last executing test programs: 32.820228693s ago: executing program 0 (id=4376): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000200)=0x6, 0x4) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000640)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 32.669268647s ago: executing program 0 (id=4377): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="0500000000000000", @ANYRES32], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="04000000000000008804"]) 32.401375879s ago: executing program 0 (id=4381): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 32.028038469s ago: executing program 0 (id=4385): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205) move_mount(r1, 0x0, r0, 0x0, 0x46) 31.887644981s ago: executing program 0 (id=4386): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r1, 0x0, 0x80, 0x5, 0x101, 0x0, {0x9, 0xd7, 0x1c, 0x7, 0x20fe, 0x401, 0x7, 0xa, 0x0, 0x50, 0x8000, 0x7e9, 0x401, 0x5, "cbd7d7ab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300)) 31.412107857s ago: executing program 0 (id=4389): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) 30.687299592s ago: executing program 32 (id=4389): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) 8.439159496s ago: executing program 4 (id=4539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000084, 0x0, 0x12000000000000}]}) 8.12268521s ago: executing program 4 (id=4544): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x4, @empty, 0x0, 0x3}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000080)={0xa, 0x7, 0x0, @empty, 0x8}, 0x20) 7.934105659s ago: executing program 4 (id=4548): r0 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000008c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) preadv(r1, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) 7.074195473s ago: executing program 4 (id=4556): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0xd01c4813, &(0x7f0000000000)={0x40003, 0xffffffff, 0x10000000, 0x0, 0x7, 0x410}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000)=0x1, 0x4) 5.858040482s ago: executing program 5 (id=4562): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000880)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.667651783s ago: executing program 2 (id=4571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x49}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x4c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.211950417s ago: executing program 4 (id=4575): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) recvmmsg$unix(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 4.050946416s ago: executing program 4 (id=4577): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000013c0)=0xc7f) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) 3.957417031s ago: executing program 2 (id=4578): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x8, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) 3.616007974s ago: executing program 5 (id=4579): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294a912c8a7b656cce452d0d89eff1e2e2b4169a079df36c75d9a761ecb63eb462a463b015ec86b2c9d15df885c8f1e579305885e7827cb2d514a0d3926b7374a1876e966127fb3ec23e1be5245ffc6bdb4ffe19eb6611fb881e8558c74b2d825039eb0f265aaccee8d19b4f1a1f4d5f5230a611e81afce43ff7d03f441dcb16b97fd039083ec1dbb82ac17065bbce87069532e22ab85c381da9e04f4e2143397e423", 0xcf}], 0x1}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f00003e9000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r1, 0x100000000) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="2e00000012008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f", 0x25}, {&(0x7f0000000580)="7cd14bd937dfc869af", 0x9}], 0x2}, 0x0) 3.532392228s ago: executing program 3 (id=4580): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03c00e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000440)="addbecc8f7b208308a885c89ede411d6cb557c84", 0x14}], 0x2}, 0x4000000) 3.319774152s ago: executing program 5 (id=4581): r0 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, 0x0, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 3.144163151s ago: executing program 3 (id=4582): r0 = fanotify_init(0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r0, 0x161, 0x40000867, r1, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) 3.083423482s ago: executing program 1 (id=4583): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x65) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000040)=0x4, 0x4) syz_emit_ethernet(0x52, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffffff907800000000ffffff"], 0x0) 2.908089817s ago: executing program 3 (id=4584): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f00000000c0)) 2.795416587s ago: executing program 5 (id=4585): r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xe0002000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0xe}) 2.684799497s ago: executing program 1 (id=4586): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) 2.452706968s ago: executing program 5 (id=4587): r0 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.913129352s ago: executing program 2 (id=4588): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.652514204s ago: executing program 1 (id=4589): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x4, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x42000) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) 1.269222617s ago: executing program 1 (id=4590): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000003c0)="a4677dfc2133806eecf49820871b9e6af2e2", 0x12, 0x1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000056c0)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000680)=""/1, 0x1}, {&(0x7f00000007c0)=""/87, 0x57}], 0x2}}], 0x1, 0x2002, 0x0) 977.760291ms ago: executing program 2 (id=4591): r0 = creat(&(0x7f0000000480)='./bus\x00', 0x141) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xb) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) copy_file_range(r1, &(0x7f0000000080), r0, 0x0, 0xfffffffffffffff8, 0x0) 967.198656ms ago: executing program 1 (id=4592): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mbind(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x3, &(0x7f0000000000)=0x6, 0x6, 0x1) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x4}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1}) 659.26582ms ago: executing program 2 (id=4593): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4, 0xa00}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000008e04000000060000ffffffff"]) 644.309512ms ago: executing program 1 (id=4594): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 532.208303ms ago: executing program 3 (id=4595): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, {[@generic={0x22, 0x2}]}}}}}}}, 0x0) 401.77099ms ago: executing program 5 (id=4596): write$dsp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000016c0), 0x2040, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 280.524714ms ago: executing program 3 (id=4597): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000400)="ebe3a0e1796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000006c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b6dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9e460259bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721197af05a045ad3", 0xfeef}], 0x3, 0x0, 0x0, 0x48000}], 0x1, 0x24044088) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 207.445887ms ago: executing program 2 (id=4598): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0x4, 0x12) 0s ago: executing program 3 (id=4599): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) kernel console output (not intermixed with test programs): ouch disconnected [ 422.570397][ T5954] usb 1-1: USB disconnect, device number 33 [ 422.989550][ T5954] usb 5-1: USB disconnect, device number 42 [ 424.027515][ T5954] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 424.202436][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 424.210357][ T5954] usb 2-1: Using ep0 maxpacket: 16 [ 424.232080][ T5954] usb 2-1: config 0 has no interfaces? [ 424.286565][ T5954] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 424.308247][ T5954] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 424.335442][ T5954] usb 2-1: Manufacturer: syz [ 424.346782][ T5954] usb 2-1: config 0 descriptor?? [ 424.355404][T14136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3453'. [ 424.409636][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 424.433839][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 424.456996][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 424.469806][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.483094][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.492390][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.514984][ T5992] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 424.523311][T13819] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 424.560428][ T10] usb 1-1: config 0 descriptor?? [ 424.650646][T14117] lo: entered promiscuous mode [ 424.659043][T14117] tunl0: entered promiscuous mode [ 424.666203][T14117] gre0: entered promiscuous mode [ 424.675668][T14117] gretap0: entered promiscuous mode [ 424.682149][T14117] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 424.690980][ T5992] usb 4-1: config index 0 descriptor too short (expected 31, got 27) [ 424.706415][ T5992] usb 4-1: config 1 interface 0 has no altsetting 0 [ 424.713414][T13819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.724660][T13819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.725508][ T5930] usb 2-1: USB disconnect, device number 36 [ 424.736030][T13819] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.754080][T13819] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.765663][ T5992] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 424.774812][ T5992] usb 4-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 424.784642][T13819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.792868][ T5992] usb 4-1: Product: syz [ 424.797055][ T5992] usb 4-1: Manufacturer: syz [ 424.803708][ T5992] usb 4-1: SerialNumber: syz [ 424.809970][T13819] usb 5-1: config 0 descriptor?? [ 424.857557][ T5943] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 425.007230][ T10] plantronics 0003:047F:FFFF.0027: ignoring exceeding usage max [ 425.035944][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 425.052734][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.063984][ T10] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 425.095076][ T5943] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 425.108554][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.126961][ T5943] usb 3-1: config 0 descriptor?? [ 425.171801][ T5992] usblp 4-1:1.0: usblp1: USB Unidirectional printer dev 38 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 425.220031][ T5992] usb 4-1: USB disconnect, device number 38 [ 425.248880][T13819] plantronics 0003:047F:FFFF.0028: reserved main item tag 0xd [ 425.348918][ T5992] usblp1: removed [ 425.421842][T13819] plantronics 0003:047F:FFFF.0028: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 425.444612][T14145] loop2: detected capacity change from 0 to 7 [ 425.458020][T14145] Dev loop2: unable to read RDB block 7 [ 425.485841][T14145] loop2: AHDI p1 p2 p3 [ 425.496971][T14145] loop2: partition table partially beyond EOD, truncated [ 425.510655][T14145] loop2: p1 start 1601398130 is beyond EOD, truncated [ 425.528105][T14145] loop2: p2 start 1702059890 is beyond EOD, truncated [ 426.246170][T14164] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 426.262201][ T5943] savu 0003:1E7D:2D5A.0029: hiddev2,hidraw2: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 426.314543][ T5943] usb 3-1: USB disconnect, device number 64 [ 426.360081][ T5992] usb 5-1: USB disconnect, device number 43 [ 426.485559][T14165] fido_id[14165]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 426.936939][ T30] kauditd_printk_skb: 2835 callbacks suppressed [ 426.936961][ T30] audit: type=1326 audit(1756233320.213:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f136d12ade9 code=0x7ffc0000 [ 427.065873][ T30] audit: type=1326 audit(1756233320.213:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136d18ebe9 code=0x7ffc0000 [ 427.217473][ T30] audit: type=1326 audit(1756233320.213:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f136d12ade9 code=0x7ffc0000 [ 427.382248][ T30] audit: type=1326 audit(1756233320.213:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f136d12ade9 code=0x7ffc0000 [ 427.510513][ T30] audit: type=1326 audit(1756233320.213:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136d18ebe9 code=0x7ffc0000 [ 427.548526][ T5930] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 427.643202][ T30] audit: type=1326 audit(1756233320.223:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f136d12ade9 code=0x7ffc0000 [ 427.718725][ T30] audit: type=1326 audit(1756233320.223:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f136d12ade9 code=0x7ffc0000 [ 427.758138][ T5930] usb 3-1: Using ep0 maxpacket: 8 [ 427.795174][ T5930] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 427.826924][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.896521][ T30] audit: type=1326 audit(1756233320.223:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f136d12ade9 code=0x7ffc0000 [ 427.899597][ T5930] usb 3-1: Product: syz [ 427.998256][ T30] audit: type=1326 audit(1756233320.223:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f136d12ade9 code=0x7ffc0000 [ 428.039694][ T5930] usb 3-1: Manufacturer: syz [ 428.067718][ T30] audit: type=1326 audit(1756233320.223:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14179 comm="syz.1.