last executing test programs: 4.197932394s ago: executing program 1 (id=5833): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x800000000000056, 0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) writev(r1, &(0x7f0000000800)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000640)="1898c0e85dda3a0097d5d196ec83b7", 0xf}, {&(0x7f0000001980)="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", 0xff4}], 0x3) 3.520998634s ago: executing program 1 (id=5838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000002c0)="fc66b9400101c066b8b200000066ba000000000f30f4df1d0f070f01cb640f0018ba4300b000eeba6100b016ee2e0fae6ba4", 0x32}], 0x1, 0x7e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.171003541s ago: executing program 4 (id=5841): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) socket(0x22, 0x2, 0x24) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.894879897s ago: executing program 4 (id=5844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) timer_create(0x0, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2.37465693s ago: executing program 1 (id=5847): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 2.289417088s ago: executing program 4 (id=5849): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "f64d87da603fa09a", "ec9580400006000000ba6a6b247009d4", "be164209", '\x00\x00\x00\x00\x00\x00\b\x00'}, 0x28) sendmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1000"], 0x10}, 0x80) 2.119277942s ago: executing program 0 (id=5850): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xff, 0x80801) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1}) read$eventfd(r1, &(0x7f00000000c0), 0x8) 1.998188916s ago: executing program 4 (id=5851): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r0, 0x40184152, 0x0) 1.997344133s ago: executing program 1 (id=5852): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.956153573s ago: executing program 0 (id=5853): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x80ad}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}, 0x80ad}, 0x1c) 1.880320121s ago: executing program 0 (id=5855): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x840) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000140)=0x1) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r1 = syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d", @ANYRESHEX=r1], 0xf8) 1.570283387s ago: executing program 4 (id=5856): r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x200, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f00000000c0)=[{r0, 0x2004}], 0x1, 0x0, 0x0, 0x0) 1.430734133s ago: executing program 4 (id=5857): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, 0x0) ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000001580)={{0x1, 0x1, 0xad26, 0x2, 0x4, 0x4}, 0x214, [0xa, 0x4, 0x6, 0x4, 0x2, 0x6, 0xff, 0x3, 0x0, 0x9, 0x9, 0x1b2, 0x7ff, 0x80000001, 0xe3, 0x8, 0x1de, 0xd7, 0x8, 0x969, 0xffff, 0x462, 0x2, 0x5, 0x4, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x9, 0x2, 0xd92, 0x1, 0x2, 0x1, 0x400, 0xe, 0x6, 0x4, 0x8, 0x7, 0x2, 0x80008000, 0xd, 0xfffffc00, 0x9, 0x3, 0x5, 0x9, 0xa2, 0x95, 0x3, 0x6, 0xc, 0xd635, 0x40, 0x40, 0x407, 0x3ff, 0x1, 0x1, 0xd76800, 0x7, 0xffffff7f, 0x80, 0x89, 0x6, 0x6dc, 0x4, 0x8, 0x6e0d9e72, 0x5, 0x9, 0x0, 0x9, 0x3, 0x7, 0x5, 0x0, 0x3, 0x4, 0x5c, 0x0, 0x92b, 0x2, 0xe, 0x2, 0x2, 0x7, 0x7ff, 0x5, 0xffffffee, 0x5, 0x1, 0x8, 0x7, 0x5, 0x9, 0x0, 0x200, 0x0, 0x7d, 0x4, 0xa, 0x7, 0x9, 0x10, 0x9, 0x5, 0x6, 0x4, 0x8, 0x80, 0x2, 0x7, 0x2, 0x0, 0x40000, 0x1000, 0x4, 0xfffffffc, 0x6, 0x0, 0xffff, 0xa1, 0x1, 0x2, 0xfff, 0x5, 0x6, 0x4, 0x1, 0x7fff, 0x0, 0x5, 0x7f, 0x3be, 0xffffffff, 0x200, 0x0, 0x1000, 0x7fffffff, 0x81, 0xc9, 0x9, 0x4, 0x2, 0x5, 0x7fffffff, 0x6, 0xfffffff8, 0xfffff001, 0x67d9e345, 0x3, 0xfffffffe, 0x9, 0xb78, 0x7, 0x0, 0xffffffff, 0x31c, 0x3, 0xd3, 0x0, 0x82c2, 0x1ff, 0xf, 0x6c26, 0x400, 0x7, 0xad1e, 0x10, 0x7, 0x3, 0x0, 0x7ff, 0xa, 0x7, 0x101, 0x6, 0x9, 0x7, 0x9, 0xfffffff4, 0x2, 0x8, 0x9, 0xa86b, 0x9, 0x9, 0x2, 0x8, 0x6, 0x100, 0x8c5, 0x2, 0x5, 0x81, 0xa6, 0x3a, 0x5, 0x5, 0x5, 0xfffffe01, 0xbf69, 0x8, 0x4, 0xe2, 0x2d60, 0x401, 0x90, 0x2, 0x4, 0x80000000, 0x1, 0x1, 0x9, 0x10001, 0x1, 0x6, 0xe633, 0x8, 0x1, 0x80000001, 0x6, 0x10000, 0xc54, 0x0, 0x9, 0xdcb, 0x6, 0xc, 0x8, 0x8, 0x8, 0xffff, 0x1000, 0x3, 0x7, 0x7fff, 0x4, 0x0, 0x4, 0x14aa, 0x7, 0x5, 0x3, 0x7bb, 0xa15c, 0x4, 0x8, 0xfffffffd, 0x1, 0x80, 0x0, 0x8, 0x7fffffff, 0x6, 0x2, 0xd, 0xfffffffa, 0x5, 0x3, 0x3, 0xa1a, 0xb, 0x100, 0x5, 0x16, 0x8000000, 0x6, 0x3, 0x9b79, 0x2ef, 0x80000001, 0x5f, 0x7, 0xfff, 0x4a32, 0xc, 0xfffffff8, 0x3, 0x80000001, 0x8, 0x2, 0x2d, 0x101, 0x7, 0x7dbf, 0x7f, 0x1ff, 0x7, 0x0, 0x1, 0x3, 0x3, 0x3, 0xd, 0x7, 0x8001, 0x2, 0x1, 0x1, 0x0, 0x8, 0x0, 0x4, 0x5, 0x9fd, 0x5, 0x4, 0x5, 0x6, 0x400, 0x7, 0x3f, 0x4, 0x8001, 0x80000000, 0xa82, 0x5, 0x7, 0x9, 0x7ff, 0x80, 0x6c5e, 0x0, 0xa2, 0x5, 0x7, 0x8, 0x1a, 0x9, 0x200, 0xffff, 0x1dc0, 0x2, 0xb9, 0x5, 0x2, 0x8, 0xfff, 0x1, 0x8, 0x7, 0x9, 0xed, 0xfee7, 0x1, 0xfffff42b, 0x8001, 0x6, 0x7, 0x2, 0x4a, 0x8001, 0x7, 0x8, 0xfffffff4, 0x56, 0xf42, 0xfff, 0xc, 0x5, 0x8, 0x8001, 0x1, 0x80000000, 0x7, 0x9, 0x6, 0x2, 0xff, 0xffffffff, 0x5a, 0x9, 0x8, 0x31feeacd, 0x10001, 0x5, 0x7fffffff, 0x4, 0xca, 0x0, 0x6727, 0x7, 0x8000, 0x3, 0xfffffff7, 0x9, 0x80000001, 0xc, 0x80, 0x58, 0x901c, 0x5, 0x9, 0xb, 0xc74d97cb, 0xd, 0x4, 0x81, 0x77a, 0xefd5, 0x2, 0x5, 0x0, 0xfffffff1, 0x1ff, 0x7c2, 0x2, 0x7, 0x4, 0x3ff, 0x1, 0x6, 0x7, 0x1fb, 0x2, 0x200, 0xffffffff, 0x5, 0xc75ac1f, 0xcb7b, 0x7fffffff, 0x2, 0x7, 0x2, 0xffffffff, 0xa, 0x8, 0x353027cb, 0x7, 0x31c, 0x9, 0xfffffffe, 0x8, 0xd3, 0x9, 0x9, 0x4, 0x200, 0x1352, 0x9, 0x10001, 0x101, 0xff, 0x9, 0x1, 0x400, 0x1, 0x4, 0x6, 0x1, 0xff, 0x400, 0x800, 0x6, 0x7, 0x8, 0x7ff, 0x10001, 0x1ffc00, 0x78b2, 0x10001, 0x5, 0x36, 0x32b, 0x3, 0x1800000, 0xe, 0x2, 0x9, 0x9, 0x1, 0x5, 0xfffffffe, 0xfffffff7, 0x3, 0x9, 0x1, 0xfffffff8, 0x1, 0x8, 0x3, 0xa75, 0x9, 0x1ff, 0x1, 0x8000000, 0x7d45, 0x1d8, 0x2, 0x3, 0x1, 0x8, 0x3, 0x3, 0x17ef20c0, 0x3, 0x7, 0x5, 0x5, 0x400, 0xfff, 0x97, 0x1, 0x0, 0x89, 0x7, 0x32, 0x1, 0x9, 0x7c2, 0x2, 0x8, 0x1, 0x1, 0xfffffff8, 0x3, 0x1, 0x8ba7, 0x66, 0x2, 0x0, 0x81, 0xc, 0x4, 0x401, 0x40, 0x7d, 0x1000, 0xbd386a63, 0xefb, 0x7fffffff, 0xcd8, 0x5, 0x8, 0x4, 0x9, 0x4, 0x0, 0x9, 0x5, 0x40, 0xd84, 0x1, 0x9bbd, 0x7f, 0xb21, 0x40, 0x7f, 0xfffffff6, 0x3, 0x5, 0x9, 0x4, 0x400000, 0x9, 0x7, 0x8001, 0x7ff, 0x89ae, 0x3, 0xfffffffd, 0x3, 0x7, 0x0, 0x8001, 0xfffffffe, 0x2, 0x4, 0x4, 0x0, 0x4, 0x6, 0xc3b, 0xfffffff9, 0x6, 0x80000001, 0x9, 0x2, 0x8, 0x7fffffff, 0x5, 0x1, 0x6, 0x993, 0x6, 0x8001, 0x1, 0x7, 0x8, 0x8, 0x101, 0x7fffffff, 0x80000001, 0xd, 0x6, 0x3, 0x9, 0xff, 0x0, 0x7, 0xd7, 0xffc00000, 0x6, 0x65e, 0x100, 0xf6, 0x2, 0x1, 0x400, 0x2, 0x4, 0x7, 0xf, 0x5, 0x5, 0x0, 0x101, 0x400, 0xef58, 0x1ff, 0xdf477de, 0x9be5, 0x677bd7a6, 0x5, 0x7, 0x67b, 0x5, 0x2, 0x3, 0x0, 0x0, 0x5c0, 0x8, 0x4, 0x2, 0x8, 0x4, 0x6, 0xb86c, 0x7, 0x7f, 0x8, 0x10000, 0x400, 0x80000001, 0x4, 0x10000, 0x6, 0x9e7, 0xf2, 0xffffffff, 0x9, 0x5, 0x1, 0x2, 0x9, 0x2, 0x7, 0xfffffffe, 0x1000, 0x0, 0x1, 0x4, 0x1, 0x9, 0x4, 0x400, 0x8, 0x0, 0x10, 0x1, 0x200040, 0xe, 0xffff, 0x7, 0x8, 0x8, 0x5, 0x8, 0x5, 0x4, 0x4, 0xc, 0x1, 0x0, 0x9, 0x18, 0x8, 0x8, 0x8, 0x6, 0x3, 0xffffffff, 0x7, 0x7, 0x7fffffff, 0x6, 0xffffffff, 0x1, 0xfb, 0xfffffda9, 0xd529, 0xc, 0x1, 0x2, 0x38, 0x3, 0x8d6, 0x5, 0x13437804, 0x8, 0x1d22800, 0x6, 0x0, 0x3, 0x8, 0x3, 0x7, 0x267d, 0x4, 0x7, 0xde3, 0xf7d1, 0x10000, 0x5, 0x40, 0x7, 0x4, 0x9, 0x9, 0x1, 0x401, 0x1, 0x9, 0x0, 0x4, 0x8, 0x4, 0x7, 0x8001, 0x0, 0x1ec, 0x4, 0x9, 0x5, 0x2, 0x3, 0x1, 0x7, 0x33d0, 0x80, 0x101, 0x8, 0x3ff, 0x249, 0x9, 0xc, 0x5, 0x7, 0x2, 0x2, 0x3, 0x5, 0x3, 0xa, 0x41, 0x2, 0x3, 0x0, 0xc, 0xffffffff, 0x4, 0x7fffffff, 0x3, 0xffff, 0x10001, 0x6, 0x80, 0x1005, 0x9d58, 0x4, 0xcca9, 0x6, 0x3, 0x7, 0x7fffffff, 0x2, 0xffffffff, 0x7, 0x382, 0x1, 0x7, 0x6, 0x1, 0x80000001, 0x9, 0x7, 0x200, 0x6, 0x8, 0x5b71, 0x0, 0x9, 0x9, 0x1, 0xd48, 0x1ff, 0x1, 0x9, 0x5, 0x38f00, 0x7fff, 0x3, 0x9, 0x2, 0x8000, 0x7fffffff, 0x5, 0x4, 0xf, 0xdfe, 0x3, 0x1, 0x9, 0x81, 0x4, 0x9, 0x101, 0x7, 0x5, 0x6, 0x7, 0xfa, 0x1, 0x3, 0x7e, 0x2, 0xa9d, 0x8, 0x5, 0x3, 0x1, 0x795e, 0x3, 0x6, 0x0, 0x7, 0x80000001, 0x3, 0xdc, 0xfffffffe, 0x8, 0x200, 0xcb9, 0x6, 0x4, 0x800, 0x9, 0x1, 0x8, 0x0, 0x3, 0x8, 0x7, 0x8000, 0x5, 0x0, 0x912, 0x4, 0xc, 0x3, 0x35d, 0x1ff, 0xfffffe01, 0x3, 0x8, 0xffffffff, 0x2, 0x7fff, 0x3ff, 0x3, 0x1, 0x1, 0x9, 0x5, 0x9, 0x6, 0x6, 0x9, 0x10000, 0x0, 0xd, 0x3, 0x3, 0x0, 0x6, 0x17, 0x5512, 0x1, 0x5aaeada2, 0x95, 0x9, 0x3, 0x89d, 0x2, 0x0, 0x2, 0x10000, 0x9, 0x6, 0xb8e, 0xb, 0x3, 0x3ff, 0xb2, 0x80000001, 0x1, 0x3, 0xde7e, 0x4, 0x7ff, 0x10000, 0x4, 0x80000000, 0x0, 0x1, 0x8, 0x6, 0x5, 0xd2, 0x9, 0x9, 0x200, 0x4, 0x9fcf, 0x8, 0x3, 0xdc66, 0xe, 0x8d0, 0x9a78, 0x7, 0x7f, 0x9, 0x9ed, 0x10001, 0x5, 0x2d, 0x1, 0x9, 0x1, 0x265, 0x3, 0x8001, 0xffff, 0x401, 0x5, 0xf6, 0x2, 0xb19, 0x7fff, 0x6, 0x2, 0x6e2, 0x7ff, 0x8000, 0x7, 0x1ff, 0x8, 0x8, 0x2, 0xd, 0x74b25a35, 0xfffffffc, 0xd, 0x572, 0xd, 0x8b9d, 0xffff, 0x3, 0xed, 0x5, 0x3, 0x9, 0x0, 0x437, 0xe, 0x3, 0xa, 0x7, 0x9, 0x1, 0x1000, 0x7, 0x6, 0x6, 0x3, 0x5, 0x0, 0x7f, 0x9, 0x3, 0x7f, 0x7, 0x4, 0x5, 0x6, 0x2, 0xffff, 0x2, 0x4, 0xdc, 0xa, 0x10000, 0x9beb, 0x8, 0x8, 0x4]}) 1.288436951s ago: executing program 0 (id=5859): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f000000a600)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000540)="f4068901371aeb199421f93aff7eb604e099571c3c2fb9607fbb56138a3d69666d65d5e223dc4870d4ad2e22f8d5d27fa8b6c2810b9cf9ecd754327624cbb5291250f7f8a65b96bef975f80a51af3136922cd98eba5fa9959e4770b1cdd6610b0f7d88258ed840f9b6be567a24954b615ea5d096748df769ba3763388416864c9ce857bacf4c6f642f7b14eb97d9f3e13723522a20cf93d946849f", 0x9b}, {&(0x7f0000000600)="26a324863759bacc18496349b4e5cf671000c0c793f066c276fc5bb429a1b459c67d6075e3c1c7077f8cf70c13b4c420fec688a7969186f288112a52f4a1a2fb45363eb973263a840baf807356f7e466b8e8945d79fbf038fc7aaab22815a5ff253bd324f0a20eba170c59eba1740e1036476edd6c66a53a7783cf935691544df2b60bc275497c9dc73a6655addc44546d64b2909bfc94ca713fb4efd8c1d70f809c03f1c8786d4950ec3f5db0d81fc93cc131c3bf0e09aeaab36134b6e246da0a2cbd5f96e3d84a", 0xc8}, {&(0x7f0000003a00)="5baefe683b81968a1abc6ff0f60552e8540ae386f5f0d049bf0b0cbebedff85fc6e3b99252c248ebcc2f6726a8ab43b776af43c506b9e60a9720cd91a98fcc536e1835c2d3b425513b600da5d374c6ffd664614a278364ce4361cd43c90b590f60a758c437d105c0b0679e93c411b15da5d57b438db426d413af97c176dce638e8d2123e030958715534f60978fc0c47b21740c3ec534bd200023c236ca803b43373e571481040ed9b9dc1a4295aa17a44281831d2066cd9163f33355d504224a5bf4f78703bed516ee2cf62dceb33b433d90afcebdaeee457b8c3a3507e597c4bdb0e3fd803bd6ea217a5556815a9ed1dea88bd6531c7bbc5f628f4c73fd45b6fb561fcdfeac6157cd31291ab9f9b62a4e6eb67cfa8e66b6c3d98b861cab2800a4de0b5069ea793cacba705aa96332ad5eaae6fbb65133fe4728bfee5a2203cc1c75e75fc99e5bf985180762647d63c053cef97cde332ad76ca384d9f8a321c7afbf9adac86293465b8efc5ac8343bc48e5bedf11d4b95c7b7fb40ef8f48cc6493daf6f25c5d779ff347e2b9bbd6186edbe9c39e1288f8fcb0f010f52db45c12d827f50c4ad1bdfc366c4b21fc85c2d56e7ccacefa88624af62a440312167b52f094816f75bad026b9c31bc4687a236c548ba94aeaef56078a866da115c5f89ac183fc3e57f3867df48f0c01dfb308191f0da347aab28ae10b1d1bd62c2004a622bfabe04d40e34226b319f7896d22bedc30354b3eaad3b5ef870dacc11f5493ee83a59cc8239826700070af815b98b42e25c60520a8f700c3814f8f2eaf3e403f4b4eb30ed29d24dee2035b147d6d61e08a168a1b9f97ca3709ca05632d832ea03a52a18636d4c6ae6ba2f52f17386275e81ef9e7dcfe93f7276ada4a5e20a9f017711a259c0868ce3a65db93cac03758c03b5290bcf6e9accc527ba6710d09e238070ed0679cbf0d8b5d58418db1c258fcda7d4297c5e4191aa8ebe78d8bdd4aeac047df469368c4df66951e27f0d8baa4cd6ca1e30c0b2035ea8992dc08a09d886be9e06204b956fb2ded71da412a1ecdc2c163152386a1c6b5d6820b064f577612344bb98c34cd255fb17043d45727a5ccdc570ae247355a08ef0babb77ea3c3c738fa13b1b1e2e5b4cc6ffc6292249e52634ba66913b2ba45888519205665021346410783187b28d7c0d9bd711ce8bb11a1cf7a8eec876e3e87586a2458c8005805368cf754fb602483ff2947c18d66b74d3ffcfda89029e1bfa05727dd40713878d45119ab4e7772044d8d0b8f54e703276b598a4f917e18bffda786ecad402ff4e0ecb67c01a43ec6f91a4150c8dba4d531fb4ef952925545fb63556171f3c7a2dfd5de11730565712013520a2938dbdd83751e5b6405bee5edea9c84a3a1a719ca2972ff5312ef965fab3ae49a51168e62e96ec5b967e05ba1cded294203ca0d93210169f2fce8b25c54d064cc12451cccbdf4726f112861c7eb96c4ebb905428727319c1a512e71693f080c0a4d0ea228501b3c484086ca925897241620ccba56c2146da2cebc154b9d324f541849ce08dbe89e2586ff03f0ee63a3cc94ab6ee2b2bca5af9165b7f47b18f098fd4b96b00a42e6ec090ce5a353bd364533037f70c8137db910c9631b490b460306865911db51dd2c8e06a0a38bcd3adaa3aa11fa087e6921a4d93d2d6", 0x4ae}], 0x3}], 0x1, 0x40) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002a00)=""/4096, 0x1000}], 0x1}, 0x40000102) 1.193466898s ago: executing program 2 (id=5861): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00030300ff"], 0x38}, 0x1, 0x2000000, 0x0, 0x60042800}, 0x40084c0) 1.142794336s ago: executing program 2 (id=5862): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) open(&(0x7f0000000000)='.\x00', 0x624502, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000200)={0xc4, 0x0, 0x4}) 987.866375ms ago: executing program 2 (id=5863): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x80000, 0x102) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x2c00) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000040)=[{&(0x7f0000001800)=""/216, 0xd8}, {0x0}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 987.479341ms ago: executing program 1 (id=5864): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000eca000/0x1000)=nil, 0x1000, 0x5000007, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000200)) 934.570085ms ago: executing program 3 (id=5865): unshare(0x22020400) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) ppoll(&(0x7f0000000040)=[{r1, 0x241}], 0x1, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 815.83763ms ago: executing program 1 (id=5866): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc01}}, 0x0, 0x0, 0x0}, 0x0) 710.343553ms ago: executing program 3 (id=5867): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tgkill(0x0, 0x0, 0x33) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 617.53211ms ago: executing program 2 (id=5868): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x6c20}}, 0x0) 617.111926ms ago: executing program 3 (id=5869): syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xc40, 0x0) r0 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x11a}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1}, 0x50) io_uring_enter(r0, 0x567, 0x1000a387, 0x0, 0x0, 0x0) 504.233619ms ago: executing program 2 (id=5870): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 347.905819ms ago: executing program 3 (id=5871): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x12f4}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) recvmsg$unix(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}, 0x0) 322.264468ms ago: executing program 0 (id=5872): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000050000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e6174001c00048008000140000000000800024000000000080002400eb489d814000000020a010800000027f00000000000000114000000110001000f"], 0xac}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff500"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 188.263642ms ago: executing program 3 (id=5873): r0 = socket$inet(0x2, 0x1, 0x100) bind$inet(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0xfffffffd, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 174.596701ms ago: executing program 2 (id=5874): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 3.719301ms ago: executing program 0 (id=5875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 0s ago: executing program 3 (id=5876): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)={0x0, 0x0, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 468.064103][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 468.071526][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 468.079528][ T24] usb 2-1: USB disconnect, device number 52 [ 468.085887][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 468.099762][ T5941] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 468.109232][ T5941] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 468.120088][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 468.127312][ T5941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 468.136651][ T5941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 468.150002][ T24] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 468.160962][ T5939] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 468.170238][ T5939] usb 1-1: config 0 has no interface number 0 [ 468.176773][ T5941] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 468.198382][ T5939] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 468.213713][ T5941] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 468.223848][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.232013][ T5939] usb 1-1: Product: syz [ 468.237317][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 468.246676][ T5939] usb 1-1: Manufacturer: syz [ 468.251312][ T5939] usb 1-1: SerialNumber: syz [ 468.256008][ T5941] usb 4-1: Product: syz [ 468.260217][ T5941] usb 4-1: Manufacturer: syz [ 468.271228][ T5939] usb 1-1: config 0 descriptor?? [ 468.293051][ T5939] redrat3 1-1:0.31: Couldn't find all endpoints [ 468.301099][ T5941] cdc_wdm 4-1:1.0: skipping garbage [ 468.308305][ T5941] cdc_wdm 4-1:1.0: skipping garbage [ 468.335808][ T5941] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 468.341867][ T5941] cdc_wdm 4-1:1.0: Unknown control protocol [ 468.499012][ T5910] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 468.624814][ T24] usb 1-1: USB disconnect, device number 50 [ 468.671901][ T5910] usb 5-1: Using ep0 maxpacket: 8 [ 468.690799][ T5910] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 468.708634][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.718291][ T5910] usb 5-1: Product: syz [ 468.722500][ T5910] usb 5-1: Manufacturer: syz [ 468.730758][ T5910] usb 5-1: SerialNumber: syz [ 468.746296][ T5910] usb 5-1: config 0 descriptor?? [ 468.764347][ T5910] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 468.975467][ T5910] gspca_sonixj: reg_w1 err -71 [ 468.989677][ T5910] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 469.011334][ T5910] usb 5-1: USB disconnect, device number 54 [ 469.022616][ T5840] udevd[5840]: setting owner of /dev/bus/usb/005/054 to uid=0, gid=0 failed: No such file or directory [ 469.057930][ T9433] usb 4-1: USB disconnect, device number 46 [ 469.295006][ T24] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 469.456791][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 469.463976][ T24] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 469.473861][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.493928][ T24] usb 2-1: config 0 descriptor?? [ 469.620542][T18201] netlink: 'syz.4.4606': attribute type 10 has an invalid length. [ 469.652290][T18201] team0: Port device dummy0 added [ 469.693625][T18201] netlink: 'syz.4.4606': attribute type 10 has an invalid length. [ 469.728908][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 469.762114][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 469.794675][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 469.809269][T18201] team0: Port device dummy0 removed [ 469.815068][ T24] usb 2-1: media controller created [ 469.829601][T18201] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 469.868945][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.926587][T18183] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 469.960331][ T24] az6027: usb out operation failed. (-71) [ 469.980234][ T24] az6027: usb out operation failed. (-71) [ 469.990638][ T24] stb0899_attach: Driver disabled by Kconfig [ 470.012430][ T24] az6027: no front-end attached [ 470.012430][ T24] [ 470.032771][ T24] az6027: usb out operation failed. (-71) [ 470.050213][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 470.093681][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input76 [ 470.136746][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 470.143757][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 470.232872][ T24] usb 2-1: USB disconnect, device number 53 [ 470.388781][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 470.485453][ T5939] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 470.667767][ T5939] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.689730][ T5939] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 470.703351][ T5939] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 470.724139][ T5939] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.743547][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.756496][ T5939] usb 4-1: Product: syz [ 470.760727][ T5939] usb 4-1: Manufacturer: syz [ 470.765667][ T5939] usb 4-1: SerialNumber: syz [ 470.785302][ T5941] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 470.955167][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 470.961903][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.977903][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.985162][ T9439] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 470.988794][ T5941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 471.003069][T18217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 471.009147][ T5941] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 471.024635][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.045938][ T5941] usb 5-1: config 0 descriptor?? [ 471.166992][ T9439] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.178810][ T9439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 471.190513][ T9439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 471.202206][ T9439] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 471.217290][ T9439] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 471.230988][ T9439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.246095][ T9439] usb 1-1: config 0 descriptor?? [ 471.506252][ T5941] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0030/input/input77 [ 471.607496][ T5941] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.0030/input/input78 [ 471.633168][T18217] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 471.663628][ T5941] kye 0003:0458:5011.0030: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0 [ 471.692391][ T9439] plantronics 0003:047F:FFFF.0031: ignoring exceeding usage max [ 471.814768][ T9439] plantronics 0003:047F:FFFF.0031: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 471.862990][ T5939] cdc_ncm 4-1:1.0: bind() failure [ 471.932731][ T5939] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 471.954494][ T5939] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 471.977120][ T5939] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 471.993966][ T5939] usb 4-1: USB disconnect, device number 47 [ 472.014359][ T5840] udevd[5840]: setting owner of /dev/bus/usb/004/047 to uid=0, gid=0 failed: No such file or directory [ 472.088224][T18246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4625'. [ 472.555520][ C1] kye 0003:0458:5011.0030: usb_submit_urb(ctrl) failed: -1 [ 472.591296][ T9439] usb 1-1: USB disconnect, device number 51 [ 473.275493][ T9433] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 473.426894][ T9433] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.445016][ T9433] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 473.464345][ T9433] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.480262][ T9433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.528053][ T9433] usb 2-1: Product: syz [ 473.546114][ T9433] usb 2-1: Manufacturer: syz [ 473.563724][ T9433] usb 2-1: SerialNumber: syz [ 473.636146][ T5939] usb 5-1: reset high-speed USB device number 55 using dummy_hcd [ 473.695200][ T5939] usb 5-1: device reset changed ep0 maxpacket size! [ 473.728427][ T5910] usb 5-1: USB disconnect, device number 55 [ 473.799065][ T9433] usb 2-1: 0:2 : does not exist [ 473.836312][ T9433] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 473.968846][ T9433] usb 2-1: USB disconnect, device number 54 [ 474.102969][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.105288][ T5910] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 474.331806][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.370306][ T5910] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 474.420963][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.459321][ T5910] usb 5-1: config 0 descriptor?? [ 474.748111][ T9439] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 474.897684][ T5910] keytouch 0003:0926:3333.0032: fixing up Keytouch IEC report descriptor [ 474.906642][ T9439] usb 2-1: Using ep0 maxpacket: 16 [ 474.916824][ T5910] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0032/input/input79 [ 474.929793][ T9439] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 474.938238][ T9439] usb 2-1: config 0 has no interface number 0 [ 474.944405][ T9439] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 474.955238][ T9439] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 474.965275][ T9439] usb 2-1: config 0 interface 41 has no altsetting 0 [ 474.974550][ T9439] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 474.983895][ T9439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.993615][ T9439] usb 2-1: Product: syz [ 474.997989][ T9439] usb 2-1: Manufacturer: syz [ 475.002638][ T9439] usb 2-1: SerialNumber: syz [ 475.005038][ T5939] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 475.016655][ T9439] usb 2-1: config 0 descriptor?? [ 475.027673][ T9433] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 475.042496][T18329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 475.050091][T18329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 475.057888][ T5910] keytouch 0003:0926:3333.0032: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 475.147028][T18289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.160296][T18289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.189390][ T9433] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 475.198442][ T5939] usb 4-1: config 0 interface 0 has no altsetting 0 [ 475.198488][ T5939] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 475.198514][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.209339][ T5939] usb 4-1: config 0 descriptor?? [ 475.218666][ T9433] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 475.238783][ T9433] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 475.247993][ T9433] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 475.261411][ T9433] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 475.270704][ T9433] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 475.279156][ T9433] usb 3-1: Product: syz [ 475.280034][T18329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 475.283499][ T9433] usb 3-1: Manufacturer: syz [ 475.298490][T18329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 475.330157][ T9433] cdc_wdm 3-1:1.0: skipping garbage [ 475.335756][ T9433] cdc_wdm 3-1:1.0: skipping garbage [ 475.345266][ T9433] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 475.351343][ T9433] cdc_wdm 3-1:1.0: Unknown control protocol [ 475.403030][T18342] netlink: 'syz.0.4662': attribute type 1 has an invalid length. [ 475.610922][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 475.617583][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 475.624158][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 475.630798][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 475.638314][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 475.644967][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 475.651369][ T5827] usb 3-1: USB disconnect, device number 56 [ 475.657566][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 475.657591][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 475.657608][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 475.663389][ T24] usb 5-1: USB disconnect, device number 56 [ 475.712466][ T9439] Error reading MAC address [ 475.728289][T18329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 475.738249][T18329] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 475.955160][ T9439] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 475.974649][ T9439] usb 2-1: USB disconnect, device number 55 [ 476.235185][ T5827] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 476.283458][ T5939] video4linux radio48: keene_cmd_set failed (-71) [ 476.299002][ T5939] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 476.313990][ T5939] usb 4-1: USB disconnect, device number 48 [ 476.416862][ T5827] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 476.435135][ T5827] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 476.445499][ T5827] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 476.454575][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.475974][T18355] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 476.493534][ T5827] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 476.501121][T18364] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4671'. [ 476.527595][T18363] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4671'. [ 476.706365][ T5827] usb 1-1: USB disconnect, device number 52 [ 477.159635][T18378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4678'. [ 477.215376][T18378] gretap0: entered promiscuous mode [ 477.269641][T18378] macsec1: entered promiscuous mode [ 477.281482][T18378] macsec1: entered allmulticast mode [ 477.287359][T18378] gretap0: entered allmulticast mode [ 477.349496][T18378] gretap0: left allmulticast mode [ 477.354890][T18378] gretap0: left promiscuous mode [ 477.795074][ T5910] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 477.987191][ T5910] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 478.002116][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 478.043419][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 478.064830][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 478.105140][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.125047][ T5910] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.134354][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.156246][ T5910] usb 1-1: config 0 descriptor?? [ 478.175787][T18393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 478.599959][ T5910] plantronics 0003:047F:FFFF.0033: reserved main item tag 0xd [ 478.636918][ T5910] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 478.746416][ T5939] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 478.929312][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 478.947290][ T5941] usb 1-1: USB disconnect, device number 53 [ 478.963523][ T5939] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 478.978286][ T5939] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 479.009003][ T5939] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 479.043346][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 479.084237][ T5939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 479.104738][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 479.128489][ T5939] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 479.154994][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.175423][ T5939] usb 4-1: config 0 descriptor?? [ 479.215039][ T1168] wlan1: Trigger new scan to find an IBSS to join [ 479.401236][ T5939] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 479.618878][ T5910] usb 4-1: USB disconnect, device number 49 [ 479.681853][ T5910] usblp0: removed [ 480.181222][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4708'. [ 480.787314][T18460] cgroup: fork rejected by pids controller in /syz2 [ 481.765903][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 481.771057][T18436] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 482.591435][T18436] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 482.602223][T18436] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 482.875143][ T5939] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 482.998135][ T5827] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 483.035049][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 483.042282][ T5939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.054269][ T5939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.072209][ T5939] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.083903][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.092779][ T5939] usb 5-1: Product: syz [ 483.102180][ T5939] usb 5-1: Manufacturer: syz [ 483.107276][ T5939] usb 5-1: SerialNumber: syz [ 483.165064][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 483.177448][ T5827] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 483.186419][ T5827] usb 4-1: config 0 has no interface number 0 [ 483.197825][ T5827] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 483.207552][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.216203][ T5827] usb 4-1: Product: syz [ 483.220826][ T5827] usb 4-1: Manufacturer: syz [ 483.226277][ T5827] usb 4-1: SerialNumber: syz [ 483.242796][ T5827] usb 4-1: config 0 descriptor?? [ 483.255867][ T5827] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 483.335306][ T5939] usb 5-1: 0:2 : does not exist [ 483.374433][ T5939] usb 5-1: USB disconnect, device number 57 [ 483.428466][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 483.778691][T20965] binder: 20964:20965 ioctl 4018620d 0 returned -22 [ 483.847467][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 483.925336][ T5939] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 484.005405][ T1102] wlan1: Trigger new scan to find an IBSS to join [ 484.086445][ T5939] usb 3-1: Using ep0 maxpacket: 8 [ 484.110155][ T5939] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 484.137887][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.155212][ T5939] usb 3-1: Product: syz [ 484.159592][ T5939] usb 3-1: Manufacturer: syz [ 484.164235][ T5939] usb 3-1: SerialNumber: syz [ 484.189659][ T5939] usb 3-1: config 0 descriptor?? [ 484.288008][ T5827] gspca_spca1528: reg_w err -71 [ 484.293032][ T5827] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 484.321878][ T5827] usb 4-1: USB disconnect, device number 50 [ 484.420517][ T5939] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 484.435886][ T5939] gspca_sunplus: reg_w_riv err -71 [ 484.445050][ T5939] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 484.475963][ T5939] usb 3-1: USB disconnect, device number 57 [ 484.535579][T20990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4739'. [ 484.707719][T20999] input: syz1 as /devices/virtual/input/input81 [ 484.935051][ T5941] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 484.953050][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.015509][T21009] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 