send_sigio+0x101/0x370 [ 441.801164][T19880] dnotify_handle_event+0x169/0x440 [ 441.806558][T19880] fsnotify+0x1831/0x1ae0 [ 441.811089][T19880] path_openat+0x15c2/0x3860 [ 441.815891][T19880] do_file_open+0x23e/0x4a0 [ 441.820596][T19880] do_sys_openat2+0x113/0x200 [ 441.825474][T19880] __ia32_compat_sys_openat+0x131/0x160 [ 441.831220][T19880] __do_fast_syscall_32+0x20d/0x640 [ 441.836618][T19880] do_fast_syscall_32+0x33/0x70 [ 441.841669][T19880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.848196][T19880] [ 441.850581][T19880] [ 441.850581][T19880] stack backtrace: [ 441.856507][T19880] CPU: 0 UID: 0 PID: 19880 Comm: syz.2.5215 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.856534][T19880] Tainted: [L]=SOFTLOCKUP [ 441.856541][T19880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.856559][T19880] Call Trace: [ 441.856567][T19880] [ 441.856576][T19880] dump_stack_lvl+0xe8/0x150 [ 441.856608][T19880] __lock_acquire+0x2a94/0x2cf0 [ 441.856640][T19880] lock_acquire+0xf0/0x2e0 [ 441.856661][T19880] ? send_sigio+0x101/0x370 [ 441.856691][T19880] _raw_read_lock+0x36/0x50 [ 441.856718][T19880] ? send_sigio+0x101/0x370 [ 441.856748][T19880] send_sigio+0x101/0x370 [ 441.856776][T19880] dnotify_handle_event+0x169/0x440 [ 441.856798][T19880] fsnotify+0x1831/0x1ae0 [ 441.856823][T19880] ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0 [ 441.856849][T19880] ? fsnotify+0x74c/0x1ae0 [ 441.856875][T19880] ? __pfx_fsnotify+0x10/0x10 [ 441.856897][T19880] ? do_raw_spin_unlock+0xf5/0x210 [ 441.856915][T19880] ? d_make_persistent+0x10f/0x180 [ 441.856932][T19880] ? shmem_mknod+0x2ea/0x360 [ 441.856952][T19880] path_openat+0x15c2/0x3860 [ 441.856999][T19880] ? __pfx_path_openat+0x10/0x10 [ 441.857027][T19880] ? __ia32_compat_sys_openat+0x131/0x160 [ 441.857055][T19880] ? __lock_acquire+0x6b5/0x2cf0 [ 441.857079][T19880] do_file_open+0x23e/0x4a0 [ 441.857108][T19880] ? __pfx_do_file_open+0x10/0x10 [ 441.857148][T19880] ? _raw_spin_unlock+0x28/0x50 [ 441.857173][T19880] ? alloc_fd+0x64b/0x6c0 [ 441.857199][T19880] do_sys_openat2+0x113/0x200 [ 441.857222][T19880] ? __pfx_do_sys_openat2+0x10/0x10 [ 441.857249][T19880] ? rcu_is_watching+0x15/0xb0 [ 441.857277][T19880] __ia32_compat_sys_openat+0x131/0x160 [ 441.857305][T19880] __do_fast_syscall_32+0x20d/0x640 [ 441.857326][T19880] ? lockdep_hardirqs_on+0x7a/0x110 [ 441.857342][T19880] ? do_fast_syscall_32+0x33/0x70 [ 441.857361][T19880] ? irqentry_exit+0x10e/0x620 [ 441.857377][T19880] ? trace_irq_disable+0x3b/0x150 [ 441.857403][T19880] do_fast_syscall_32+0x33/0x70 [ 441.857426][T19880] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 441.857452][T19880] RIP: 0023:0xf7f35f6c [ 441.857468][T19880] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 441.857484][T19880] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 441.857503][T19880] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 441.857516][T19880] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 441.857527][T19880] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 441.857537][T19880] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 441.857551][T19880] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 441.857569][T19880] [ 442.203051][T19891] geneve2: entered promiscuous mode [ 442.380005][T13112] plantronics 0003:047F:FFFF.002B: unbalanced collection at end of report description [ 442.392233][T13112] plantronics 0003:047F:FFFF.002B: parse failed [ 442.399070][T13112] plantronics 0003:047F:FFFF.002B: probe with driver plantronics failed with error -22 [ 442.590851][T13112] usb 5-1: USB disconnect, device number 36