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f136d12ade9 code=0x7ffc0000 [ 428.097477][ T5930] usb 3-1: SerialNumber: syz [ 428.361128][ T5930] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 428.677933][ T5930] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 428.878785][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.921302][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 428.962983][ T5930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 429.004690][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 429.047071][ T5930] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 429.094818][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.150362][ T5930] usb 2-1: config 0 descriptor?? [ 429.194670][T14211] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 429.656646][ T5930] hid_parser_main: 839 callbacks suppressed [ 429.656682][ T5930] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 429.681213][ T5930] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 429.701074][ T5930] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 429.709471][ T5930] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 429.717300][ T5930] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 429.726893][ T5930] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 429.787515][ T5930] plantronics 0003:047F:FFFF.002A: hiddev2,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 429.862498][ T5930] usb 2-1: USB disconnect, device number 37 [ 430.012967][T14242] fido_id[14242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 430.309043][ T5930] usb 3-1: USB disconnect, device number 65 [ 430.328034][ T5930] usblp1: removed [ 430.361253][ T5943] usb 1-1: USB disconnect, device number 34 [ 430.790351][T14257] syzkaller1: entered promiscuous mode [ 430.806127][T14257] syzkaller1: entered allmulticast mode [ 431.157654][T14271] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3505'. [ 431.172555][T14272] netlink: 'syz.3.3507': attribute type 1 has an invalid length. [ 431.248400][ T5930] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 431.351972][T14272] bond1: entered promiscuous mode [ 431.387999][T14272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 431.446508][ T5930] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 431.457555][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.465844][ T5930] usb 2-1: Product: syz [ 431.470876][ T5930] usb 2-1: Manufacturer: syz [ 431.475588][ T5930] usb 2-1: SerialNumber: syz [ 431.488729][ T5930] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 431.511147][ T1213] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 431.586080][T14274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 431.632334][T14274] bond1: (slave bond2): making interface the new active one [ 431.644177][T14274] bond2: entered promiscuous mode [ 431.659164][T14274] bond1: (slave bond2): Enslaving as an active interface with an up link [ 431.778185][ T5930] usb 2-1: USB disconnect, device number 38 [ 431.818076][ T5992] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 431.989831][ T5992] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 432.016161][ T5992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 432.047638][ T5992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 432.077373][ T5992] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 432.118875][ T5992] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 432.147549][ T5992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.186938][ T5992] usb 5-1: config 0 descriptor?? [ 432.207346][T14286] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 432.604753][ T1213] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 432.642747][ T1213] ath9k_htc: Failed to initialize the device [ 432.668621][ T5992] plantronics 0003:047F:FFFF.002B: reserved main item tag 0xd [ 432.672952][ T5930] usb 2-1: ath9k_htc: USB layer deinitialized [ 432.719087][ T5992] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 432.719796][T14313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.009012][ T5943] usb 5-1: USB disconnect, device number 44 [ 433.381089][T14333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3530'. [ 433.897523][ T5930] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 434.059572][ T5930] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.095975][ T5930] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.120994][ T5930] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.134672][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.360462][ T5930] usb 2-1: usb_control_msg returned -32 [ 434.371779][ T5930] usbtmc 2-1:16.0: can't read capabilities [ 434.487578][ T1213] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 434.637631][ T5943] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 434.637695][ T1213] usb 3-1: Using ep0 maxpacket: 32 [ 434.652506][ T1213] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 434.661983][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.673762][ T1213] usb 3-1: config 0 descriptor?? [ 434.684583][ T1213] gspca_main: sunplus-2.14.0 probing 041e:400b [ 434.815157][ T5943] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 434.824659][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.836682][ T5943] usb 4-1: config 0 descriptor?? [ 435.698713][ T1213] gspca_sunplus: reg_w_riv err -71 [ 435.704017][ T1213] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 435.740555][ T1213] usb 3-1: USB disconnect, device number 66 [ 435.871216][ T5943] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 435.887815][ T5943] usb 4-1: USB disconnect, device number 39 [ 436.045458][T14376] syzkaller1: entered promiscuous mode [ 436.051506][T14376] syzkaller1: entered allmulticast mode [ 436.136977][T14378] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20000 [ 436.717285][ T24] usb 2-1: USB disconnect, device number 39 [ 436.717874][T14402] input: syz0 as /devices/virtual/input/input55 [ 437.048317][T14412] random: crng reseeded on system resumption [ 437.145363][T14411] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 437.501027][ T30] kauditd_printk_skb: 144 callbacks suppressed [ 437.501046][ T30] audit: type=1326 audit(1756233330.773:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.3.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cf58ebe9 code=0x7ffc0000 [ 437.530243][T14422] input: syz1 as /devices/virtual/input/input56 [ 437.652866][ T30] audit: type=1326 audit(1756233330.773:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.3.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cf58ebe9 code=0x7ffc0000 [ 437.730574][ T30] audit: type=1326 audit(1756233330.823:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.3.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff8cf58ebe9 code=0x7ffc0000 [ 437.853609][ T30] audit: type=1326 audit(1756233330.823:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.3.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cf58ebe9 code=0x7ffc0000 [ 437.977762][ T30] audit: type=1326 audit(1756233330.823:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.3.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cf58ebe9 code=0x7ffc0000 [ 438.049122][ T30] audit: type=1326 audit(1756233330.823:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.3.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7ff8cf58ebe9 code=0x7ffc0000 [ 438.071586][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.164934][ T30] audit: type=1326 audit(1756233330.823:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.3.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cf58ebe9 code=0x7ffc0000 [ 438.187470][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.251090][ T30] audit: type=1326 audit(1756233330.823:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.3.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff8cf58ebe9 code=0x7ffc0000 [ 438.273728][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.340048][ T30] audit: type=1326 audit(1756233330.823:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.3.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8cf58ebe9 code=0x7ffc0000 [ 438.461398][ T30] audit: type=1326 audit(1756233330.843:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.3.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7ff8cf58ebe9 code=0x7ffc0000 [ 438.758072][T13819] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 438.933257][T13819] usb 4-1: Using ep0 maxpacket: 16 [ 438.951322][T13819] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 438.975435][T13819] usb 4-1: config 0 has no interface number 0 [ 438.990960][T13819] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 439.019089][T13819] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 439.050080][T13819] usb 4-1: config 0 interface 41 has no altsetting 0 [ 439.072219][T13819] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 439.097530][T13819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.147621][T13819] usb 4-1: Product: syz [ 439.151847][T13819] usb 4-1: Manufacturer: syz [ 439.156494][T13819] usb 4-1: SerialNumber: syz [ 439.333420][T13819] usb 4-1: config 0 descriptor?? [ 439.348287][T14445] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 439.355613][T14445] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 439.511469][ T1213] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 439.601970][T14445] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 439.634808][T14445] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 439.671377][ T1213] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 439.690194][ T1213] usb 3-1: config 0 has no interface number 0 [ 439.725928][ T1213] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 439.744962][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.757236][T14471] binder: 14470:14471 ioctl 4018620d 0 returned -22 [ 439.767719][ T1213] usb 3-1: Product: syz [ 439.771921][ T1213] usb 3-1: Manufacturer: syz [ 439.785720][ T1213] usb 3-1: SerialNumber: syz [ 439.824892][ T1213] usb 3-1: config 0 descriptor?? [ 439.967707][ T5943] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 440.091102][T14478] input: syz1 as /devices/virtual/input/input57 [ 440.129208][ T5943] usb 1-1: Using ep0 maxpacket: 32 [ 440.138972][ T5943] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 440.152024][ T5943] usb 1-1: config 0 has no interface number 0 [ 440.164025][ T5943] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.181418][ T5943] usb 1-1: config 0 interface 85 has no altsetting 0 [ 440.200780][ T5943] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 440.212379][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.235775][ T5943] usb 1-1: Product: syz [ 440.244094][ T5943] usb 1-1: Manufacturer: syz [ 440.248941][ T5943] usb 1-1: SerialNumber: syz [ 440.264727][ T5943] usb 1-1: config 0 descriptor?? [ 440.363604][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.370393][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.487647][T13819] dm9601 4-1:0.41 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 440.513354][T13819] dm9601 4-1:0.41 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, ae:d2:e1:a3:12:0f [ 440.547183][T13819] usb 4-1: USB disconnect, device number 40 [ 440.570657][T13819] dm9601 4-1:0.41 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 440.706569][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.743278][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.861272][ T1213] asix 3-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 440.888051][ T1213] asix 3-1:0.239: probe with driver asix failed with error -71 [ 440.906215][ T1213] usb 3-1: USB disconnect, device number 67 [ 440.955575][ T5943] appletouch 1-1:0.85: Geyser mode initialized. [ 440.992733][ T5943] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input58 [ 441.198979][ T5943] usb 1-1: USB disconnect, device number 35 [ 441.255554][ T5943] appletouch 1-1:0.85: input: appletouch disconnected [ 441.424103][ T1213] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 441.588347][ T1213] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 441.600111][ T1213] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.612621][ T1213] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.624693][ T1213] usb 2-1: config 0 interface 0 has no altsetting 0 [ 441.634037][ T1213] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.655495][ T1213] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.680325][ T1213] usb 2-1: config 0 interface 0 has no altsetting 0 [ 441.691220][ T1213] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.700953][ T1213] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.732906][ T1213] usb 2-1: config 0 interface 0 has no altsetting 0 [ 441.742138][ T1213] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.764229][ T1213] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.790534][ T1213] usb 2-1: config 0 interface 0 has no altsetting 0 [ 441.809656][ T1213] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.827825][ T1213] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.840619][ T1213] usb 2-1: config 0 interface 0 has no altsetting 0 [ 441.856789][ T1213] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.896128][ T1213] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.912662][ T1213] usb 2-1: config 0 interface 0 has no altsetting 0 [ 441.921217][ T1213] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 441.941306][ T1213] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 441.957147][ T1213] usb 2-1: config 0 interface 0 has no altsetting 0 [ 441.976434][ T1213] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 442.005074][ T1213] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 442.026808][ T1213] usb 2-1: config 0 interface 0 has no altsetting 0 [ 442.048312][ T1213] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 442.063964][ T1213] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 442.090649][ T1213] usb 2-1: Product: syz [ 442.096141][ T1213] usb 2-1: Manufacturer: syz [ 442.106683][ T1213] usb 2-1: SerialNumber: syz [ 442.118813][ T1213] usb 2-1: config 0 descriptor?? [ 442.128914][T14526] loop2: detected capacity change from 0 to 7 [ 442.144907][ T1213] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 442.152721][T14526] Dev loop2: unable to read RDB block 7 [ 442.203149][T14526] loop2: unable to read partition table [ 442.240687][T14526] loop2: partition table beyond EOD, truncated [ 442.246974][T14526] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 442.420313][ C1] usb 2-1: yurex_control_callback - control failed: -71 [ 442.461621][ T5943] usb 2-1: USB disconnect, device number 40 [ 442.499239][ T5943] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 442.987514][ T1213] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 443.154136][ T1213] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.187623][ T1213] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.241945][ T1213] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 443.261881][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 443.272751][ T1213] usb 3-1: SerialNumber: syz [ 443.526597][ T1213] usb 3-1: 0:2 : does not exist [ 443.595070][ T1213] usb 3-1: USB disconnect, device number 68 [ 443.671416][ T5915] udevd[5915]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.754786][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 444.754813][ T30] audit: type=1326 audit(1756233338.033:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14563 comm="syz.1.3623" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f136d18ebe9 code=0x0 [ 446.394475][T14629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3652'. [ 446.417627][T14629] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3652'. [ 446.462788][T14629] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3652'. [ 446.507571][T14629] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3652'. [ 447.307680][ T1213] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 447.487573][ T1213] usb 1-1: Using ep0 maxpacket: 8 [ 447.513403][ T1213] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 447.540411][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.558434][ T1213] usb 1-1: Product: syz [ 447.567334][ T1213] usb 1-1: Manufacturer: syz [ 447.588440][ T1213] usb 1-1: SerialNumber: syz [ 447.627700][ T1213] usb 1-1: config 0 descriptor?? [ 447.664609][ T1213] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 447.698368][ T1213] dvb-usb: bulk message failed: -22 (2/0) [ 447.746288][ T1213] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 447.767182][ T5992] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 447.775366][ T1213] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 447.802417][ T1213] usb 1-1: media controller created [ 447.894870][ T1213] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.978814][ T1213] cxusb: set interface failed [ 447.984733][ T5992] usb 2-1: config 0 has no interfaces? [ 447.988476][ T1213] dvb-usb: bulk message failed: -22 (1/0) [ 448.012796][ T5992] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 448.030982][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 448.039674][ T5992] usb 2-1: SerialNumber: syz [ 448.056962][ T5992] usb 2-1: config 0 descriptor?? [ 448.090206][ T1213] DVB: Unable to find symbol mt352_attach() [ 448.137572][ T1213] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 448.160595][ T5943] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 448.277998][ T1213] rc_core: IR keymap rc-dvico-portable not found [ 448.290786][ T1213] Registered IR keymap rc-empty [ 448.298597][ T5992] usb 2-1: USB disconnect, device number 41 [ 448.335259][ T1213] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 448.338082][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 448.382371][ T5943] usb 3-1: config 0 has no interfaces? [ 448.396503][ T1213] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input59 [ 448.397102][ T5943] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 448.444917][ T5943] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 448.471127][ T1213] dvb-usb: schedule remote query interval to 100 msecs. [ 448.479686][ T5943] usb 3-1: Manufacturer: syz [ 448.487571][ T1213] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 448.547553][ T5943] usb 3-1: config 0 descriptor?? [ 448.555915][ T1213] usb 1-1: USB disconnect, device number 36 [ 448.691390][T14690] erspan0: left promiscuous mode [ 448.724013][ T1213] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 448.819614][T14690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.878741][T14690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.956128][T14698] openvswitch: netlink: IPv4 tun info is not correct [ 448.973063][T14692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.023197][T14699] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3682'. [ 449.053945][T14699] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 449.079053][T14669] lo: entered promiscuous mode [ 449.087745][T14669] tunl0: entered promiscuous mode [ 449.115987][T14669] gre0: entered promiscuous mode [ 449.139653][T14703] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 449.148672][T14669] gretap0: entered promiscuous mode [ 449.166336][T14669] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 449.224815][ T5943] usb 3-1: USB disconnect, device number 69 [ 449.500332][T14715] netlink: 'syz.3.3689': attribute type 8 has an invalid length. [ 449.508362][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3689'. [ 449.520602][ T1213] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 449.534958][T14715] bond0: entered promiscuous mode [ 449.551188][T14715] bond_slave_0: entered promiscuous mode [ 449.561842][T14715] bond0: left promiscuous mode [ 449.566936][T14715] bond_slave_0: left promiscuous mode [ 449.693632][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.740339][ T1213] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 449.754932][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.779664][ T1213] usb 1-1: config 0 descriptor?? [ 450.015440][ T1213] usbhid 1-1:0.0: can't add hid device: -71 [ 450.219963][ T1213] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 450.241880][ T1213] usb 1-1: USB disconnect, device number 37 [ 450.597952][ T1213] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 450.777509][ T1213] usb 1-1: Using ep0 maxpacket: 32 [ 450.810708][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.824844][ T1213] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 450.837486][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.849882][ T1213] usb 1-1: config 0 descriptor?? [ 450.868623][ T5943] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 450.870841][ T1213] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 450.922427][ T1213] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 451.078377][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 451.095276][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.132005][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.152704][ T5943] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 451.197484][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.229030][ T5943] usb 2-1: config 0 descriptor?? [ 451.285243][ T1213] usb 1-1: USB disconnect, device number 38 [ 451.318252][ T1213] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 451.675055][ T5943] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.002C/input/input60 [ 451.838963][T14771] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3714'. [ 451.840023][ T5943] appleir 0003:05AC:8241.002C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 451.953392][ T5943] usb 2-1: USB disconnect, device number 42 [ 452.205741][T14772] fido_id[14772]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 452.416218][T14789] syzkaller1: entered promiscuous mode [ 452.443754][T14789] syzkaller1: entered allmulticast mode [ 452.468536][ T1213] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 452.657861][ T1213] usb 1-1: Using ep0 maxpacket: 8 [ 452.683101][ T1213] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 452.713331][ T1213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.741431][ T1213] usb 1-1: Product: syz [ 452.748873][ T1213] usb 1-1: Manufacturer: syz [ 452.753538][ T1213] usb 1-1: SerialNumber: syz [ 452.787000][ T1213] usb 1-1: config 0 descriptor?? [ 452.812982][ T1213] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 453.149889][T14815] binder: 14806:14815 ioctl 40046205 0 returned -22 [ 453.416653][T14817] bond0: (slave syz_tun): Releasing backup interface [ 453.451253][T14817] syz_tun: left promiscuous mode [ 453.512129][T14817] bridge_slave_0: left allmulticast mode [ 453.526361][T14817] bridge_slave_0: left promiscuous mode [ 453.536190][T14817] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.575251][T14817] bridge_slave_1: left allmulticast mode [ 453.581755][T14817] bridge_slave_1: left promiscuous mode [ 453.592924][T14817] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.625070][T14817] bond0: (slave bond_slave_0): Releasing backup interface [ 453.640227][T14817] bond_slave_0: left promiscuous mode [ 453.685583][T14817] bond0: (slave bond_slave_1): Releasing backup interface [ 453.705718][T14817] bond_slave_1: left promiscuous mode [ 453.719715][T14817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.736275][T14817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.751692][T14817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.767793][T14817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.883283][ T24] usb 1-1: USB disconnect, device number 39 [ 454.467780][ T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 454.700813][ T24] usb 3-1: config 0 has an invalid interface number: 204 but max is 0 [ 454.713682][ T24] usb 3-1: config 0 has no interface number 0 [ 454.732866][ T24] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 454.753012][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.777501][ T24] usb 3-1: Product: syz [ 454.791625][ T24] usb 3-1: Manufacturer: syz [ 454.796375][ T24] usb 3-1: SerialNumber: syz [ 454.818150][ T24] usb 3-1: config 0 descriptor?? [ 454.845081][ T24] ems_usb 3-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 454.866405][ T24] ems_usb 3-1:0.204: probe with driver ems_usb failed with error -22 [ 454.878424][ T5943] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 455.073677][ T5943] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 455.140740][ T5943] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 455.158364][T13819] usb 3-1: USB disconnect, device number 70 [ 455.202857][ T5943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 455.230313][ T5943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 455.262043][ T5943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 455.284956][ T5943] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 455.299956][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 455.319006][ T5943] usb 5-1: Product: syz [ 455.329014][ T5943] usb 5-1: Manufacturer: syz [ 455.375480][ T5943] cdc_wdm 5-1:1.0: skipping garbage [ 455.388413][ T5943] cdc_wdm 5-1:1.0: skipping garbage [ 455.423253][ T5943] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 455.447514][ T5943] cdc_wdm 5-1:1.0: Unknown control protocol [ 455.507732][ T5992] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 455.697992][ T5992] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.751076][ T5992] usb 4-1: config 0 interface 0 has no altsetting 0 [ 455.799745][ T5992] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 455.856382][ C1] cdc_wdm 5-1:1.0: Unexpected error -71 [ 455.863527][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 455.870348][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 455.876773][ T5992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.877131][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 455.891755][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 455.899360][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 455.906081][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 455.912732][ T1213] usb 5-1: USB disconnect, device number 45 [ 455.918930][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 455.918955][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 455.918971][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 455.924514][T14875] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3758'. [ 456.027272][ T5992] usb 4-1: config 0 descriptor?? [ 456.524217][ T5992] magicmouse 0003:05AC:0269.002D: hidraw0: USB HID v10.00 Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 456.691722][ T5992] usb 4-1: USB disconnect, device number 41 [ 456.839186][T14890] fido_id[14890]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 457.329574][T14899] sit0: entered promiscuous mode [ 457.379465][T14899] netlink: 'syz.4.3767': attribute type 1 has an invalid length. [ 457.431009][T14899] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3767'. [ 457.667939][ T1213] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 457.857771][ T1213] usb 1-1: Using ep0 maxpacket: 16 [ 457.934354][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.966348][ T1213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.003907][ T1213] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 458.061026][ T1213] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 458.097483][ T1213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.149128][ T1213] usb 1-1: config 0 descriptor?? [ 458.548564][T14916] capability: warning: `syz.1.3763' uses 32-bit capabilities (legacy support in use) [ 458.741387][ T1213] HID 045e:07da: Invalid code 65791 type 1 [ 458.763223][ T1213] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002E/input/input61 [ 458.877081][ T1213] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 458.958067][ T1213] usb 1-1: USB disconnect, device number 40 [ 459.246145][T14927] fido_id[14927]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 459.689385][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3783'. [ 459.750606][T14948] ipvlan2: entered promiscuous mode [ 459.782171][T14955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3786'. [ 459.837526][T14955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3786'. [ 459.914981][T14955] team0: entered promiscuous mode [ 459.935179][T14955] team_slave_0: entered promiscuous mode [ 459.961034][T14955] team_slave_1: entered promiscuous mode [ 459.971101][T14955] gretap0: entered promiscuous mode [ 459.977958][T14955] debugfs: 'hsr1' already exists in 'hsr' [ 459.983973][T14955] Cannot create hsr debugfs directory [ 460.202469][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 460.244509][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.252044][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.967559][ T5992] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 461.137625][ T5992] usb 3-1: Using ep0 maxpacket: 8 [ 461.160372][ T5992] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 461.182762][ T5992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.219518][ T5992] usb 3-1: config 0 descriptor?? [ 461.337570][ T24] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 461.460913][ T5992] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 461.499534][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 461.514007][ T24] usb 1-1: config 1 has no interface number 0 [ 461.531477][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.552257][ T24] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 461.620169][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 461.662655][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.673009][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.695995][ T24] usb 1-1: Product: syz [ 461.704444][ T24] usb 1-1: Manufacturer: syz [ 461.718059][ T24] usb 1-1: SerialNumber: syz [ 462.128826][T15012] loop8: detected capacity change from 0 to 7 [ 462.144616][T15012] Dev loop8: unable to read RDB block 7 [ 462.154078][T15012] loop8: unable to read partition table [ 462.164483][T15012] loop8: partition table beyond EOD, truncated [ 462.171249][T15012] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 462.279217][ T5992] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 462.290322][ T5992] asix 3-1:0.0: probe with driver asix failed with error -71 [ 462.303386][ T5992] usb 3-1: USB disconnect, device number 71 [ 462.367680][T13819] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 462.558726][ T24] cdc_ncm 1-1:1.1: bind() failure [ 462.559720][T13819] usb 5-1: config 0 has an invalid interface number: 144 but max is 0 [ 462.582349][T13819] usb 5-1: config 0 has no interface number 0 [ 462.592487][T13819] usb 5-1: too many endpoints for config 0 interface 144 altsetting 138: 68, using maximum allowed: 30 [ 462.614566][T13819] usb 5-1: config 0 interface 144 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 462.628684][T13819] usb 5-1: config 0 interface 144 has no altsetting 0 [ 462.635514][T13819] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 462.645384][T13819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.657012][T13819] usb 5-1: config 0 descriptor?? [ 462.665667][T13819] cp210x 5-1:0.144: cp210x converter detected [ 462.804289][ T24] usb 1-1: USB disconnect, device number 41 [ 463.160503][T13819] cp210x 5-1:0.144: failed to get vendor val 0x000e size 3: -71 [ 463.184309][T13819] usb 5-1: cp210x converter now attached to ttyUSB0 [ 463.208461][T13819] usb 5-1: USB disconnect, device number 46 [ 463.243252][T13819] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 463.266705][T13819] cp210x 5-1:0.144: device disconnected [ 464.848728][T15046] sctp: [Deprecated]: syz.2.3823 (pid 15046) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.848728][T15046] Use struct sctp_sack_info instead [ 465.867772][T15062] sg_write: process 1562 (syz.2.3830) changed security contexts after opening file descriptor, this is not allowed. [ 466.197913][T13819] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 466.379721][T13819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.422243][T13819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.458388][T13819] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 466.494878][T13819] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 466.514389][T13819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.552201][T13819] usb 4-1: config 0 descriptor?? [ 467.028401][T13819] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 467.281379][ T6009] usb 4-1: USB disconnect, device number 42 [ 468.607995][T15125] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3859'. [ 469.308348][T13819] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 469.534956][T13819] usb 3-1: Using ep0 maxpacket: 32 [ 469.545876][T13819] usb 3-1: config 0 has an invalid interface number: 230 but max is 0 [ 469.589230][T13819] usb 3-1: config 0 has no interface number 0 [ 469.601300][T13819] usb 3-1: config 0 interface 230 has no altsetting 0 [ 469.664280][T13819] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 469.688658][T13819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.713557][T13819] usb 3-1: Product: syz [ 469.718331][T13819] usb 3-1: Manufacturer: syz [ 469.723026][T13819] usb 3-1: SerialNumber: syz [ 469.740144][T13819] usb 3-1: config 0 descriptor?? [ 469.755446][T13819] ums-usbat 3-1:0.230: USB Mass Storage device detected [ 469.785832][T13819] ums-usbat 3-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 470.097726][ T5992] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 470.225510][T15156] loop2: detected capacity change from 0 to 7 [ 470.257333][T15156] Dev loop2: unable to read RDB block 7 [ 470.263506][T15156] loop2: AHDI p2 p3 [ 470.271167][T15156] loop2: partition table partially beyond EOD, truncated [ 470.278936][T15156] loop2: p2 start 1702059890 is beyond EOD, truncated [ 470.290401][ T5992] usb 5-1: Using ep0 maxpacket: 8 [ 470.308238][ T5992] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.337540][ T5992] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 470.357096][ T5992] usb 5-1: config 1 has no interface number 1 [ 470.378287][ T5992] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 470.406673][ T5992] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 470.425573][ T5992] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 470.445269][ T5992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.459703][ T5992] usb 5-1: Product: syz [ 470.464572][ T5992] usb 5-1: Manufacturer: syz [ 470.477634][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 470.487917][ T5992] usb 5-1: SerialNumber: syz [ 470.637527][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 470.649038][ T24] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 470.657565][ T24] usb 2-1: config 0 has no interface number 0 [ 470.663699][ T24] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 470.674737][ T24] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 470.690071][ T24] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 470.701233][ T24] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.719591][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 470.729057][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.747892][ T5954] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 470.749078][ T24] usb 2-1: Product: syz [ 470.762146][ T24] usb 2-1: Manufacturer: syz [ 470.766785][ T24] usb 2-1: SerialNumber: syz [ 470.784177][ T24] usb 2-1: config 0 descriptor?? [ 470.814668][ T5992] usb 5-1: USB disconnect, device number 47 [ 470.883029][T10864] udevd[10864]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.949819][ T5954] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 470.963584][ T5954] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 470.976040][ T5954] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 470.993941][ T5954] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 471.015589][ T5954] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 471.018299][ T24] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 471.036412][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 471.062248][ T5954] usb 4-1: Product: syz [ 471.066479][ T5954] usb 4-1: Manufacturer: syz [ 471.098845][ T5954] cdc_wdm 4-1:1.0: skipping garbage [ 471.104134][ T5954] cdc_wdm 4-1:1.0: skipping garbage [ 471.128178][ T5954] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 471.134631][ T5954] cdc_wdm 4-1:1.0: Unknown control protocol [ 