485.127400][ T5941] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.151885][ T5941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.171625][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.198933][ T5941] usb 1-1: Product: syz [ 485.209320][ T5941] usb 1-1: Manufacturer: syz [ 485.214198][ T5941] usb 1-1: SerialNumber: syz [ 485.431149][T21025] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 485.936642][ T5837] Bluetooth: hci4: command 0x0c1a tx timeout [ 486.264219][ T5941] cdc_ncm 1-1:1.0: bind() failure [ 486.305949][ T5941] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 486.323665][ T5941] cdc_ncm 1-1:1.1: bind() failure [ 486.355287][ T5941] usb 1-1: USB disconnect, device number 54 [ 487.217889][T21076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4777'. [ 487.265092][T21080] tmpfs: Unknown parameter 'ZmHSuLVόGU9Q1' [ 487.615594][ T5941] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 487.626632][T21091] snd_dummy snd_dummy.0: control 1:1:195::53367 is already present [ 487.786463][ T5941] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.812802][ T5941] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.826632][ T5941] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 487.838918][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.847521][ T5941] usb 4-1: Product: syz [ 487.858725][ T5941] usb 4-1: Manufacturer: syz [ 487.863479][ T5941] usb 4-1: SerialNumber: syz [ 487.885228][ T9439] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 488.067067][ T9439] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.083226][ T9439] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.095590][ T5941] usb 4-1: 0:2 : does not exist [ 488.125521][ T9439] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.127310][ T5941] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 488.134612][ T9439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.134640][ T9439] usb 2-1: Product: syz [ 488.134656][ T9439] usb 2-1: Manufacturer: syz [ 488.134673][ T9439] usb 2-1: SerialNumber: syz [ 488.236395][T21118] batadv_slave_1: entered promiscuous mode [ 488.245831][T21116] batadv_slave_1: left promiscuous mode [ 488.258415][ T5941] usb 4-1: USB disconnect, device number 51 [ 488.403973][ T9439] usb 2-1: 0:2 : does not exist [ 488.420061][ T9439] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 488.502546][ T9439] usb 2-1: USB disconnect, device number 56 [ 488.610526][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 489.455851][ T5941] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 489.490045][T21171] netlink: 92 bytes leftover after parsing attributes in process `syz.4.4819'. [ 489.565059][ T9439] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 489.567539][T21173] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 489.617795][ T5941] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 489.628537][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.640694][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.656854][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 489.668325][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.681412][ T5941] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.691302][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.705742][ T5941] usb 4-1: config 0 descriptor?? [ 489.716203][T21159] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 489.725335][ T9439] usb 1-1: Using ep0 maxpacket: 8 [ 489.733607][ T9439] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 489.747706][ T9439] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 489.757833][ T9439] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 489.769235][ T9439] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.782329][ T9439] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 489.791465][ T9439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.865227][ T5827] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 490.008834][ T9439] usb 1-1: GET_CAPABILITIES returned 0 [ 490.014474][ T9439] usbtmc 1-1:16.0: can't read capabilities [ 490.020723][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 490.031232][ T5827] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00 [ 490.041111][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.057779][ T5827] usb 5-1: config 0 descriptor?? [ 490.069467][ T5827] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input82 [ 490.136679][ T5941] plantronics 0003:047F:FFFF.0034: reserved main item tag 0xd [ 490.151536][ T5941] plantronics 0003:047F:FFFF.0034: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 490.304669][ T5182] bcm5974 5-1:0.0: could not read from device [ 490.314711][T21163] bcm5974 5-1:0.0: could not read from device [ 490.327477][ T5827] usb 5-1: USB disconnect, device number 58 [ 490.333892][ T5182] bcm5974 5-1:0.0: could not read from device [ 490.347739][ T9439] usb 1-1: USB disconnect, device number 55 [ 490.373705][ T9433] usb 4-1: USB disconnect, device number 52 [ 491.018646][T21189] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4826'. [ 491.040179][T21189] bond0: ARP target 170.170.170.170 is already present [ 491.061534][T21189] bond0: option arp_ip_target: invalid value (2863311530) [ 491.416368][ T5827] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 491.550683][T21214] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4837'. [ 491.560757][T21213] vivid-000: disconnect [ 491.566325][T21212] vivid-000: reconnect [ 491.585078][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 491.597896][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.625070][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.646947][ T5827] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 491.673105][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.695968][ T5827] usb 4-1: config 0 descriptor?? [ 491.955368][ T9439] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 492.107212][ T9439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.123613][ T5827] gt683r_led 0003:1770:FF00.0035: ignoring exceeding usage max [ 492.135228][ T9439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.135395][ T5941] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 492.150296][ T9439] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 492.168408][ T5827] gt683r_led 0003:1770:FF00.0035: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 492.184524][ T9439] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 492.231477][ T9439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.258527][ T9439] usb 3-1: config 0 descriptor?? [ 492.345141][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 492.368706][ T5827] usb 4-1: USB disconnect, device number 53 [ 492.369035][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.393858][ T5910] gt683r_led 0003:1770:FF00.0035: failed to send set report request: -19 [ 492.402387][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.453677][ T5941] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 492.482382][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.505285][ T5941] usb 2-1: config 0 descriptor?? [ 492.718903][ T9439] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 492.788037][T21253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.805079][ T5910] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 492.872841][T21255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4857'. [ 492.883455][T21255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4857'. [ 492.893283][T21255] netlink: 'syz.4.4857': attribute type 1 has an invalid length. [ 492.932457][ T5941] hid_parser_main: 3 callbacks suppressed [ 492.932481][ T5941] ft260 0003:0403:6030.0037: unknown main item tag 0x0 [ 492.975248][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 492.980549][ T24] usb 3-1: USB disconnect, device number 58 [ 492.993126][ T5910] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 493.025630][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.033690][ T5910] usb 1-1: Product: syz [ 493.058442][ T5910] usb 1-1: Manufacturer: syz [ 493.063133][ T5910] usb 1-1: SerialNumber: syz [ 493.088758][ T5910] usb 1-1: config 0 descriptor?? [ 493.110199][ T5910] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 493.148878][ T5941] ft260 0003:0403:6030.0037: chip code: 0000 0000 [ 493.349723][ T5941] ft260 0003:0403:6030.0037: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 493.405185][ T5827] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 493.455103][ T5939] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 493.555261][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 493.562729][ T5827] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 493.572281][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.588907][ T5941] ft260 0003:0403:6030.0037: failed to retrieve status: -71, no wakeup [ 493.599905][ T5941] ft260 0003:0403:6030.0037: failed to retrieve status: -71 [ 493.605180][ T5827] usb 5-1: config 0 descriptor?? [ 493.613770][ T5941] ft260 0003:0403:6030.0037: failed to reset I2C controller: -71 [ 493.634786][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.652702][ T5941] usb 2-1: USB disconnect, device number 57 [ 493.660165][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.671569][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.702428][ T5939] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.712522][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.737475][ T5939] usb 4-1: config 0 descriptor?? [ 493.855309][ T5827] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 494.075078][ T9439] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 494.128391][ T5910] gspca_sonixj: reg_w1 err -71 [ 494.166895][ T5939] plantronics 0003:047F:FFFF.0038: ignoring exceeding usage max [ 494.184085][ T5939] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 494.205455][ T5910] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 494.229395][ T5910] usb 1-1: USB disconnect, device number 56 [ 494.235869][ T9439] usb 3-1: Using ep0 maxpacket: 16 [ 494.271582][ T9439] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 494.280839][ T9439] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.303597][ T9439] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.326782][ T9439] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 494.346993][ T9439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.375315][ T9439] usb 3-1: Product: syz [ 494.385164][ T9439] usb 3-1: Manufacturer: syz [ 494.394740][ T9439] usb 3-1: SerialNumber: syz [ 494.457547][ T5939] usb 4-1: USB disconnect, device number 54 [ 494.665322][ T5827] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 494.676356][ T5827] asix 5-1:0.0: probe with driver asix failed with error -71 [ 494.692200][ T5827] usb 5-1: USB disconnect, device number 59 [ 494.818154][ T9439] usb 3-1: 0:2 : does not exist [ 495.437788][ T9439] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 495.506484][ T9439] usb 3-1: USB disconnect, device number 59 [ 496.415037][ T5910] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 496.601786][ T5910] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 496.612230][ T9439] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 496.620011][ T5910] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 496.635474][ T5910] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 496.646280][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.788353][ T9439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.806325][ T9439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.819523][ T9439] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 496.833244][ T9439] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.842806][ T9439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.864854][ T9439] usb 4-1: config 0 descriptor?? [ 496.875875][ T5910] usb 1-1: GET_CAPABILITIES returned 0 [ 496.881435][ T5910] usbtmc 1-1:16.0: can't read capabilities [ 496.985053][ T9433] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 497.103680][ T1212] usb 1-1: USB disconnect, device number 57 [ 497.115000][ T5939] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 497.166838][ T9433] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.185371][ T9433] usb 2-1: config 0 interface 0 has no altsetting 0 [ 497.205107][ T9433] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 497.234718][ T9433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.255029][ T9433] usb 2-1: config 0 descriptor?? [ 497.287199][ T5939] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 497.318071][ T9439] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 497.322494][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.368794][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.394990][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 497.429129][ T5939] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 497.445040][ T5939] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 497.469067][ T5939] usb 3-1: Manufacturer: syz [ 497.484670][ T5939] usb 3-1: config 0 descriptor?? [ 497.546954][ T9439] usb 4-1: USB disconnect, device number 55 [ 497.695205][ T1212] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 497.706769][ T9433] magicmouse 0003:05AC:0269.003A: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 497.855082][ T1212] usb 5-1: Using ep0 maxpacket: 8 [ 497.862882][ T1212] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.873659][ T1212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.883810][ T1212] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.899550][ T24] usb 2-1: USB disconnect, device number 58 [ 497.907971][ T1212] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.933385][ T5939] appleir 0003:05AC:8243.003B: unknown main item tag 0x0 [ 497.943508][ T1212] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 497.953700][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.971087][ T5939] appleir 0003:05AC:8243.003B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 498.203563][ T1212] usb 5-1: GET_CAPABILITIES returned 0 [ 498.211610][ T1212] usbtmc 5-1:16.0: can't read capabilities [ 498.223722][ T24] usb 3-1: USB disconnect, device number 60 [ 498.437836][ T1212] usb 5-1: USB disconnect, device number 60 [ 498.657238][T21383] netlink: 'syz.3.4910': attribute type 10 has an invalid length. [ 499.032322][T21399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4918'. [ 499.182658][T21408] netlink: 'syz.2.4923': attribute type 1 has an invalid length. [ 499.190884][T21408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.760168][T21423] syzkaller1: entered promiscuous mode [ 499.771485][T21423] syzkaller1: entered allmulticast mode [ 499.865331][ T9433] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 500.019641][T21432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 500.037996][ T9433] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 500.055130][ T9433] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 500.069325][ T9433] usb 2-1: config 0 interface 0 has no altsetting 0 [ 500.091826][ T9433] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 500.101161][ T5910] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 500.117996][ T9433] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 500.135134][ T9433] usb 2-1: Product: syz [ 500.145348][ T9433] usb 2-1: Manufacturer: syz [ 500.155235][ T9433] usb 2-1: SerialNumber: syz [ 500.172085][ T9433] usb 2-1: config 0 descriptor?? [ 500.185531][ T9433] hub 2-1:0.0: bad descriptor, ignoring hub [ 500.201874][ T9433] hub 2-1:0.0: probe with driver hub failed with error -5 [ 500.216047][ T9433] usb 2-1: selecting invalid altsetting 0 [ 500.258123][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.296695][ T5910] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 500.307199][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.316441][ T5910] usb 1-1: Product: syz [ 500.335318][ T5910] usb 1-1: Manufacturer: syz [ 500.351520][ T5910] usb 1-1: SerialNumber: syz [ 500.396029][ T5910] usb 1-1: config 0 descriptor?? [ 500.425121][ T5827] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 500.434207][ T5910] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 500.508482][ T9433] usb 2-1: USB disconnect, device number 59 [ 500.620362][ T5827] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.664024][ T5827] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.696875][ T5827] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 500.719637][ T5827] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 500.760356][ T5827] usb 3-1: SerialNumber: syz [ 500.923692][T21453] loop8: detected capacity change from 0 to 8 [ 500.934299][T21453] Dev loop8: unable to read RDB block 8 [ 500.940378][T21453] loop8: unable to read partition table [ 500.946987][T21453] loop8: partition table beyond EOD, truncated [ 500.953442][T21453] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 500.975326][ T9433] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 501.010330][ T5827] usb 3-1: 0:2 : does not exist [ 501.049761][ T5910] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 501.061967][ T5910] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 501.073996][ T5827] usb 3-1: USB disconnect, device number 61 [ 501.154711][ T5910] usb 1-1: USB disconnect, device number 58 [ 501.180969][ T9433] usb 2-1: config 1 interface 0 has no altsetting 0 [ 501.206250][ T9433] usb 2-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 501.219723][ T9433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.233103][ T9433] usb 2-1: Product: syz [ 501.238527][ T9433] usb 2-1: Manufacturer: syz [ 501.249528][ T9433] usb 2-1: SerialNumber: syz [ 501.317812][T21457] syzkaller1: entered promiscuous mode [ 501.347020][T21457] syzkaller1: entered allmulticast mode [ 501.478895][T21462] ipvlan2: entered allmulticast mode [ 501.501306][T21462] macvlan1: entered allmulticast mode [ 501.507169][T21462] veth1_vlan: entered allmulticast mode [ 501.507577][ T9433] usbhid 2-1:1.0: can't add hid device: -71 [ 501.515691][T21462] team0: Device ipvlan2 failed to register rx_handler [ 501.539300][ T9433] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 501.588044][ T9433] usb 2-1: USB disconnect, device number 60 [ 501.649560][T21464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4945'. [ 501.709660][T21468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4947'. [ 501.801466][T21472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4949'. [ 501.813553][T21474] netlink: 27 bytes leftover after parsing attributes in process `syz.0.4950'. [ 501.972402][T21484] input: syz0 as /devices/virtual/input/input84 [ 502.068445][ T9433] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 502.235168][ T9433] usb 4-1: Using ep0 maxpacket: 16 [ 502.243041][ T9433] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.264786][ T9433] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.281632][ T9433] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.293714][ T9433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.302181][ T9433] usb 4-1: Product: syz [ 502.306750][ T9433] usb 4-1: Manufacturer: syz [ 502.311481][ T9433] usb 4-1: SerialNumber: syz [ 502.368649][ T30] audit: type=1326 audit(1760700704.400:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21495 comm="syz.1.4959" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd26b18efc9 code=0x0 [ 502.395838][ T1212] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 502.424768][T21498] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4960'. [ 502.531237][ T9433] usb 4-1: 0:2 : does not exist [ 502.545521][ T9433] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 502.550103][ T1212] usb 1-1: Using ep0 maxpacket: 16 [ 502.564606][ T1212] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.577121][ T1212] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.581578][ T9433] usb 4-1: USB disconnect, device number 56 [ 502.598880][ T1212] usb 1-1: config 0 interface 0 has no altsetting 0 [ 502.607042][ T1212] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 502.616792][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.636434][ T1212] usb 1-1: config 0 descriptor?? [ 502.682715][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.065860][ T1212] apple 0003:05AC:0247.003C: fixing up Magic Keyboard JIS report descriptor [ 503.078971][ T1212] apple 0003:05AC:0247.003C: unknown main item tag 0x0 [ 503.087206][ T1212] apple 0003:05AC:0247.003C: unknown main item tag 0x0 [ 503.096198][ T1212] apple 0003:05AC:0247.003C: unknown main item tag 0x0 [ 503.109769][ T1212] apple 0003:05AC:0247.003C: unknown main item tag 0x0 [ 503.117335][ T1212] apple 0003:05AC:0247.003C: unknown main item tag 0x0 [ 503.126083][ T1212] apple 0003:05AC:0247.003C: unknown main item tag 0x0 [ 503.133211][ T1212] apple 0003:05AC:0247.003C: unknown main item tag 0x0 [ 503.143088][ T1212] apple 0003:05AC:0247.003C: unknown main item tag 0x0 [ 503.150776][ T1212] apple 0003:05AC:0247.003C: unknown main item tag 0x0 [ 503.158067][ T1212] apple 0003:05AC:0247.003C: unknown main item tag 0x0 [ 503.182815][ T1212] apple 0003:05AC:0247.003C: unexpected long global item [ 503.191630][ T1212] apple 0003:05AC:0247.003C: parse failed [ 503.198907][ T1212] apple 0003:05AC:0247.003C: probe with driver apple failed with error -22 [ 503.311184][ T1212] usb 1-1: USB disconnect, device number 59 [ 503.546081][ T9433] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 503.695230][ T5827] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 503.704833][ T9433] usb 4-1: config 0 has no interfaces? [ 503.713923][ T9433] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 503.723314][ T9433] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.731517][ T9433] usb 4-1: Product: syz [ 503.735782][ T9433] usb 4-1: Manufacturer: syz [ 503.740386][ T9433] usb 4-1: SerialNumber: syz [ 503.747804][ T9433] usb 4-1: config 0 descriptor?? [ 503.755207][ T1212] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 503.847400][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.859374][ T5827] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 503.868702][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.880184][ T5827] usb 5-1: config 0 descriptor?? [ 503.930318][ T1212] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 503.940070][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.955189][ T1212] usb 3-1: config 0 descriptor?? [ 503.977238][ T1212] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 504.008084][ T24] usb 4-1: USB disconnect, device number 57 [ 504.096164][ T5827] usbhid 5-1:0.0: can't add hid device: -71 [ 504.102242][ T5827] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 504.114406][ T5827] usb 5-1: USB disconnect, device number 61 [ 504.205198][ T9433] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 504.369551][ T1212] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 504.387439][ T9433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.398774][ T9433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.412708][ T9433] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 504.425851][ T9433] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 504.435026][ T9433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.446390][ T9433] usb 1-1: config 0 descriptor?? [ 504.535851][ T5827] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 504.695252][ T5827] usb 5-1: Using ep0 maxpacket: 32 [ 504.708389][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.730591][ T5827] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 504.745066][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 504.753022][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.775812][ T5827] usb 5-1: config 0 descriptor?? [ 504.784421][ T1212] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 504.793301][ T5827] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 504.817575][ T5827] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 504.888856][ T9433] plantronics 0003:047F:FFFF.003D: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 504.911602][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 504.927056][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 504.941795][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 504.953377][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 504.965775][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 504.977598][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 504.993768][ T1212] usb 3-1: USB disconnect, device number 62 [ 505.012242][ T24] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 505.031776][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.042558][ T24] usb 2-1: Product: syz [ 505.047255][ T24] usb 2-1: Manufacturer: syz [ 505.052128][ T24] usb 2-1: SerialNumber: syz [ 505.067785][ T24] usb 2-1: config 0 descriptor?? [ 505.101555][ T9433] usb 1-1: USB disconnect, device number 60 [ 505.201446][ T5827] usb 5-1: USB disconnect, device number 62 [ 505.222239][ T5827] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 505.506488][ T24] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 505.512624][ T24] input input85: Device does not respond to id packet M [ 505.536017][ T24] iforce 2-1:0.0: usb_submit_urb failed: -32 [ 505.542126][ T24] input input85: Device does not respond to id packet P [ 505.659655][T21561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.756535][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 505.766793][ T24] input input85: Device does not respond to id packet N [ 505.781153][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 505.798580][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 505.809695][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 505.824113][ T24] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 505.844596][ T24] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input85 [ 505.894336][ T24] usb 2-1: USB disconnect, device number 61 [ 506.065083][ T1212] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 506.250397][ T1212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.271888][ T1212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 506.316026][ T1212] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 506.346394][ T1212] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 506.375576][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.410248][ T1212] usb 1-1: config 0 descriptor?? [ 506.731931][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.738456][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.814746][T21604] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5008'. [ 506.844427][ T1212] plantronics 0003:047F:FFFF.003E: reserved main item tag 0xd [ 506.871431][ T1212] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 507.146906][ T1212] usb 1-1: USB disconnect, device number 61 [ 507.408279][T21627] syzkaller1: entered promiscuous mode [ 507.413825][T21627] syzkaller1: entered allmulticast mode [ 508.105292][ T1212] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 508.270399][ T1212] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 508.279090][ T1212] usb 4-1: config 0 has no interface number 0 [ 508.289624][ T1212] usb 4-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 508.311691][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.333807][ T1212] usb 4-1: config 0 descriptor?? [ 508.354837][ T1212] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 508.363497][ T1212] usb 4-1: setting power ON [ 508.368690][ T1212] dvb-usb: bulk message failed: -22 (2/0) [ 508.515195][ T1212] dvb-usb: bulk message failed: -22 (1/0) [ 508.525461][ T9433] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 508.628159][ T1212] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 508.656248][T21685] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 508.670405][ T1212] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 508.687881][ T9433] usb 1-1: Using ep0 maxpacket: 16 [ 508.688582][ T1212] dvb_usb_cxusb 4-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 508.707351][ T9433] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 508.716863][ T1212] usb 4-1: USB disconnect, device number 58 [ 508.735027][ T9433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.757299][ T9433] usb 1-1: Product: syz [ 508.761555][ T9433] usb 1-1: Manufacturer: syz [ 508.778613][ T9433] usb 1-1: SerialNumber: syz [ 508.794757][ T9433] usb 1-1: config 0 descriptor?? [ 508.808807][ T9433] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 508.819718][ T9433] usb 1-1: Detected FT232H [ 509.014844][ T9433] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 509.377794][T21701] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.5052'. [ 509.388417][T21701] openvswitch: netlink: Key 0 has unexpected len 37 expected 0 [ 509.432159][ T9433] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 509.637955][ T1212] usb 1-1: USB disconnect, device number 62 [ 509.676634][ T1212] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 509.712501][ T1212] ftdi_sio 1-1:0.0: device disconnected [ 510.818529][T21732] netlink: 'syz.0.5065': attribute type 3 has an invalid length. [ 510.826843][T21732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5065'. [ 510.830118][ T30] audit: type=1326 audit(1760700712.860:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21730 comm="syz.3.5064" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc27e38efc9 code=0x0 [ 511.821307][T21761] loop4: detected capacity change from 0 to 2560 [ 512.215222][ T1212] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 512.389495][ T1212] usb 2-1: Using ep0 maxpacket: 8 [ 512.407333][ T1212] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 512.415857][ T1212] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 512.437827][ T1212] usb 2-1: config 0 has no interface number 0 [ 512.454994][ T1212] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 512.475065][ T1212] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 512.495021][ T1212] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 512.521638][ T1212] usb 2-1: config 0 interface 52 has no altsetting 0 [ 512.538774][ T1212] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 512.548505][ T1212] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 512.560875][ T1212] usb 2-1: Product: syz [ 512.566320][ T1212] usb 2-1: SerialNumber: syz [ 512.577717][ T1212] usb 2-1: config 0 descriptor?? [ 512.801356][ T1212] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input86 [ 513.030968][ T1212] usb 2-1: USB disconnect, device number 62 [ 513.037039][ C1] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 513.470690][T21799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5088'. [ 513.483892][T21799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5088'. [ 513.895445][ T9433] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 514.059429][ T9433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.075081][ T9433] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 514.088019][ T9433] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 514.097497][ T9433] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 514.108275][ T9433] usb 4-1: Manufacturer: syz [ 514.117774][ T9433] usb 4-1: config 0 descriptor?? [ 514.260283][T21825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5100'. [ 514.773363][T21855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 515.150820][ T9433] uclogic 0003:256C:006D.003F: failed retrieving string descriptor #100: -71 [ 515.289040][ T9433] uclogic 0003:256C:006D.003F: failed retrieving pen parameters: -71 [ 515.327706][ T9433] uclogic 0003:256C:006D.003F: failed probing pen v1 parameters: -71 [ 515.340595][ T9433] uclogic 0003:256C:006D.003F: failed probing parameters: -71 [ 515.355370][ T9433] uclogic 0003:256C:006D.003F: probe with driver uclogic failed with error -71 [ 515.379590][ T9433] usb 4-1: USB disconnect, device number 59 [ 516.755311][ T1212] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 516.764979][ T5939] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 516.928651][ T1212] usb 5-1: Using ep0 maxpacket: 32 [ 516.935955][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.957633][ T1212] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 516.969292][ T60] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 516.995435][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.015064][ T5939] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 517.024370][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.044616][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.055713][ T1212] usb 5-1: config 0 descriptor?? [ 517.075958][ T5939] usb 2-1: config 0 descriptor?? [ 517.215052][ T5827] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 517.275716][ T1212] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 517.327613][ T1212] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.345885][ T1212] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 517.363419][ T1212] usb 5-1: media controller created [ 517.390696][ T5827] usb 1-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 517.412691][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.441963][ T5827] usb 1-1: config 0 descriptor?? [ 517.453307][ T1212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.471485][ T5827] gspca_main: spca508-2.14.0 probing 8086:0110 [ 517.516211][ T5939] hid_parser_main: 826 callbacks suppressed [ 517.516248][ T5939] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 517.535636][ T1212] az6027: usb out operation failed. (-71) [ 517.552068][ T1212] az6027: usb out operation failed. (-71) [ 517.563009][ T1212] stb0899_attach: Driver disabled by Kconfig [ 517.570082][ T5939] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 517.585323][ T1212] az6027: no front-end attached [ 517.585323][ T1212] [ 517.595134][ T1212] az6027: usb out operation failed. (-71) [ 517.612641][ T5939] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0040/input/input87 [ 517.624233][ T1212] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 517.643343][ T1212] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input88 [ 517.690873][ T5827] gspca_spca508: reg_read err -32 [ 517.723939][ T5827] gspca_spca508: reg_read err -32 [ 517.734670][ T5827] gspca_spca508: reg_read err -32 [ 517.737283][ T1212] dvb-usb: schedule remote query interval to 400 msecs. [ 517.747995][ T5939] cm6533_jd 0003:0D8C:0022.0040: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 517.779214][ T1212] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 517.832640][ T5939] usb 2-1: USB disconnect, device number 63 [ 517.839317][ T1212] usb 5-1: USB disconnect, device number 63 [ 517.968205][ T5827] gspca_spca508: reg_read err -71 [ 517.979331][ T5827] gspca_spca508: reg write: error -71 [ 517.995414][ T5827] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 518.070567][T21930] fido_id[21930]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 518.087674][ T5827] usb 1-1: USB disconnect, device number 63 [ 518.172996][ T1212] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 518.335873][T21937] syzkaller1: entered promiscuous mode [ 518.341440][T21937] syzkaller1: entered allmulticast mode [ 518.854999][ T1212] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 519.004981][ T1212] usb 2-1: Using ep0 maxpacket: 16 [ 519.013351][ T1212] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 519.030338][ T1212] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 519.055206][ T1212] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 519.068787][ T1212] usb 2-1: config 1 interface 0 has no altsetting 0 [ 519.078224][ T1212] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 519.094735][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.104190][ T1212] usb 2-1: Product: syz [ 519.109198][ T1212] usb 2-1: Manufacturer: syz [ 519.114583][ T1212] usb 2-1: SerialNumber: syz [ 519.292543][T21955] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 519.335086][ T1212] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 519.663669][T21978] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 519.901438][ T5910] usb 2-1: USB disconnect, device number 64 [ 519.913967][ T5910] usblp0: removed [ 520.641520][ T1212] IPVS: starting estimator thread 0... [ 520.734991][T22009] IPVS: using max 26 ests per chain, 62400 per kthread [ 520.895335][T22018] input: syz1 as /devices/virtual/input/input89 [ 521.680134][T22056] tun0: tun_chr_ioctl cmd 1074025675 [ 521.692726][T22056] tun0: persist enabled [ 521.702278][T22056] tun0: tun_chr_ioctl cmd 1074025675 [ 521.723953][T22056] tun0: persist enabled [ 522.220594][T22083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5206'. [ 522.234303][T22083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5206'. [ 522.277818][ T5827] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 522.438037][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 522.455321][ T5910] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 522.465205][ T5827] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 522.485400][ T5827] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 522.504817][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 522.517856][ T5827] usb 4-1: Product: syz [ 522.522087][ T5827] usb 4-1: Manufacturer: syz [ 522.527024][ T5827] usb 4-1: SerialNumber: syz [ 522.534512][ T5827] usb 4-1: config 0 descriptor?? [ 522.535352][ T1212] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 522.541328][T22075] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 522.557736][ T5827] hub 4-1:0.0: bad descriptor, ignoring hub [ 522.563710][ T5827] hub 4-1:0.0: probe with driver hub failed with error -5 [ 522.637298][ T5910] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 522.651882][ T5910] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 522.667960][ T5910] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 522.677297][ T5910] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 522.688566][ T5910] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 522.701974][ T5910] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 522.711476][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 522.725440][ T5910] usb 1-1: Product: syz [ 522.725707][ T1212] usb 3-1: Using ep0 maxpacket: 8 [ 522.729684][ T5910] usb 1-1: Manufacturer: syz [ 522.743748][ T1212] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 522.757820][ T1212] usb 3-1: config 0 has no interface number 0 [ 522.765791][ T5910] cdc_wdm 1-1:1.0: skipping garbage [ 522.767622][ T1212] usb 3-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 522.781390][ T5910] cdc_wdm 1-1:1.0: skipping garbage [ 522.786157][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.799382][ T1212] usb 3-1: Product: syz [ 522.803602][ T1212] usb 3-1: Manufacturer: syz [ 522.809777][ T1212] usb 3-1: SerialNumber: syz [ 522.814153][ T5910] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 522.832614][ T1212] usb 3-1: config 0 descriptor?? [ 522.845240][ T5910] cdc_wdm 1-1:1.0: Unknown control protocol [ 522.852162][ T1212] redrat3 3-1:0.31: Couldn't find all endpoints [ 522.968627][T22106] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 523.070307][ T5910] usb 3-1: USB disconnect, device number 63 [ 523.247320][T22075] usb 4-1: reset high-speed USB device number 60 using dummy_hcd [ 523.417376][T22075] usb 4-1: device firmware changed [ 523.436874][T22118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 523.455748][ T1212] usb 4-1: USB disconnect, device number 60 [ 523.464822][ T5827] usb 1-1: USB disconnect, device number 64 [ 523.646169][ T1212] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 523.672067][T22122] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5223'. [ 523.835195][ T1212] usb 4-1: Using ep0 maxpacket: 32 [ 523.843218][ T1212] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 523.869954][ T1212] usb 4-1: string descriptor 0 read error: -22 [ 523.882255][ T1212] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 523.897514][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 523.927378][ T1212] usb 4-1: config 0 descriptor?? [ 523.956274][T22102] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 523.970266][ T1212] hub 4-1:0.0: bad descriptor, ignoring hub [ 523.984635][ T1212] hub 4-1:0.0: probe with driver hub failed with error -5 [ 524.305618][ T5910] usb 4-1: USB disconnect, device number 61 [ 524.583562][T22158] input: syz1 as /devices/virtual/input/input90 [ 524.695006][ T1212] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 524.835502][ T5910] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 524.848117][ T1212] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 524.861449][ T1212] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 524.873540][ T1212] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 524.887346][ T1212] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.896677][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.904711][ T1212] usb 5-1: Product: syz [ 524.909614][ T1212] usb 5-1: Manufacturer: syz [ 524.914771][ T1212] usb 5-1: SerialNumber: syz [ 525.007072][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.019287][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.029361][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 525.042490][ T5910] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.052041][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.063092][ T5910] usb 3-1: config 0 descriptor?? [ 525.115075][ T5923] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 525.215093][ T5894] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 525.268038][ T5923] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 525.277711][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.290783][ T5923] usb 2-1: config 0 descriptor?? [ 525.376028][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 525.383834][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.398483][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.410765][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 525.422510][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 525.432505][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 525.447649][ T5894] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 525.457645][ T5894] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 525.466397][ T5894] usb 4-1: Manufacturer: syz [ 525.474734][ T5894] usb 4-1: config 0 descriptor?? [ 525.518034][ T5910] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 525.742951][ T5923] chicony 0003:04F2:1236.0042: unknown main item tag 0x0 [ 525.750886][ T5923] chicony 0003:04F2:1236.0042: unknown main item tag 0x0 [ 525.758847][ T5923] chicony 0003:04F2:1236.0042: unknown main item tag 0x0 [ 525.767872][ T5894] rc_core: IR keymap rc-hauppauge not found [ 525.768083][ T5923] chicony 0003:04F2:1236.0042: unknown main item tag 0x0 [ 525.773993][ T5894] Registered IR keymap rc-empty [ 525.781108][ T5923] chicony 0003:04F2:1236.0042: unknown main item tag 0x0 [ 525.795894][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 525.804089][ T5923] chicony 0003:04F2:1236.0042: hidraw1: USB HID v1.01 Device [HID 04f2:1236] on usb-dummy_hcd.1-1/input0 [ 525.825659][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 525.849251][ T5894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 525.872186][ T5894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input91 [ 525.891696][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 525.926890][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 525.945391][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 525.952757][ T1212] cdc_ncm 5-1:1.0: bind() failure [ 525.977370][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 525.993071][ T5923] usb 2-1: USB disconnect, device number 65 [ 526.003984][ T1212] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 526.015429][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.044827][ T1212] usb 5-1: USB disconnect, device number 64 [ 526.055254][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.077715][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.105372][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.135298][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.165730][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.185226][ T5894] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 526.207697][ T5894] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 526.217124][ T5894] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 526.230862][ T5894] usb 4-1: USB disconnect, device number 62 [ 526.307208][ T5910] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 526.465078][ T5910] usb 1-1: Using ep0 maxpacket: 8 [ 526.472722][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 526.484545][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 526.495126][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 526.508841][ T5910] usb 1-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 526.518405][ T5910] usb 1-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 526.528953][ T5910] usb 1-1: Product: syz [ 526.533168][ T5910] usb 1-1: Manufacturer: syz [ 526.537878][ T5910] usb 1-1: SerialNumber: syz [ 526.546191][ T5910] usb 1-1: config 0 descriptor?? [ 526.569070][ T5910] smsusb:smsusb_probe: board id=2, interface number 0 [ 526.586072][ T5910] smsusb:smsusb_probe: Device initialized with return code -19 [ 526.796482][ T5910] usb 1-1: USB disconnect, device number 65 [ 526.826955][ C1] plantronics 0003:047F:FFFF.0041: usb_submit_urb(ctrl) failed: -1 [ 527.205763][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 527.216955][T22218] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5265'. [ 527.295735][ T5910] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 527.495969][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 527.526302][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.552843][ T5910] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.584251][ T5910] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 527.613689][ T5910] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 527.637052][ T5923] usb 3-1: USB disconnect, device number 64 [ 527.661525][ T5910] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 527.694301][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 527.728927][ T5910] usb 4-1: SerialNumber: syz [ 527.757681][ T5910] hub 4-1:1.0: bad descriptor, ignoring hub [ 527.772617][ T5910] hub 4-1:1.0: probe with driver hub failed with error -5 [ 527.785558][ T5910] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 528.155320][ T5923] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 528.172810][T22203] raw-gadget.0 gadget.3: fail, usb_ep_set_halt returned -11 [ 528.295364][ T5910] usb 4-1: USB disconnect, device number 63 [ 528.325326][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 528.345597][ T5923] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 528.364517][ T5923] usb 2-1: config 0 has no interface number 0 [ 528.384388][ T5923] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 528.398476][ T5923] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 528.408519][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.426040][ T5923] usb 2-1: config 0 descriptor?? [ 528.448931][ T5923] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 529.078426][ T5894] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 529.213031][ T5923] usb 2-1: USB disconnect, device number 66 [ 529.239527][ T5910] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 529.260773][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.291591][ T5894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.313471][ T5894] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 529.325000][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 529.333094][ T5894] usb 5-1: SerialNumber: syz [ 529.437004][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 529.480820][ T5910] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 529.498081][ T5910] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 529.525441][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 529.555101][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 529.565448][T22295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5297'. [ 529.575211][ T5910] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.616096][ T5894] usb 5-1: 0:2 : does not exist [ 529.626850][ T5910] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 529.636213][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.683240][ T5894] usb 5-1: USB disconnect, device number 65 [ 529.752177][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.879896][ T5910] usb 4-1: usb_control_msg returned -32 [ 529.887923][ T5910] usbtmc 4-1:16.0: can't read capabilities [ 530.246351][T22307] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 530.468150][ T5910] usb 4-1: USB disconnect, device number 64 [ 531.954475][T22357] veth0: entered promiscuous mode [ 531.973974][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5323'. [ 532.497204][T22368] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5328'. [ 532.704027][T22378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 532.885682][ T30] audit: type=1326 audit(1760700734.920:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22382 comm="syz.4.5335" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb39b18efc9 code=0x0 [ 533.065071][ T5923] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 533.225002][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 533.248284][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.269468][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.297513][ T5923] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 533.321230][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.345788][ T5923] usb 1-1: config 0 descriptor?? [ 533.545035][ T1212] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 533.715080][ T1212] usb 3-1: Using ep0 maxpacket: 16 [ 533.730164][ T1212] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 533.753453][ T1212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.773806][ T1212] usb 3-1: Product: syz [ 533.796921][ T1212] usb 3-1: Manufacturer: syz [ 533.801601][ T1212] usb 3-1: SerialNumber: syz [ 533.807132][ T5923] savu 0003:1E7D:2D5A.0043: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 533.837913][ T1212] usb 3-1: config 0 descriptor?? [ 534.083170][ T5923] usb 1-1: USB disconnect, device number 66 [ 534.254704][ T1212] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 534.281315][ T1212] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 534.306099][ T1212] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 534.333538][ T1212] usb 3-1: media controller created [ 534.378017][ T1212] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 534.987901][ T1212] zl10353_read_register: readreg error (reg=127, ret==0) [ 534.995149][T22392] dtv5100: wlen = 0, aborting. [ 535.016393][ T1212] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 535.048364][ T1212] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 535.105179][ T1212] usb 3-1: USB disconnect, device number 65 [ 535.247456][ T1212] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 535.352681][T22422] input: syz1 as /devices/virtual/input/input92 [ 535.565623][T22425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5352'. [ 535.935344][ T1212] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 536.105308][ T1212] usb 4-1: Using ep0 maxpacket: 8 [ 536.117473][ T1212] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.137229][ T1212] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 536.158990][ T1212] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 536.178118][ T1212] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.192414][ T1212] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 536.204591][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.424592][ T1212] usb 4-1: GET_CAPABILITIES returned 0 [ 536.431207][ T1212] usbtmc 4-1:16.0: can't read capabilities [ 