471.261921][ T5954] usb 2-1: USB disconnect, device number 43 [ 471.325404][ T5992] usb 4-1: USB disconnect, device number 43 [ 472.206895][T13819] ums-usbat 3-1:0.230: probe with driver ums-usbat failed with error -5 [ 472.285893][T13819] usb 3-1: USB disconnect, device number 72 [ 472.637628][ T6009] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 472.838679][ T6009] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 472.857931][ T6009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 472.902618][ T6009] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 472.933772][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.970835][ T6009] usb 5-1: Product: syz [ 472.985260][ T6009] usb 5-1: Manufacturer: syz [ 472.992751][ T6009] usb 5-1: SerialNumber: syz [ 473.019458][ T6009] usb 5-1: config 0 descriptor?? [ 473.043074][ T6009] hub 5-1:0.0: bad descriptor, ignoring hub [ 473.067762][ T6009] hub 5-1:0.0: probe with driver hub failed with error -5 [ 473.101994][ T6009] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input62 [ 473.117533][ T5992] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 473.138023][ T6009] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 473.210116][ T6009] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 473.278614][ T6009] usb 5-1: USB disconnect, device number 48 [ 473.337895][ T5992] usb 2-1: Using ep0 maxpacket: 16 [ 473.350740][ T5992] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 473.369418][ T5992] usb 2-1: config 0 has no interface number 0 [ 473.397726][ T5992] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 473.449910][ T5992] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 473.502507][ T5992] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 473.531625][ T5992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.550192][ T5992] usb 2-1: Product: syz [ 473.560174][ T5992] usb 2-1: Manufacturer: syz [ 473.570145][ T5992] usb 2-1: SerialNumber: syz [ 473.607511][ T5992] usb 2-1: config 0 descriptor?? [ 473.613386][T15217] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 473.637665][T15217] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 473.899284][T15217] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 473.939851][T15217] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 474.192361][T15229] pim6reg1: entered promiscuous mode [ 474.209042][T15229] pim6reg1: entered allmulticast mode [ 474.398720][ T5943] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 474.582750][ T5943] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 474.608843][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.631138][ T5992] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 474.662724][ T5992] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 474.687872][ T5943] usb 5-1: config 0 descriptor?? [ 474.700576][ T5992] asix 2-1:0.251: probe with driver asix failed with error -71 [ 474.774467][ T5992] usb 2-1: USB disconnect, device number 44 [ 475.745933][ T5943] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 475.779300][ T5943] usb 5-1: USB disconnect, device number 49 [ 475.877951][ T5992] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 476.059666][ T5992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 476.074722][ T5992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.095636][ T5992] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 476.107427][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.131516][ T5992] usb 1-1: config 0 descriptor?? [ 476.492888][ T5992] usbhid 1-1:0.0: can't add hid device: -71 [ 476.515235][ T5992] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 476.557055][ T5992] usb 1-1: USB disconnect, device number 42 [ 477.617857][ T6009] usb 3-1: new low-speed USB device number 73 using dummy_hcd [ 477.631994][T15294] binder: 15293:15294 ioctl c0306201 200000000040 returned -14 [ 477.791550][ T6009] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 477.819585][ T6009] usb 3-1: config 0 has no interface number 0 [ 477.835995][ T6009] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 477.865760][ T6009] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 477.920860][ T6009] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 477.931441][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.948913][ T6009] usb 3-1: config 0 descriptor?? [ 477.965320][T15290] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 477.983428][ T6009] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 478.228464][ T6009] usb 3-1: USB disconnect, device number 73 [ 478.637135][T15320] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 478.716160][T15322] tipc: Started in network mode [ 478.744191][T15322] tipc: Node identity ac1414aa, cluster identity 4711 [ 478.767355][T15322] tipc: Enabled bearer , priority 10 [ 479.539921][T15341] netlink: 'syz.4.3952': attribute type 13 has an invalid length. [ 479.619935][T15341] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 479.678888][T15341] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 479.686674][T15341] gretap1: entered promiscuous mode [ 479.721342][T15341] gretap1: entered allmulticast mode [ 479.758392][ T5992] tipc: Node number set to 2886997162 [ 480.029421][ T5992] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 480.232607][ T5992] usb 3-1: unable to get BOS descriptor or descriptor too short [ 480.243800][ T5992] usb 3-1: config 6 has an invalid interface number: 158 but max is 0 [ 480.267027][ T5992] usb 3-1: config 6 has no interface number 0 [ 480.284360][ T5992] usb 3-1: config 6 interface 158 has no altsetting 0 [ 480.353969][ T5992] usb 3-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 480.371668][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.398313][ T5992] usb 3-1: Product: syz [ 480.402609][ T5992] usb 3-1: Manufacturer: syz [ 480.413195][ T5992] usb 3-1: SerialNumber: syz [ 480.485615][T15358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3959'. [ 480.516138][T15358] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3959'. [ 481.186117][T15373] gretap0: entered promiscuous mode [ 481.240262][T15373] batman_adv: batadv0: Adding interface: macvlan3 [ 481.246749][T15373] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.310363][T15373] batman_adv: batadv0: Interface activated: macvlan3 [ 481.557318][T15381] syzkaller1: entered promiscuous mode [ 481.566581][T15381] syzkaller1: entered allmulticast mode [ 481.960654][ T5992] rtsx_usb 3-1:6.158: probe with driver rtsx_usb failed with error -110 [ 482.012037][ T5992] usb 3-1: USB disconnect, device number 74 [ 482.103907][T15396] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3978'. [ 482.371305][T15407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3981'. [ 483.294835][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3991'. [ 483.325406][T15426] openvswitch: netlink: nsh attr 8224 is out of range max 3 [ 483.365714][T15426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 483.948242][ T5992] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 483.997925][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3998'. [ 484.027692][ T5943] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 484.163558][ T5992] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 484.185278][ T5992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.204690][ T5992] usb 2-1: Product: syz [ 484.225540][ T5992] usb 2-1: Manufacturer: syz [ 484.230558][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 484.246031][ T5992] usb 2-1: SerialNumber: syz [ 484.269079][ T5943] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 484.283427][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.306893][ T5992] usb 2-1: config 0 descriptor?? [ 484.314564][ T5943] usb 3-1: Product: syz [ 484.331189][ T5943] usb 3-1: Manufacturer: syz [ 484.339405][ T5992] ch341 2-1:0.0: ch341-uart converter detected [ 484.352859][ T5943] usb 3-1: SerialNumber: syz [ 484.380356][ T5943] usb 3-1: config 0 descriptor?? [ 484.408893][ T5943] gspca_main: sq905-2.14.0 probing 2770:9120 [ 484.577622][ T5954] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 484.780657][ T5954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 484.812128][ T5954] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 484.840850][ T5954] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 484.859827][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.875905][ T5954] usb 5-1: Product: syz [ 484.886299][ T5954] usb 5-1: Manufacturer: syz [ 484.899243][ T5954] usb 5-1: SerialNumber: syz [ 485.131872][ T5954] usb 5-1: 0:2 : does not exist [ 485.154913][ T5954] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 485.219084][ T5954] usb 5-1: USB disconnect, device number 50 [ 485.296970][T10864] udevd[10864]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.350138][ T5992] ch341-uart ttyUSB0: failed to read break control: -71 [ 485.358409][ T5992] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 485.371958][ T5992] usb 2-1: USB disconnect, device number 45 [ 485.382277][ T5992] ch341 2-1:0.0: device disconnected [ 485.431139][ T5943] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 485.440902][ T5943] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 485.457021][ T5943] usb 3-1: USB disconnect, device number 75 [ 485.517598][T13819] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 485.715579][T13819] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 485.757285][T13819] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.785847][T13819] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.795436][T13819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.034730][T13819] usb 1-1: usb_control_msg returned -32 [ 486.045203][T13819] usbtmc 1-1:16.0: can't read capabilities [ 486.117025][T15484] netlink: 'syz.3.4018': attribute type 11 has an invalid length. [ 486.136909][T15485] loop2: detected capacity change from 0 to 7 [ 486.172121][T10859] Dev loop2: unable to read RDB block 7 [ 486.181209][T10859] loop2: unable to read partition table [ 486.202008][T10859] loop2: partition table beyond EOD, truncated [ 486.213807][T15485] Dev loop2: unable to read RDB block 7 [ 486.223374][T15485] loop2: unable to read partition table [ 486.237731][T15485] loop2: partition table beyond EOD, truncated [ 486.244168][T15485] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 486.610342][ T5954] usb 1-1: USB disconnect, device number 43 [ 486.982559][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4030'. [ 487.713632][T15538] openvswitch: netlink: IPv4 tun info is not correct [ 488.418057][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 488.582836][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.604486][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.635044][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 488.657827][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 488.667135][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.696512][ T24] usb 5-1: config 0 descriptor?? [ 489.127330][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 489.165541][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 489.184313][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 489.194422][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 489.202315][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 489.224893][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 489.233675][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 489.249668][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 489.261173][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 489.287630][ T24] plantronics 0003:047F:FFFF.0030: unknown main item tag 0x0 [ 489.299631][ T5954] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 489.328312][ T24] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 489.387192][ T24] usb 5-1: USB disconnect, device number 51 [ 489.447524][ T1213] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 489.494509][ T5954] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 489.534087][T15596] fido_id[15596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 489.536144][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.593258][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.604248][ T5954] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 489.609216][ T1213] usb 2-1: Using ep0 maxpacket: 16 [ 489.619973][ T5954] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 489.645422][ T5954] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 489.663446][ T5954] usb 1-1: Manufacturer: syz [ 489.670764][ T1213] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 489.686699][ T1213] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.690537][ T5954] usb 1-1: config 0 descriptor?? [ 489.715570][ T1213] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 489.737305][ T1213] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 489.760432][ T1213] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.777708][ T1213] usb 2-1: Product: syz [ 489.781921][ T1213] usb 2-1: Manufacturer: syz [ 489.786529][ T1213] usb 2-1: SerialNumber: syz [ 490.058962][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 490.141818][ T5954] appleir 0003:05AC:8243.0031: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 490.220640][ T24] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 490.241184][ T1213] usb 2-1: 0:2 : does not exist [ 490.257687][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 490.281849][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 490.306560][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 490.344974][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 490.367644][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 490.397217][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.420906][ T24] usb 4-1: config 0 descriptor?? [ 490.427670][T15603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 490.856068][ T1213] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 490.875951][ T24] plantronics 0003:047F:FFFF.0032: reserved main item tag 0xd [ 490.926374][ T24] plantronics 0003:047F:FFFF.0032: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 490.962110][ T1213] usb 2-1: USB disconnect, device number 46 [ 491.363166][T13819] usb 4-1: USB disconnect, device number 44 [ 492.160995][ T5943] usb 1-1: USB disconnect, device number 44 [ 492.226334][T15648] macvlan2: entered allmulticast mode [ 492.233186][T15648] veth1_vlan: entered allmulticast mode [ 492.262797][T15648] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 492.593784][ T24] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 492.728386][ T5943] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 492.877635][ T5954] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 492.918244][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 492.932261][ T5943] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 492.951374][ T5943] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 492.975861][ T5943] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 492.995744][ T5943] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.016998][ T5943] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.033768][ T5943] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 493.046182][ T5943] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 493.068101][ T5943] usb 1-1: config 168 interface 0 has no altsetting 0 [ 493.076353][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.096545][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.111342][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 493.121546][ T5943] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 493.129744][ T5943] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 493.149361][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.168701][ T5943] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 493.187637][ T5943] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.201164][ T5954] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.216243][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.225135][ T5943] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.239989][ T5943] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 493.253083][ T5954] usb 3-1: config 0 descriptor?? [ 493.264041][ T5943] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 493.311325][T15680] vxcan0: tx drop: invalid da for name 0x00000000000000f5 [ 493.311796][ T5943] usb 1-1: config 168 interface 0 has no altsetting 0 [ 493.339915][ T5943] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 493.350382][ T5943] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 493.390777][ T5943] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 493.410303][ T5943] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.424954][ T5943] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 493.437504][ T5943] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 493.450353][ T5943] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 493.467298][ T5943] usb 1-1: config 168 interface 0 has no altsetting 0 [ 493.479374][ T5943] usb 1-1: string descriptor 0 read error: -22 [ 493.497686][ T5943] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 493.506810][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.556787][ T5943] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 493.695257][ T5954] plantronics 0003:047F:FFFF.0034: ignoring exceeding usage max [ 493.740455][ T5954] plantronics 0003:047F:FFFF.0034: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 493.838685][T15694] binder: 15692:15694 ioctl c0306201 2000000008c0 returned -14 [ 493.923255][ T5954] usb 3-1: USB disconnect, device number 76 [ 494.339341][T15707] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4109'. [ 494.983624][T15728] input: syz0 as /devices/virtual/input/input65 [ 495.150935][ T30] audit: type=1326 audit(1756233388.433:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.4.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feae658ebe9 code=0x7fc00000 [ 495.338785][ T5943] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 495.565961][ T5943] usb 2-1: config 0 has an invalid interface number: 204 but max is 0 [ 495.575359][ T30] audit: type=1326 audit(1756233388.853:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15720 comm="syz.4.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feae652ade9 code=0x7fc00000 [ 495.593939][ T5943] usb 2-1: config 0 has no interface number 0 [ 495.645015][ T5943] usb 2-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 495.657502][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.672687][ T5943] usb 2-1: Product: syz [ 495.676927][ T5943] usb 2-1: Manufacturer: syz [ 495.682032][ T5943] usb 2-1: SerialNumber: syz [ 495.694481][ T5943] usb 2-1: config 0 descriptor?? [ 495.713462][ T5943] ems_usb 2-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 495.727982][ T5943] ems_usb 2-1:0.204: probe with driver ems_usb failed with error -22 [ 496.151501][ T5943] usb 2-1: USB disconnect, device number 47 [ 497.236640][T15797] vlan3: entered promiscuous mode [ 497.247732][T15797] erspan0: entered promiscuous mode [ 497.264701][T15797] vlan3: entered allmulticast mode [ 497.294027][T15797] erspan0: entered allmulticast mode [ 497.397777][ T5184] Bluetooth: hci0: command 0x0406 tx timeout [ 497.404398][T13819] usb 1-1: USB disconnect, device number 45 [ 497.404571][ T1213] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 497.417772][ T1213] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 498.136368][T15815] syzkaller1: entered promiscuous mode [ 498.174311][T15815] syzkaller1: entered allmulticast mode [ 498.468025][ T6009] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 498.629522][T15829] vivid-001: disconnect [ 498.658967][T15828] vivid-001: reconnect [ 498.663801][ T6009] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 498.697879][ T6009] usb 3-1: config 0 interface 0 has no altsetting 0 [ 498.738554][ T6009] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 498.753191][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 498.772711][ T6009] usb 3-1: Product: syz [ 498.776932][ T6009] usb 3-1: Manufacturer: syz [ 498.786619][ T6009] usb 3-1: SerialNumber: syz [ 498.820795][ T6009] usb 3-1: config 0 descriptor?? [ 498.849637][ T6009] usb 3-1: selecting invalid altsetting 0 [ 499.130319][ T5943] usb 3-1: USB disconnect, device number 77 [ 499.482585][ T5184] Bluetooth: hci2: command 0x0406 tx timeout [ 499.488941][ T1213] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 499.495057][ T1213] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 500.077515][T13819] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 500.244348][T13819] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.257539][T13819] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.269272][T13819] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 500.280549][T13819] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.317293][T13819] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.326854][T13819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.346251][T13819] usb 3-1: Product: syz [ 500.352153][T13819] usb 3-1: Manufacturer: syz [ 500.357029][T13819] usb 3-1: SerialNumber: syz [ 500.397189][T13819] cdc_mbim 3-1:1.0: skipping garbage [ 500.602258][T15845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 501.230927][T15845] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 501.446813][T13819] cdc_mbim 3-1:1.0: bind() failure [ 501.466754][T13819] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 501.475572][T13819] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 501.485516][T13819] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 501.505871][T13819] usb 3-1: USB disconnect, device number 78 [ 501.557790][ T1213] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 501.565893][ T5184] Bluetooth: hci3: command 0x0406 tx timeout [ 501.581316][ T1213] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 501.813281][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.819865][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.140234][T15849] batadv_slave_0: entered promiscuous mode [ 502.151960][T15853] batadv_slave_0: left promiscuous mode [ 502.533057][T15880] loop4: detected capacity change from 0 to 7 [ 502.562071][ T5915] Dev loop4: unable to read RDB block 7 [ 502.577875][ T5915] loop4: unable to read partition table [ 502.585011][ T5915] loop4: partition table beyond EOD, truncated [ 502.602955][T15880] Dev loop4: unable to read RDB block 7 [ 502.617984][T15880] loop4: unable to read partition table [ 502.626829][T15880] loop4: partition table beyond EOD, truncated [ 502.646609][T15880] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 502.656062][ T5863] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 502.833980][ T5863] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 502.865001][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 502.898139][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 502.920175][ T5863] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 502.950404][ T5863] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 502.987592][ T5863] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 503.015416][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.047759][ T5863] usb 4-1: config 0 descriptor?? [ 503.061070][T15877] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 503.545369][ T5863] plantronics 0003:047F:FFFF.0035: reserved main item tag 0xd [ 503.598553][ T5863] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 503.640966][ T5184] Bluetooth: hci4: command 0x0406 tx timeout [ 503.647206][ T1213] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 503.664531][ T1213] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 503.827035][ T5930] usb 4-1: USB disconnect, device number 45 [ 504.030468][T15920] fido_id[15920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 504.068046][T13819] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 504.245530][T13819] usb 2-1: Using ep0 maxpacket: 16 [ 504.266118][T13819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.297630][T13819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.307710][ T5954] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 504.327457][T13819] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 504.338027][T13819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.372895][T13819] usb 2-1: config 0 descriptor?? [ 504.497135][T15939] vivid-000: disconnect [ 504.513022][T15939] vivid-000: reconnect [ 504.517444][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 504.541896][ T5954] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 504.557615][ T5954] usb 5-1: config 1 has no interface number 0 [ 504.574187][ T5954] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 504.607110][ T5954] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 504.667684][ T5954] usb 5-1: config 1 interface 105 has no altsetting 0 [ 504.698508][ T5954] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 504.727060][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.755727][ T5954] usb 5-1: Product: syz [ 504.755906][T15947] input: syz0 as /devices/virtual/input/input68 [ 504.787706][ T5954] usb 5-1: Manufacturer: syz [ 504.792388][ T5954] usb 5-1: SerialNumber: syz [ 504.809501][T15947] input: failed to attach handler leds to device input68, error: -6 [ 504.822181][T15932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 504.849156][T15932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 504.860568][T13819] gt683r_led 0003:1770:FF00.0036: ignoring exceeding usage max [ 504.949135][T13819] gt683r_led 0003:1770:FF00.0036: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.1-1/input0 [ 505.077045][T13819] usb 2-1: USB disconnect, device number 48 [ 505.139109][ T5992] gt683r_led 0003:1770:FF00.0036: failed to send set report request: -19 [ 505.236353][T15949] fido_id[15949]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 505.321453][T15932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 505.350886][T15932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 505.998923][ T5954] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 506.057933][ T5954] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 506.135244][ T5954] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 66:b4:66:16:cb:8e [ 506.227671][ T5954] usb 5-1: USB disconnect, device number 52 [ 506.278520][ T5184] Bluetooth: hci1: command 0x0406 tx timeout [ 506.292975][ T1213] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 506.315521][ T5954] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 506.325472][ T1213] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 506.526510][ T5954] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 506.564043][ T5954] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 506.617061][ T5954] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 506.797213][T15976] dlm: non-version read from control device 4 [ 506.934991][T15977] netlink: 'syz.1.4188': attribute type 4 has an invalid length. [ 507.023711][T15977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4188'. [ 507.848844][T16008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4197'. [ 508.506081][T16025] loop2: detected capacity change from 0 to 7 [ 508.529453][ T5915] Dev loop2: unable to read RDB block 7 [ 508.535139][ T5915] loop2: AHDI p1 p2 p3 [ 508.547851][ T5915] loop2: partition table partially beyond EOD, truncated [ 508.583076][ T5915] loop2: p1 start 1601398130 is beyond EOD, truncated [ 508.615727][ T5915] loop2: p2 start 1702059890 is beyond EOD, truncated [ 508.651918][T16025] Dev loop2: unable to read RDB block 7 [ 508.687606][T16025] loop2: AHDI p1 p2 p3 [ 508.697691][T16025] loop2: partition table partially beyond EOD, truncated [ 508.728149][T16025] loop2: p1 start 1601398130 is beyond EOD, truncated [ 508.745584][T16025] loop2: p2 start 1702059890 is beyond EOD, truncated [ 508.956006][T16042] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 510.037684][ T1213] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 510.220986][ T1213] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 510.245728][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 510.288209][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 510.317510][ T1213] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 510.341189][ T1213] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.373472][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.414608][ T1213] usb 3-1: config 0 descriptor?? [ 510.855430][ T1213] hid_parser_main: 2 callbacks suppressed [ 510.855454][ T1213] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 510.899433][ T1213] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 510.927538][ T1213] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 510.959398][ T1213] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 510.980106][ T1213] plantronics 0003:047F:FFFF.0037: unknown main item tag 0x0 [ 511.020176][ T1213] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 511.151779][ T1213] usb 3-1: USB disconnect, device number 79 [ 511.274332][T16118] fido_id[16118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 511.385181][T16127] input: syz1 as /devices/virtual/input/input69 [ 511.401710][T16127] input: failed to attach handler leds to device input69, error: -6 [ 511.467665][T13819] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 511.592422][T16133] tipc: Started in network mode [ 511.597896][T16133] tipc: Node identity 4, cluster identity 4711 [ 511.604096][T16133] tipc: Node number set to 4 [ 511.639141][T13819] usb 4-1: Using ep0 maxpacket: 8 [ 511.652668][T13819] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 511.673868][T13819] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 511.702599][T13819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 511.735019][T13819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 511.750405][T13819] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 511.796134][T13819] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 511.806094][T13819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.062136][T13819] usb 4-1: GET_CAPABILITIES returned 0 [ 512.072958][T13819] usbtmc 4-1:16.0: can't read capabilities [ 512.274211][ T1213] usb 4-1: USB disconnect, device number 46 [ 513.501453][T16186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.502365][ T30] audit: type=1326 audit(1756233407.783:3403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16210 comm="syz.1.4278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f136d18ebe9 code=0x0 [ 516.088434][T16246] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4294'. [ 516.437742][ T24] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 516.627506][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 516.639497][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 516.667888][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 516.709107][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 516.718394][ T1213] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 516.738375][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.765220][ T24] usb 1-1: Product: syz [ 516.773717][ T24] usb 1-1: Manufacturer: syz [ 516.778941][ T24] usb 1-1: SerialNumber: syz [ 516.799247][ T24] usb 1-1: config 0 descriptor?? [ 516.812583][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 516.828169][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 516.867756][ T5992] delete_channel: no stack [ 516.890540][ T1213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.923496][ T1213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.956480][ T1213] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 516.975769][ T1213] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 516.985748][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.023359][ T1213] usb 2-1: config 0 descriptor?? [ 517.451089][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 517.460101][ T24] em28xx 1-1:0.0: Config register raw data: 0x1c [ 517.526113][ T1213] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 517.578037][T16274] input: syz0 as /devices/virtual/input/input71 [ 517.660891][ T24] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 517.716612][ T24] em28xx 1-1:0.0: No AC97 audio processor [ 517.772572][ T24] usb 1-1: USB disconnect, device number 46 [ 517.870391][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 517.889252][ T24] em28xx 1-1:0.0: Freeing device [ 517.897271][ T1213] usb 2-1: USB disconnect, device number 49 [ 517.925203][T16282] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4310'. [ 518.707708][ T1213] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 518.877926][ T1213] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 518.887342][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 518.895602][ T1213] usb 3-1: Product: syz [ 519.577462][ T1213] usb 3-1: Manufacturer: syz [ 519.582129][ T1213] usb 3-1: SerialNumber: syz [ 519.600471][ T1213] usb 3-1: config 0 descriptor?? [ 519.610080][ T1213] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 520.444986][ T24] usb 3-1: USB disconnect, device number 80 [ 521.554688][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4344'. [ 522.028537][T16389] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 522.059321][T16389] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 522.258770][ T1213] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 522.340178][ T24] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 522.348887][ T5930] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 522.434804][ T1213] usb 4-1: Using ep0 maxpacket: 32 [ 522.453316][ T1213] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 522.467960][ T1213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.497770][ T1213] usb 4-1: config 0 descriptor?? [ 522.507495][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 522.512919][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 522.521767][ T5930] usb 5-1: unable to get BOS descriptor or descriptor too short [ 522.540226][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 522.554073][ T1213] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 522.561750][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 522.574427][ T5930] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 522.586062][ T5930] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 522.599064][ T5930] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.609383][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 522.619963][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.629058][ T24] usb 1-1: Product: syz [ 522.634077][ T24] usb 1-1: Manufacturer: syz [ 522.640834][ T5930] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.651043][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.659484][ T24] usb 1-1: SerialNumber: syz [ 522.667855][ T5930] usb 5-1: Product: syz [ 522.672113][ T5930] usb 5-1: Manufacturer: syz [ 522.677211][ T5930] usb 5-1: SerialNumber: syz [ 522.683441][ T24] usb 1-1: config 0 descriptor?? [ 522.694539][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 522.713124][ T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 522.767802][ T5992] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 522.942802][ T5992] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 522.944397][ T5930] usb 5-1: 0:2 : does not exist [ 522.956105][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.996508][ T5992] usb 2-1: config 0 descriptor?? [ 523.034190][ T5930] usb 5-1: USB disconnect, device number 53 [ 523.113962][T10859] udevd[10859]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 523.232766][ T5992] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 523.298494][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 523.306002][ T24] em28xx 1-1:0.0: Config register raw data: 0x36 [ 523.312880][ T24] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 523.320242][ T24] em28xx 1-1:0.0: No AC97 audio processor [ 523.434103][ T5992] [drm:udl_init] *ERROR* Selecting channel failed [ 523.479370][ T5992] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 523.502560][ T5992] [drm] Initialized udl on minor 2 [ 523.512861][ T5992] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 523.517931][ T5930] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 523.533221][ T1213] gspca_vc032x: reg_w err -71 [ 523.546674][ T5992] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 523.547756][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.577702][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.583104][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.612582][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.614100][ T5954] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 523.631666][ T5992] usb 2-1: USB disconnect, device number 50 [ 523.634853][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.643187][ T5954] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 523.664617][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.684577][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.705393][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.731695][ T24] usb 1-1: USB disconnect, device number 47 [ 523.742864][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.754730][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 523.777971][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.787921][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 523.804615][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.810157][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.815728][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.824122][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 