536.638838][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.648402][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.657540][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.666667][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.725913][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.735086][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.744205][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.753765][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.762903][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.772029][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.781145][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.798565][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.807744][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.816866][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.825990][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 536.845367][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 536.859383][ T5894] usb 4-1: USB disconnect, device number 65 [ 537.395331][T22448] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 538.448350][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 538.505054][ T1212] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 538.628423][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.643462][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.665068][ T1212] usb 3-1: Using ep0 maxpacket: 32 [ 538.673941][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.686132][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.703577][ T1212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.713637][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.723283][ T1212] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 538.745263][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.753469][ T1212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.765115][ T24] usb 4-1: config 0 descriptor?? [ 538.798137][ T1212] usb 3-1: config 0 descriptor?? [ 538.832906][ T1212] hub 3-1:0.0: USB hub found [ 539.047338][ T1212] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 539.202022][ T24] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 539.210618][ T24] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 539.220019][ T24] plantronics 0003:047F:FFFF.0044: unknown main item tag 0x0 [ 539.255620][ T24] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 539.480387][ T5894] usb 4-1: USB disconnect, device number 66 [ 539.546603][ T1212] hid-generic 0003:046D:C31C.0045: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 539.878794][ T1212] usb 3-1: USB disconnect, device number 66 [ 540.113344][T22507] kvm: kvm [22506]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 540.123042][T22507] kvm: kvm [22506]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 540.135741][T22507] kvm: kvm [22506]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 540.149409][T22507] kvm: kvm [22506]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 540.159624][T22507] kvm: kvm [22506]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 540.173423][T22507] kvm_intel: kvm [22506]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 540.205141][ T24] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 540.325201][ T5894] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 540.375030][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 540.402143][ T24] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 540.425150][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.446846][ T24] usb 1-1: Product: syz [ 540.451103][ T24] usb 1-1: Manufacturer: syz [ 540.465073][ T24] usb 1-1: SerialNumber: syz [ 540.486537][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 540.491344][ T24] usb 1-1: config 0 descriptor?? [ 540.499173][ T5894] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.518517][ T24] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 540.520881][ T5894] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.560673][ T5894] usb 4-1: config 0 interface 0 has no altsetting 0 [ 540.568678][ T5894] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 540.588107][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.607861][ T5894] usb 4-1: config 0 descriptor?? [ 540.661006][ T43] kworker/1:1 (43) used greatest stack depth: 15864 bytes left [ 540.695059][ T5910] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 540.735596][ T24] gp8psk: usb in 128 operation failed. [ 540.746089][ T24] gp8psk: usb in 137 operation failed. [ 540.751636][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.776005][ T24] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 540.789532][ T24] usb 1-1: media controller created [ 540.827456][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.845164][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 540.860284][ T5910] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 540.870207][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.876561][ T24] gp8psk_fe: Frontend revision 1 attached [ 540.884058][ T24] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 540.885846][ T5910] usb 3-1: Product: syz [ 540.897021][ T5910] usb 3-1: Manufacturer: syz [ 540.902151][ T5910] usb 3-1: SerialNumber: syz [ 540.906211][ T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 540.912907][ T5910] usb 3-1: config 0 descriptor?? [ 540.935550][ T5910] gspca_main: se401-2.14.0 probing 047d:5003 [ 541.039309][ T5894] apple 0003:05AC:0247.0046: unexpected long global item [ 541.056822][ T5894] apple 0003:05AC:0247.0046: parse failed [ 541.072495][ T5894] apple 0003:05AC:0247.0046: probe with driver apple failed with error -22 [ 541.098638][ T24] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 541.128220][ T24] gp8psk: found Genpix USB device pID = 201 (hex) [ 541.252729][ T5894] usb 4-1: USB disconnect, device number 67 [ 541.328808][ T5910] gspca_se401: ExtraFeatures: 79 [ 541.333994][ T5910] gspca_se401: Frame size: 0x0 1/16th janggu [ 541.339850][ T24] usb 1-1: USB disconnect, device number 67 [ 541.532660][ T24] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 541.559457][ T5910] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input93 [ 541.615441][ T5910] usb 3-1: USB disconnect, device number 67 [ 541.903287][T22542] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.189317][T22554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.277824][T22561] netlink: 'syz.2.5408': attribute type 12 has an invalid length. [ 542.282735][T22562] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.290577][T22561] netlink: 'syz.2.5408': attribute type 29 has an invalid length. [ 542.309650][T22561] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5408'. [ 542.320327][T22561] netlink: 'syz.2.5408': attribute type 2 has an invalid length. [ 542.385350][ T24] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 542.445056][ T5910] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 542.544998][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 542.552643][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 542.568595][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 542.580272][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 542.590394][ T24] usb 1-1: config 1 has no interface number 0 [ 542.600030][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 542.608074][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 542.614188][ T24] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 542.618885][ T5910] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 542.638685][ T5910] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 542.649143][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 542.659622][ T5910] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 542.662926][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 542.672026][ T5910] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.692251][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.704405][ T5910] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 542.713837][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.721421][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 542.933110][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 542.980126][ T5910] usb 4-1: GET_CAPABILITIES returned 0 [ 542.999113][ T5910] usbtmc 4-1:16.0: can't read capabilities [ 543.275048][ T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 543.334304][T22584] input: syz0 as /devices/virtual/input/input94 [ 543.335022][T22557] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 543.349668][ T5910] usb 4-1: USB disconnect, device number 68 [ 543.399608][ T5923] usb 1-1: USB disconnect, device number 68 [ 543.429436][ T5923] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 543.448755][ T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 543.475469][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 543.503823][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 543.534176][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 543.561655][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 543.571108][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.615039][ T24] usb 2-1: config 0 descriptor?? [ 544.069268][ T24] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 544.096014][ T24] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 544.103500][ T24] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 544.129650][ T24] plantronics 0003:047F:FFFF.0047: unknown main item tag 0x0 [ 544.171561][ T24] plantronics 0003:047F:FFFF.0047: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 545.985435][ T5894] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 546.147057][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.174143][ T5894] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 546.196593][ T5923] usb 2-1: USB disconnect, device number 67 [ 546.202884][ T5894] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 546.225185][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.253085][ T5894] usb 1-1: Product: syz [ 546.275328][ T5894] usb 1-1: Manufacturer: syz [ 546.279999][ T5894] usb 1-1: SerialNumber: syz [ 546.396759][T22663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5452'. [ 546.514226][T22644] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 547.147341][T22644] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 547.401090][ T5894] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 547.407836][ T5894] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 547.422248][ T5894] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 547.613238][ T5894] cdc_ncm 1-1:1.0: setting tx_max = 88 [ 547.668450][ T5894] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 547.734108][ T5894] usb 1-1: USB disconnect, device number 69 [ 547.746499][ T5894] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 548.326089][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 549.983558][T22581] Set syz1 is full, maxelem 65536 reached [ 550.928622][ T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 551.120826][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 551.153498][ T24] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 551.185116][ T24] usb 3-1: config 0 has no interface number 0 [ 551.191471][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 551.246617][ T24] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 551.275802][ T24] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 551.306713][ T24] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 551.323223][ T24] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 551.337926][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.356420][ T24] usb 3-1: config 0 descriptor?? [ 551.372212][ T24] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 553.673945][ T24] usb 3-1: USB disconnect, device number 68 [ 553.695655][ T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 553.753208][T22843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5520'. [ 555.120408][T22894] netlink: 'syz.2.5537': attribute type 1 has an invalid length. [ 555.170447][T22894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 555.239130][T22896] bond1: (slave geneve2): making interface the new active one [ 555.296112][T22896] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 555.341436][T14737] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.387921][T14737] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.423086][T14737] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.455265][T14737] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.651450][ T5910] hid-generic 0000:0003:0001.0048: unknown main item tag 0x0 [ 555.665084][ T5910] hid-generic 0000:0003:0001.0048: unknown main item tag 0x0 [ 555.686573][ T5910] hid-generic 0000:0003:0001.0048: hidraw0: HID v0.03 Device [syz0] on syz1 [ 555.859270][T22909] fido_id[22909]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 556.644607][T22944] syz_tun: entered promiscuous mode [ 556.658353][T22944] syz_tun: left promiscuous mode [ 556.813468][T22954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5556'. [ 556.869708][T22954] vxlan0: entered promiscuous mode [ 556.881045][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.920868][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.946544][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.975876][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.037934][T22965] loop7: detected capacity change from 0 to 7 [ 557.364028][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 557.373919][ C1] buffer_io_error: 20 callbacks suppressed [ 557.373938][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 560.029255][T23026] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5586'. [ 560.038121][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880290c5400: rx timeout, send abort [ 560.048966][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880290c4400: rx timeout, send abort [ 560.057825][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880290c5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 560.068529][T23026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5586'. [ 560.074254][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880290c4400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 560.465043][ T5910] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 560.615087][ T5910] usb 1-1: Using ep0 maxpacket: 32 [ 560.631555][ T5910] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 560.652879][ T5910] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 560.661829][ T5910] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 560.676029][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 560.686241][ T5910] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 560.699428][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 560.713412][ T5910] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 560.744942][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.769212][ T5910] usb 1-1: config 0 descriptor?? [ 561.017237][ T5910] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 561.135103][ T5894] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 561.227957][ C0] usblp0: nonzero read bulk status received: -71 [ 561.235076][ T5910] usb 1-1: USB disconnect, device number 70 [ 561.298158][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 561.306585][ T5894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.317623][ T5894] usb 2-1: config 0 has no interfaces? [ 561.330197][ T5894] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 561.341160][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.350116][ T5894] usb 2-1: Product: syz [ 561.354665][ T5894] usb 2-1: Manufacturer: syz [ 561.359552][ T5894] usb 2-1: SerialNumber: syz [ 561.379958][ T5894] usb 2-1: config 0 descriptor?? [ 561.450033][T23028] usblp0: removed [ 561.645201][T23053] netlink: 'syz.1.5596': attribute type 13 has an invalid length. [ 561.653380][T23053] netlink: 'syz.1.5596': attribute type 17 has an invalid length. [ 561.671421][T23053] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 561.695291][ T5910] usb 2-1: USB disconnect, device number 68 [ 562.605414][T23093] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5614'. [ 562.842583][T23106] netlink: 'syz.0.5618': attribute type 12 has an invalid length. [ 562.854419][T23106] netlink: 'syz.0.5618': attribute type 29 has an invalid length. [ 562.863607][T23106] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5618'. [ 562.877163][T23106] netlink: 'syz.0.5618': attribute type 1 has an invalid length. [ 562.908453][T23106] netlink: 47 bytes leftover after parsing attributes in process `syz.0.5618'. [ 563.393113][T23120] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5622'. [ 564.097246][T23137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5631'. [ 564.715036][ T5910] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 564.876776][ T5910] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 564.892013][ T5910] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 564.905479][ T5910] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 564.914741][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.036322][T23163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5641'. [ 565.134517][ T5910] usb 5-1: usb_control_msg returned -32 [ 565.140677][ T5910] usbtmc 5-1:16.0: can't read capabilities [ 565.395882][T23174] netlink: 'syz.3.5646': attribute type 15 has an invalid length. [ 565.404012][T23174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5646'. [ 565.424610][ T60] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 565.424626][T23174] netlink: 'syz.3.5646': attribute type 15 has an invalid length. [ 565.424659][T23174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5646'. [ 565.446978][ T60] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 565.462080][ T60] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 565.471543][ T60] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 565.737717][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880572f1c00: rx timeout, send abort [ 565.746428][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880572f1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 565.956479][ T30] audit: type=1326 audit(1760700767.990:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23199 comm="syz.0.5658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5132f8efc9 code=0x0 [ 567.192113][T23237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5673'. [ 567.307812][T23243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5676'. [ 567.540772][ T5910] usb 5-1: USB disconnect, device number 66 [ 568.165132][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 568.170355][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.179459][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.102470][T23286] netlink: 'syz.3.5693': attribute type 29 has an invalid length. [ 569.126721][T23286] netlink: 'syz.3.5693': attribute type 29 has an invalid length. [ 569.144609][T23286] netlink: 508 bytes leftover after parsing attributes in process `syz.3.5693'. [ 570.030357][ T24] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 570.085647][ T24] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 571.575241][ T5923] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 571.745705][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 571.758865][ T5923] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 571.775716][ T5923] usb 2-1: config 0 has no interface number 0 [ 571.797213][ T5923] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.822717][ T5923] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.846177][ T5923] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 571.873274][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.958535][ T5923] usb 2-1: config 0 descriptor?? [ 572.395116][ T1212] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 572.505322][ T24] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 572.545322][ T1212] usb 1-1: Using ep0 maxpacket: 16 [ 572.552247][ T1212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 572.564459][ T1212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 572.579448][ T1212] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 572.599311][ T5923] input: HID 28bd:0094 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.004A/input/input96 [ 572.612160][ T1212] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 572.622781][ T1212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.636568][ T1212] usb 1-1: config 0 descriptor?? [ 572.666366][ T1212] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input97 [ 572.692547][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 572.705044][ T5939] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 572.718596][ T5923] uclogic 0003:28BD:0094.004A: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 572.730849][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 572.750389][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 572.765333][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 572.779504][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 572.813322][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.848997][ T9433] usb 2-1: USB disconnect, device number 69 [ 572.874353][ T24] usb 5-1: config 0 descriptor?? [ 572.898835][ T5910] usb 1-1: USB disconnect, device number 71 [ 572.919015][ T5939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 572.933092][T23381] fido_id[23381]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 572.940900][ T5182] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 572.976376][ T5939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 573.016482][ T5939] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.035212][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.049909][ T5939] usb 3-1: Product: syz [ 573.063710][ T5939] usb 3-1: Manufacturer: syz [ 573.077930][ T5939] usb 3-1: SerialNumber: syz [ 573.094416][T23379] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 573.099179][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5730'. [ 573.327492][ T24] plantronics 0003:047F:FFFF.004B: ignoring exceeding usage max [ 573.346529][ T24] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 574.147061][ T5939] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 574.155106][ T5939] cdc_ncm 3-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 574.162640][ T5939] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 574.361356][ T5939] cdc_ncm 3-1:1.0: setting tx_max = 48 [ 574.398704][ T5939] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 574.429670][ T5939] usb 3-1: USB disconnect, device number 69 [ 574.443792][ T5939] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 574.843188][T23435] netlink: 'syz.0.5749': attribute type 1 has an invalid length. [ 574.887505][T23435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.938467][T23435] bond1: (slave geneve2): making interface the new active one [ 574.957373][T23435] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 574.967963][ T9449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.978931][ T9449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.003429][ T9449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.022824][ T9449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.135545][T23446] ALSA: seq fatal error: cannot create timer (-16) [ 575.218719][T23449] syzkaller1: entered promiscuous mode [ 575.226166][T23449] syzkaller1: entered allmulticast mode [ 575.439499][ T9433] usb 5-1: USB disconnect, device number 67 [ 575.695242][T23464] batadv_slave_1: entered promiscuous mode [ 575.713014][T23463] batadv_slave_1: left promiscuous mode [ 575.764950][ T5910] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 575.939185][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 575.969395][ T5910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.005244][ T5910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 576.059516][ T5910] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 576.094564][ T5910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.120421][ T5910] usb 2-1: config 0 descriptor?? [ 576.574060][ T5910] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 576.921441][ T9433] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 577.043963][T23497] netlink: 'syz.3.5777': attribute type 1 has an invalid length. [ 577.108419][ T9433] usb 5-1: Using ep0 maxpacket: 8 [ 577.118078][T23497] bond1: entered promiscuous mode [ 577.124620][ T9433] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 577.138216][T23497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 577.145451][ T9433] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 577.157194][ C0] plantronics 0003:047F:FFFF.004C: hid_field_extract() called with n (132) > 32! (syz-executor) [ 577.169183][ T9433] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.180338][ T9433] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.195649][ T5923] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 577.205594][ T9433] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 577.227138][ T9433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.241289][T23500] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 577.260586][T23500] bond1: (slave batadv1): making interface the new active one [ 577.270057][T23500] batadv1: entered promiscuous mode [ 577.278663][T23500] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 577.370974][ T5939] usb 2-1: USB disconnect, device number 70 [ 577.383149][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.409954][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 577.422055][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 577.436247][ T5923] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 577.446272][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.487894][ T5923] usb 3-1: config 0 descriptor?? [ 577.527318][ T9433] usb 5-1: GET_CAPABILITIES returned 0 [ 577.532904][ T9433] usbtmc 5-1:16.0: can't read capabilities [ 577.546215][T23504] input: syz0 as /devices/virtual/input/input99 [ 577.756218][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 577.765401][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 577.774533][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 577.808698][ T9433] usb 5-1: USB disconnect, device number 68 [ 577.825169][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 577.923697][ T5923] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 577.941318][ T5923] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 577.955298][ T5923] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 577.962898][ T5923] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 577.970705][ T5923] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 577.984424][ T5923] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 577.999895][ T5923] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 578.010579][ T5923] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 578.018965][ T5923] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 578.051470][ T5923] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 578.181659][ T5923] usb 3-1: USB disconnect, device number 70 [ 579.386465][ T5910] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 579.549632][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.571201][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.606636][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 579.644303][ T5910] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 579.676670][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.716730][ T5910] usb 1-1: config 0 descriptor?? [ 580.119311][ T9433] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 580.144587][ T5910] plantronics 0003:047F:FFFF.004E: reserved main item tag 0xd [ 580.192474][ T5910] plantronics 0003:047F:FFFF.004E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 580.305099][ T9433] usb 4-1: Using ep0 maxpacket: 32 [ 580.322074][ T9433] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 580.331152][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 580.354695][ T9433] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 580.377701][ T9433] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 580.397493][ T9433] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 580.411284][ T9433] usb 4-1: config 0 interface 0 has no altsetting 0 [ 580.433905][ T9433] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 580.449309][ T24] usb 1-1: USB disconnect, device number 72 [ 580.469483][ T9433] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 580.482694][ T9433] usb 4-1: Product: syz [ 580.490234][ T9433] usb 4-1: Manufacturer: syz [ 580.506503][ T9433] usb 4-1: SerialNumber: syz [ 580.529839][ T9433] usb 4-1: config 0 descriptor?? [ 580.562937][ T9433] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 580.599453][ T9433] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 580.790713][ T9433] usb 4-1: USB disconnect, device number 69 [ 580.796937][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 580.892400][ T9433] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 581.820727][T23595] loop3: detected capacity change from 0 to 1 [ 581.831192][ T5840] Dev loop3: unable to read RDB block 1 [ 581.837410][ T5840] loop3: unable to read partition table [ 581.843432][ T5840] loop3: partition table beyond EOD, truncated [ 581.852215][T23595] Dev loop3: unable to read RDB block 1 [ 581.868595][T23595] loop3: unable to read partition table [ 581.889172][T23595] loop3: partition table beyond EOD, truncated [ 581.909207][T23595] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 581.995485][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 582.062956][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5820'. [ 582.147212][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 582.175859][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.201081][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.252877][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 582.293577][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 582.305340][ T24] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 582.321159][ T24] usb 5-1: Manufacturer: syz [ 582.338490][ T24] usb 5-1: config 0 descriptor?? [ 582.776188][ T24] appleir 0003:05AC:8243.004F: unknown main item tag 0x0 [ 582.812040][ T24] appleir 0003:05AC:8243.004F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 583.089767][ T24] usb 5-1: USB disconnect, device number 69 [ 583.174890][ T9433] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 583.360604][ T9433] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 583.373097][ T9433] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 583.382770][ T9433] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.400933][ T9433] usb 3-1: config 0 descriptor?? [ 583.652995][T23646] binder: 23645:23646 ioctl c0306201 200000001a80 returned -14 [ 583.882836][ T9433] usbhid 3-1:0.0: can't add hid device: -71 [ 583.899121][ T9433] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 584.033990][ T9433] usb 3-1: USB disconnect, device number 71 [ 584.251766][T23663] delete_channel: no stack [ 584.592035][T23671] sctp: [Deprecated]: syz.3.5843 (pid 23671) Use of struct sctp_assoc_value in delayed_ack socket option. [ 584.592035][T23671] Use struct sctp_sack_info instead [ 585.074424][ T30] audit: type=1326 audit(1760700787.100:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23678 comm="syz.2.5848" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1c238efc9 code=0x0 [ 586.047650][T23708] netlink: 'syz.2.5860': attribute type 5 has an invalid length. [ 586.097364][ T5910] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 586.257203][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 586.272363][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 586.284249][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 586.315332][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 586.333427][ T5910] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 586.343741][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.367686][ T5910] usb 5-1: config 0 descriptor?? [ 586.739313][ T9433] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 586.795361][ T5910] plantronics 0003:047F:FFFF.0050: ignoring exceeding usage max [ 586.835486][ T5910] plantronics 0003:047F:FFFF.0050: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 586.925670][ T9433] usb 2-1: Using ep0 maxpacket: 16 [ 586.932981][ T9433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.955048][ T9433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 586.971268][ T9433] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 587.020619][ T9433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.096207][ T9433] usb 2-1: config 0 descriptor?? [ 587.344190][T23744] [ 587.346607][T23744] ===================================================== [ 587.353566][T23744] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 587.361063][T23744] syzkaller #0 Not tainted [ 587.365496][T23744] ----------------------------------------------------- [ 587.372432][T23744] syz.3.5876/23744 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 587.380179][T23744] ffff88806b1ec600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 587.388925][T23744] [ 587.388925][T23744] and this task is already holding: [ 587.396303][T23744] ffff8880276f6028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 587.406098][T23744] which would create a new lock dependency: [ 587.412088][T23744] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 587.420233][T23744] [ 587.420233][T23744] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 587.429701][T23744] (&client->buffer_lock){..-.}-{3:3} [ 587.429732][T23744] [ 587.429732][T23744] ... which became SOFTIRQ-irq-safe at: [ 587.442819][T23744] lock_acquire+0x120/0x360 [ 587.447446][T23744] _raw_spin_lock+0x2e/0x40 [ 587.452051][T23744] evdev_pass_values+0xb9/0xbd0 [ 587.457008][T23744] evdev_events+0x1e6/0x340 [ 587.461608][T23744] input_pass_values+0x288/0x890 [ 587.466640][T23744] input_event_dispose+0x3e5/0x6b0 [ 587.471861][T23744] input_event+0x89/0xe0 [ 587.476210][T23744] hidinput_hid_event+0x1302/0x1ca0 [ 587.481506][T23744] hid_process_event+0x4be/0x620 [ 587.486549][T23744] hid_report_raw_event+0xe91/0x16d0 [ 587.491935][T23744] hid_input_report+0x43e/0x520 [ 587.496886][T23744] hid_irq_in+0x47e/0x6d0 [ 587.501323][T23744] __usb_hcd_giveback_urb+0x376/0x540 [ 587.506797][T23744] dummy_timer+0x85f/0x44c0 [ 587.511416][T23744] __hrtimer_run_queues+0x52c/0xc60 [ 587.516719][T23744] hrtimer_run_softirq+0x187/0x2b0 [ 587.521938][T23744] handle_softirqs+0x286/0x870 [ 587.526805][T23744] __irq_exit_rcu+0xca/0x1f0 [ 587.531520][T23744] irq_exit_rcu+0x9/0x30 [ 587.535864][T23744] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 587.541610][T23744] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 587.547784][T23744] unwind_next_frame+0xc34/0x2390 [ 587.552928][T23744] arch_stack_walk+0x11c/0x150 [ 587.557811][T23744] stack_trace_save+0x9c/0xe0 [ 587.562631][T23744] kasan_save_track+0x3e/0x80 [ 587.567434][T23744] __kasan_kmalloc+0x93/0xb0 [ 587.572138][T23744] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 587.577614][T23744] kernfs_fop_open+0x397/0xca0 [ 587.582516][T23744] do_dentry_open+0x953/0x13f0 [ 587.587381][T23744] vfs_open+0x3b/0x340 [ 587.591551][T23744] path_openat+0x2ee5/0x3830 [ 587.596241][T23744] do_filp_open+0x1fa/0x410 [ 587.600842][T23744] do_sys_openat2+0x121/0x1c0 [ 587.605626][T23744] __x64_sys_openat+0x138/0x170 [ 587.610577][T23744] do_syscall_64+0xfa/0xfa0 [ 587.615178][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.621175][T23744] [ 587.621175][T23744] to a SOFTIRQ-irq-unsafe lock: [ 587.628201][T23744] (tasklist_lock){.+.+}-{3:3} [ 587.628253][T23744] [ 587.628253][T23744] ... which became SOFTIRQ-irq-unsafe at: [ 587.640917][T23744] ... [ 587.640927][T23744] lock_acquire+0x120/0x360 [ 587.648121][T23744] _raw_read_lock+0x36/0x50 [ 587.652738][T23744] __do_wait+0xde/0x740 [ 587.656989][T23744] do_wait+0x1f8/0x510 [ 587.661184][T23744] kernel_wait+0xab/0x170 [ 587.665613][T23744] call_usermodehelper_exec_work+0xbe/0x230 [ 587.671606][T23744] process_scheduled_works+0xae1/0x17b0 [ 587.677254][T23744] worker_thread+0x8a0/0xda0 [ 587.681945][T23744] kthread+0x711/0x8a0 [ 587.686111][T23744] ret_from_fork+0x4bc/0x870 [ 587.690802][T23744] ret_from_fork_asm+0x1a/0x30 [ 587.695751][T23744] [ 587.695751][T23744] other info that might help us debug this: [ 587.695751][T23744] [ 587.705990][T23744] Chain exists of: [ 587.705990][T23744] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 587.705990][T23744] [ 587.719153][T23744] Possible interrupt unsafe locking scenario: [ 587.719153][T23744] [ 587.727476][T23744] CPU0 CPU1 [ 587.732850][T23744] ---- ---- [ 587.738224][T23744] lock(tasklist_lock); [ 587.742482][T23744] local_irq_disable(); [ 587.749323][T23744] lock(&client->buffer_lock); [ 587.756700][T23744] lock(&new->fa_lock); [ 587.763508][T23744] [ 587.766987][T23744] lock(&client->buffer_lock); [ 587.772088][T23744] [ 587.772088][T23744] *** DEADLOCK *** [ 587.772088][T23744] [ 587.780244][T23744] 7 locks held by syz.3.5876/23744: [ 587.785472][T23744] #0: ffff888149661118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 587.794681][T23744] #1: ffff8881462e5230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 587.804816][T23744] #2: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 587.814515][T23744] #3: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 587.824160][T23744] #4: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 587.833328][T23744] #5: ffff8880276f6028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 587.843535][T23744] #6: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 587.852622][T23744] [ 587.852622][T23744] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 587.863034][T23744] -> (&client->buffer_lock){..-.}-{3:3} { [ 587.868783][T23744] IN-SOFTIRQ-W at: [ 587.872771][T23744] lock_acquire+0x120/0x360 [ 587.878942][T23744] _raw_spin_lock+0x2e/0x40 [ 587.885132][T23744] evdev_pass_values+0xb9/0xbd0 [ 587.891644][T23744] evdev_events+0x1e6/0x340 [ 587.897813][T23744] input_pass_values+0x288/0x890 [ 587.904445][T23744] input_event_dispose+0x3e5/0x6b0 [ 587.911224][T23744] input_event+0x89/0xe0 [ 587.917133][T23744] hidinput_hid_event+0x1302/0x1ca0 [ 587.924003][T23744] hid_process_event+0x4be/0x620 [ 587.930650][T23744] hid_report_raw_event+0xe91/0x16d0 [ 587.937607][T23744] hid_input_report+0x43e/0x520 [ 587.944134][T23744] hid_irq_in+0x47e/0x6d0 [ 587.950138][T23744] __usb_hcd_giveback_urb+0x376/0x540 [ 587.957176][T23744] dummy_timer+0x85f/0x44c0 [ 587.963362][T23744] __hrtimer_run_queues+0x52c/0xc60 [ 587.970239][T23744] hrtimer_run_softirq+0x187/0x2b0 [ 587.977027][T23744] handle_softirqs+0x286/0x870 [ 587.983534][T23744] __irq_exit_rcu+0xca/0x1f0 [ 587.989824][T23744] irq_exit_rcu+0x9/0x30 [ 587.995788][T23744] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 588.003183][T23744] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 588.010834][T23744] unwind_next_frame+0xc34/0x2390 [ 588.017549][T23744] arch_stack_walk+0x11c/0x150 [ 588.023988][T23744] stack_trace_save+0x9c/0xe0 [ 588.030363][T23744] kasan_save_track+0x3e/0x80 [ 588.036709][T23744] __kasan_kmalloc+0x93/0xb0 [ 588.042967][T23744] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 588.050088][T23744] kernfs_fop_open+0x397/0xca0 [ 588.056533][T23744] do_dentry_open+0x953/0x13f0 [ 588.062966][T23744] vfs_open+0x3b/0x340 [ 588.068709][T23744] path_openat+0x2ee5/0x3830 [ 588.074957][T23744] do_filp_open+0x1fa/0x410 [ 588.081207][T23744] do_sys_openat2+0x121/0x1c0 [ 588.087564][T23744] __x64_sys_openat+0x138/0x170 [ 588.094080][T23744] do_syscall_64+0xfa/0xfa0 [ 588.100245][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.107797][T23744] INITIAL USE at: [ 588.111717][T23744] lock_acquire+0x120/0x360 [ 588.117795][T23744] _raw_spin_lock+0x2e/0x40 [ 588.123980][T23744] evdev_pass_values+0xb9/0xbd0 [ 588.130410][T23744] evdev_events+0x1aa/0x340 [ 588.136490][T23744] input_pass_values+0x1c2/0x890 [ 588.143010][T23744] input_event_dispose+0x330/0x6b0 [ 588.149713][T23744] input_inject_event+0x1dd/0x340 [ 588.156417][T23744] evdev_write+0x2fc/0x480 [ 588.162419][T23744] vfs_write+0x27e/0xb30 [ 588.168233][T23744] ksys_write+0x145/0x250 [ 588.174162][T23744] do_syscall_64+0xfa/0xfa0 [ 588.180253][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.187752][T23744] } [ 588.190434][T23744] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 588.198600][T23744] [ 588.198600][T23744] the dependencies between the lock to be acquired [ 588.198612][T23744] and SOFTIRQ-irq-unsafe lock: [ 588.212260][T23744] -> (tasklist_lock){.+.+}-{3:3} { [ 588.217600][T23744] HARDIRQ-ON-R at: [ 588.221766][T23744] lock_acquire+0x120/0x360 [ 588.228284][T23744] _raw_read_lock+0x36/0x50 [ 588.234819][T23744] __do_wait+0xde/0x740 [ 588.241000][T23744] do_wait+0x1f8/0x510 [ 588.247101][T23744] kernel_wait+0xab/0x170 [ 588.253457][T23744] call_usermodehelper_exec_work+0xbe/0x230 [ 588.261427][T23744] process_scheduled_works+0xae1/0x17b0 [ 588.269318][T23744] worker_thread+0x8a0/0xda0 [ 588.276119][T23744] kthread+0x711/0x8a0 [ 588.282222][T23744] ret_from_fork+0x4bc/0x870 [ 588.288849][T23744] ret_from_fork_asm+0x1a/0x30 [ 588.295632][T23744] SOFTIRQ-ON-R at: [ 588.299797][T23744] lock_acquire+0x120/0x360 [ 588.306318][T23744] _raw_read_lock+0x36/0x50 [ 588.312850][T23744] __do_wait+0xde/0x740 [ 588.319023][T23744] do_wait+0x1f8/0x510 [ 588.325113][T23744] kernel_wait+0xab/0x170 [ 588.331451][T23744] call_usermodehelper_exec_work+0xbe/0x230 [ 588.339360][T23744] process_scheduled_works+0xae1/0x17b0 [ 588.346940][T23744] worker_thread+0x8a0/0xda0 [ 588.353545][T23744] kthread+0x711/0x8a0 [ 588.359628][T23744] ret_from_fork+0x4bc/0x870 [ 588.366234][T23744] ret_from_fork_asm+0x1a/0x30 [ 588.373140][T23744] INITIAL USE at: [ 588.377224][T23744] lock_acquire+0x120/0x360 [ 588.383747][T23744] _raw_write_lock_irq+0xa2/0xf0 [ 588.390687][T23744] copy_process+0x224f/0x3c00 [ 588.397294][T23744] kernel_clone+0x21e/0x840 [ 588.403813][T23744] user_mode_thread+0xdd/0x140 [ 588.410508][T23744] rest_init+0x23/0x300 [ 588.416590][T23744] start_kernel+0x3ae/0x410 [ 588.423026][T23744] x86_64_start_reservations+0x24/0x30 [ 588.430420][T23744] x86_64_start_kernel+0x143/0x1c0 [ 588.437493][T23744] common_startup_64+0x13e/0x147 [ 588.444444][T23744] INITIAL READ USE at: [ 588.448959][T23744] lock_acquire+0x120/0x360 [ 588.455823][T23744] _raw_read_lock+0x36/0x50 [ 588.462779][T23744] __do_wait+0xde/0x740 [ 588.469294][T23744] do_wait+0x1f8/0x510 [ 588.475728][T23744] kernel_wait+0xab/0x170 [ 588.482411][T23744] call_usermodehelper_exec_work+0xbe/0x230 [ 588.490663][T23744] process_scheduled_works+0xae1/0x17b0 [ 588.498585][T23744] worker_thread+0x8a0/0xda0 [ 588.505634][T23744] kthread+0x711/0x8a0 [ 588.512060][T23744] ret_from_fork+0x4bc/0x870 [ 588.519111][T23744] ret_from_fork_asm+0x1a/0x30 [ 588.526275][T23744] } [ 588.528953][T23744] ... key at: [] tasklist_lock+0x18/0x40 [ 588.536861][T23744] ... acquired at: [ 588.540842][T23744] lock_acquire+0x120/0x360 [ 588.545532][T23744] _raw_read_lock+0x36/0x50 [ 588.550263][T23744] send_sigio+0x101/0x370 [ 588.554785][T23744] dnotify_handle_event+0x169/0x440 [ 588.560182][T23744] fsnotify+0x1814/0x1a80 [ 588.564700][T23744] vfs_mkdir+0x477/0x510 [ 588.569147][T23744] do_mkdirat+0x247/0x590 [ 588.573784][T23744] __x64_sys_mkdirat+0x87/0xa0 [ 588.578764][T23744] do_syscall_64+0xfa/0xfa0 [ 588.583514][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.589603][T23744] [ 588.591938][T23744] -> (&f_owner->lock){....}-{3:3} { [ 588.597264][T23744] INITIAL USE at: [ 588.601283][T23744] lock_acquire+0x120/0x360 [ 588.607553][T23744] _raw_write_lock_irq+0xa2/0xf0 [ 588.614253][T23744] __f_setown+0x67/0x370 [ 588.620253][T23744] fcntl_dirnotify+0x3fa/0x6a0 [ 588.626775][T23744] do_fcntl+0x6d0/0x1910 [ 588.632866][T23744] __se_sys_fcntl+0xc8/0x150 [ 588.639211][T23744] do_syscall_64+0xfa/0xfa0 [ 588.645473][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.653131][T23744] INITIAL READ USE at: [ 588.657596][T23744] lock_acquire+0x120/0x360 [ 588.664291][T23744] _raw_read_lock_irqsave+0xaf/0x100 [ 588.671771][T23744] send_sigio+0x38/0x370 [ 588.678212][T23744] dnotify_handle_event+0x169/0x440 [ 588.685618][T23744] fsnotify+0x1814/0x1a80 [ 588.692148][T23744] vfs_mkdir+0x477/0x510 [ 588.698579][T23744] do_mkdirat+0x247/0x590 [ 588.705104][T23744] __x64_sys_mkdirat+0x87/0xa0 [ 588.712064][T23744] do_syscall_64+0xfa/0xfa0 [ 588.718752][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.726823][T23744] } [ 588.729437][T23744] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 588.738388][T23744] ... acquired at: [ 588.742285][T23744] lock_acquire+0x120/0x360 [ 588.746983][T23744] _raw_read_lock_irqsave+0xaf/0x100 [ 588.752546][T23744] send_sigio+0x38/0x370 [ 588.756997][T23744] kill_fasync+0x24d/0x4d0 [ 588.761609][T23744] lease_break_callback+0x26/0x30 [ 588.766821][T23744] __break_lease+0x6a5/0x1620 [ 588.771682][T23744] do_dentry_open+0x8b7/0x13f0 [ 588.776633][T23744] vfs_open+0x3b/0x340 [ 588.780972][T23744] path_openat+0x2ee5/0x3830 [ 588.785838][T23744] do_filp_open+0x1fa/0x410 [ 588.790550][T23744] do_sys_openat2+0x121/0x1c0 [ 588.795440][T23744] __x64_sys_openat+0x138/0x170 [ 588.800500][T23744] do_syscall_64+0xfa/0xfa0 [ 588.805199][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.811323][T23744] [ 588.813682][T23744] -> (&new->fa_lock){....}-{3:3} { [ 588.818825][T23744] INITIAL USE at: [ 588.822746][T23744] lock_acquire+0x120/0x360 [ 588.828831][T23744] _raw_write_lock_irq+0xa2/0xf0 [ 588.835374][T23744] fasync_remove_entry+0xf1/0x1c0 [ 588.841980][T23744] sock_fasync+0x85/0xf0 [ 588.847881][T23744] __fput+0x8a2/0xa70 [ 588.853448][T23744] task_work_run+0x1d4/0x260 [ 588.859619][T23744] exit_to_user_mode_loop+0xe9/0x130 [ 588.866658][T23744] do_syscall_64+0x2bd/0xfa0 [ 588.872836][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.880308][T23744] INITIAL READ USE at: [ 588.884665][T23744] lock_acquire+0x120/0x360 [ 588.891192][T23744] _raw_read_lock_irqsave+0xaf/0x100 [ 588.898503][T23744] kill_fasync+0x199/0x4d0 [ 588.904938][T23744] sock_wake_async+0x137/0x160 [ 588.911719][T23744] sk_wake_async+0x189/0x280 [ 588.918339][T23744] tcp_rcv_state_process+0x1d9d/0x44d0 [ 588.925819][T23744] tcp_v6_do_rcv+0x89d/0x13f0 [ 588.932509][T23744] __release_sock+0x1b8/0x3a0 [ 588.939286][T23744] release_sock+0x5f/0x1f0 [ 588.945711][T23744] __inet_stream_connect+0x8df/0xe70 [ 588.953009][T23744] inet_stream_connect+0x66/0xa0 [ 588.959964][T23744] __sys_connect+0x316/0x440 [ 588.966574][T23744] __x64_sys_connect+0x7a/0x90 [ 588.973369][T23744] do_syscall_64+0xfa/0xfa0 [ 588.979999][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.987924][T23744] } [ 588.990444][T23744] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 588.999138][T23744] ... acquired at: [ 589.002946][T23744] lock_acquire+0x120/0x360 [ 589.007686][T23744] _raw_read_lock_irqsave+0xaf/0x100 [ 589.013273][T23744] kill_fasync+0x199/0x4d0 [ 589.017889][T23744] evdev_pass_values+0x627/0xbd0 [ 589.023016][T23744] evdev_events+0x1e6/0x340 [ 589.027708][T23744] input_pass_values+0x288/0x890 [ 589.032833][T23744] input_event_dispose+0x330/0x6b0 [ 589.038140][T23744] input_inject_event+0x1dd/0x340 [ 589.043373][T23744] evdev_write+0x2fc/0x480 [ 589.047980][T23744] vfs_write+0x27e/0xb30 [ 589.052416][T23744] ksys_write+0x145/0x250 [ 589.056928][T23744] do_syscall_64+0xfa/0xfa0 [ 589.061618][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.067695][T23744] [ 589.070027][T23744] [ 589.070027][T23744] stack backtrace: [ 589.076038][T23744] CPU: 1 UID: 0 PID: 23744 Comm: syz.3.5876 Not tainted syzkaller #0 PREEMPT(full) [ 589.076066][T23744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.076082][T23744] Call Trace: [ 589.076093][T23744] [ 589.076102][T23744] dump_stack_lvl+0x189/0x250 [ 589.076128][T23744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.076147][T23744] ? __pfx__printk+0x10/0x10 [ 589.076172][T23744] validate_chain+0x1f05/0x2140 [ 589.076213][T23744] __lock_acquire+0xab9/0xd20 [ 589.076245][T23744] ? kill_fasync+0x199/0x4d0 [ 589.076272][T23744] lock_acquire+0x120/0x360 [ 589.076294][T23744] ? kill_fasync+0x199/0x4d0 [ 589.076331][T23744] _raw_read_lock_irqsave+0xaf/0x100 [ 589.076361][T23744] ? kill_fasync+0x199/0x4d0 [ 589.076388][T23744] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 589.076416][T23744] ? do_raw_spin_lock+0x121/0x290 [ 589.076438][T23744] kill_fasync+0x199/0x4d0 [ 589.076469][T23744] ? kill_fasync+0x53/0x4d0 [ 589.076498][T23744] evdev_pass_values+0x627/0xbd0 [ 589.076523][T23744] ? evdev_pass_values+0x681/0xbd0 [ 589.076546][T23744] evdev_events+0x1e6/0x340 [ 589.076565][T23744] ? evdev_events+0x79/0x340 [ 589.076587][T23744] ? input_pass_values+0x8d/0x890 [ 589.076607][T23744] input_pass_values+0x288/0x890 [ 589.076629][T23744] ? input_handle_event+0x70c/0xf30 [ 589.076658][T23744] input_event_dispose+0x330/0x6b0 [ 589.076687][T23744] input_inject_event+0x1dd/0x340 [ 589.076714][T23744] ? input_inject_event+0xb6/0x340 [ 589.076746][T23744] evdev_write+0x2fc/0x480 [ 589.076768][T23744] ? __pfx_evdev_write+0x10/0x10 [ 589.076789][T23744] ? bpf_lsm_file_permission+0x9/0x20 [ 589.076816][T23744] ? security_file_permission+0x75/0x290 [ 589.076850][T23744] ? rw_verify_area+0x255/0x4d0 [ 589.076871][T23744] ? __lock_acquire+0xab9/0xd20 [ 589.076914][T23744] ? __pfx_evdev_write+0x10/0x10 [ 589.076935][T23744] vfs_write+0x27e/0xb30 [ 589.076963][T23744] ? __pfx_vfs_write+0x10/0x10 [ 589.076982][T23744] ? __fget_files+0x2a/0x420 [ 589.077011][T23744] ? __fget_files+0x2a/0x420 [ 589.077033][T23744] ? __fget_files+0x3a0/0x420 [ 589.077063][T23744] ? __fget_files+0x2a/0x420 [ 589.077088][T23744] ksys_write+0x145/0x250 [ 589.077108][T23744] ? __pfx_ksys_write+0x10/0x10 [ 589.077136][T23744] ? do_syscall_64+0xbe/0xfa0 [ 589.077157][T23744] do_syscall_64+0xfa/0xfa0 [ 589.077175][T23744] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.077192][T23744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.077218][T23744] ? clear_bhb_loop+0x60/0xb0 [ 589.077244][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.077268][T23744] RIP: 0033:0x7fc27e38efc9 [ 589.077289][T23744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.077312][T23744] RSP: 002b:00007fc27f18a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 589.077332][T23744] RAX: ffffffffffffffda RBX: 00007fc27e5e5fa0 RCX: 00007fc27e38efc9 [ 589.077347][T23744] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 589.077360][T23744] RBP: 00007fc27e411f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.077376][T23744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.077388][T23744] R13: 00007fc27e5e6038 R14: 00007fc27e5e5fa0 R15: 00007fc27e70fa28 [ 589.077418][T23744] [ 589.404646][ T9433] usb 2-1: language id specifier not provided by device, defaulting to English [ 589.455207][ T5939] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 589.637023][ T5939] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 589.648405][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.659433][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.670003][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 589.684278][ T5939] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 589.693458][ T5939] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 589.701639][ T5939] usb 3-1: Manufacturer: syz [ 589.708761][ T5939] usb 3-1: config 0 descriptor?? [ 589.807285][ T9433] letsketch 0003:6161:4D15.0051: Device info: ఁ [ 590.039238][ T9433] usb 2-1: Max retries (5) exceeded reading string descriptor 201 [ 590.047707][ T9433] letsketch 0003:6161:4D15.0051: probe with driver letsketch failed with error -71 [ 590.061938][ T9433] usb 2-1: USB disconnect, device number 71 [ 590.121902][ T5939] appleir 0003:05AC:8243.0052: unknown main item tag 0x0 [ 590.131541][ T5939] appleir 0003:05AC:8243.0052: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 590.416868][T23738] usb 5-1: string descriptor 0 read error: -71 [ 591.186268][ T5923] usb 5-1: USB disconnect, device number 70 [ 591.440466][ T9433] usb 3-1: USB disconnect, device number 72