523.842828][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.857576][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 523.871349][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.876669][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.886222][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.892455][ T5930] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 523.901945][ T1213] gspca_vc032x: I2c Bus Busy Wait 00 [ 523.907280][ T1213] gspca_vc032x: Unknown sensor... [ 523.913735][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.922300][ T1213] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 523.943042][ T5930] usb 3-1: config 0 descriptor?? [ 523.972622][ T1213] usb 4-1: USB disconnect, device number 47 [ 524.300685][T16424] input: syz1 as /devices/virtual/input/input72 [ 524.317553][T16424] input: failed to attach handler leds to device input72, error: -6 [ 524.367702][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 524.428887][ T5930] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 524.483180][T16430] netlink: 'syz.3.4371': attribute type 12 has an invalid length. [ 524.502706][T16430] netlink: 'syz.3.4371': attribute type 29 has an invalid length. [ 524.527817][T16430] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4371'. [ 524.537518][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 524.558729][T16430] netlink: 'syz.3.4371': attribute type 1 has an invalid length. [ 524.568415][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 524.589324][T16430] netlink: 'syz.3.4371': attribute type 2 has an invalid length. [ 524.592502][ T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 524.611774][T16430] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4371'. [ 524.652990][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.667664][ T24] usb 5-1: Product: syz [ 524.671880][ T24] usb 5-1: Manufacturer: syz [ 524.676500][ T24] usb 5-1: SerialNumber: syz [ 524.713136][ T24] usb 5-1: config 0 descriptor?? [ 524.782468][ T5930] usb 3-1: USB disconnect, device number 81 [ 525.178176][ T24] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 525.834664][ T5992] usb 5-1: USB disconnect, device number 54 [ 526.593129][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.769862][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.960930][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.292262][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.738854][ T36] bridge_slave_1: left allmulticast mode [ 527.768604][ T36] bridge_slave_1: left promiscuous mode [ 527.792891][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.901520][ T36] bridge_slave_0: left allmulticast mode [ 527.907236][ T36] bridge_slave_0: left promiscuous mode [ 527.977681][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.046901][ T36] batman_adv: batadv0: Interface deactivated: gretap1 [ 528.119810][T16499] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.4396'. [ 528.388951][ T5867] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 528.399474][ T5867] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 528.436619][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 528.445400][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 528.455100][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 528.502803][ T5184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 528.512186][ T5184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 528.519793][ T5184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 528.532071][ T5184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 528.541845][ T5184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 529.065874][ T36] gretap0 (unregistering): left promiscuous mode [ 529.151681][ T36] batman_adv: batadv0: Removing interface: gretap1 [ 530.069727][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.093113][ T36] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 530.125708][ T36] veth1_vlan: left allmulticast mode [ 530.141752][ T36] bond0 (unregistering): Released all slaves [ 530.213658][T16546] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4402'. [ 530.233495][T16546] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4402'. [ 530.284566][ T36] : left promiscuous mode [ 530.421504][T16556] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.472957][T16561] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 530.600253][ T5867] Bluetooth: hci1: command tx timeout [ 531.018575][ T5954] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 531.203238][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 531.252858][ T5954] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 531.284608][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.344820][ T5954] usb 2-1: Product: syz [ 531.365041][ T5954] usb 2-1: Manufacturer: syz [ 531.387036][ T5954] usb 2-1: SerialNumber: syz [ 531.387572][ T36] team0: left promiscuous mode [ 531.418527][ T5954] usb 2-1: config 0 descriptor?? [ 531.440370][ T36] team_slave_0: left promiscuous mode [ 531.453315][ T5954] gspca_main: sq930x-2.14.0 probing 2770:930c [ 531.485077][ T36] team_slave_1: left promiscuous mode [ 531.594353][ T36] hsr_slave_0: left promiscuous mode [ 531.615904][ T36] hsr_slave_1: left promiscuous mode [ 531.649058][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 531.682780][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 531.741419][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 531.759892][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 531.869025][ T36] veth1_macvtap: left promiscuous mode [ 531.874722][ T36] veth0_macvtap: left promiscuous mode [ 531.913559][ T36] veth1_vlan: left promiscuous mode [ 531.942141][ T36] veth0_vlan: left promiscuous mode [ 532.516668][ T24] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 532.683844][ T5867] Bluetooth: hci1: command tx timeout [ 532.687491][ T5954] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 532.704350][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 532.717776][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.728441][ T24] usb 5-1: Product: syz [ 532.732732][ T24] usb 5-1: Manufacturer: syz [ 532.741895][ T24] usb 5-1: SerialNumber: syz [ 532.915948][ T5954] gspca_sq930x: Sensor ov9630 not yet treated [ 532.933772][ T5954] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 532.964541][ T5954] usb 2-1: USB disconnect, device number 51 [ 533.142195][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4425'. [ 533.462426][ T36] team0 (unregistering): Port device team_slave_1 removed [ 533.511563][ T36] team0 (unregistering): Port device team_slave_0 removed [ 533.803917][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 533.822807][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 533.834107][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 533.856016][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 533.916771][ T24] usb 5-1: USB disconnect, device number 55 [ 533.997648][ T30] audit: type=1326 audit(1756233427.273:3404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16630 comm="syz.1.4431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f136d18ebe9 code=0x0 [ 534.288907][T16617] geneve2: entered promiscuous mode [ 534.294313][T16617] geneve2: entered allmulticast mode [ 534.385293][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.421637][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.491452][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.537489][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.683083][T16513] chnl_net:caif_netlink_parms(): no params data found [ 534.766662][ T5867] Bluetooth: hci1: command tx timeout [ 535.222014][ T36] IPVS: stop unused estimator thread 0... [ 535.649663][T16513] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.656987][ T24] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 535.692982][T16513] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.712790][T16513] bridge_slave_0: entered allmulticast mode [ 535.738186][T16513] bridge_slave_0: entered promiscuous mode [ 535.773020][T16513] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.797769][T16513] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.838678][T16513] bridge_slave_1: entered allmulticast mode [ 535.847535][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 535.899656][T16513] bridge_slave_1: entered promiscuous mode [ 535.911369][ T24] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 535.927424][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.966465][ T24] usb 2-1: Product: syz [ 535.976592][ T24] usb 2-1: Manufacturer: syz [ 535.995482][ T24] usb 2-1: SerialNumber: syz [ 536.028435][ T24] usb 2-1: config 0 descriptor?? [ 536.060600][ T24] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 536.158979][T16513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.206697][T16513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.784245][T16513] team0: Port device team_slave_0 added [ 536.820158][T16513] team0: Port device team_slave_1 added [ 536.838101][ T5867] Bluetooth: hci1: command tx timeout [ 537.032931][T16513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.073824][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.113743][T16513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.147654][T16513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.166159][T16513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.192128][ C0] vkms_vblank_simulate: vblank timer overrun [ 537.204944][T16513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.274674][ T24] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 537.285748][ T24] usb 2-1: USB disconnect, device number 52 [ 537.509587][T16513] hsr_slave_0: entered promiscuous mode [ 537.541098][T16513] hsr_slave_1: entered promiscuous mode [ 537.549066][T16513] debugfs: 'hsr0' already exists in 'hsr' [ 537.557047][T16513] Cannot create hsr debugfs directory [ 537.929337][ T1213] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 537.937696][ T24] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 538.098912][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 538.114336][ T1213] usb 5-1: Using ep0 maxpacket: 16 [ 538.128471][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.140549][ T1213] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 538.157501][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.187942][ T1213] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 538.217518][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 538.226771][ T1213] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 538.242464][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.280163][ T1213] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 538.290621][ T24] usb 3-1: config 0 descriptor?? [ 538.307538][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.329571][ T24] hub 3-1:0.0: USB hub found [ 538.356325][ T1213] usb 5-1: Product: syz [ 538.366249][ T1213] usb 5-1: Manufacturer: syz [ 538.382634][ T1213] usb 5-1: SerialNumber: syz [ 538.522064][ T24] hub 3-1:0.0: 1 port detected [ 538.654243][T16513] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 538.712465][T16513] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 538.748864][ T6009] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 538.795899][T16513] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 538.850429][T16513] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 538.886885][ T1213] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 538.942763][ T6009] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 538.986147][ T6009] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 539.017318][ T6009] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.033063][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.090824][T16735] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 539.145943][ T24] hub 3-1:0.0: activate --> -90 [ 539.188840][T16513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.224172][T16513] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.265830][T11969] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.274480][T11969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.300021][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.307248][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.356980][ T5863] usb 3-1: USB disconnect, device number 82 [ 539.515947][T16513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.612018][T16513] veth0_vlan: entered promiscuous mode [ 539.637031][T16513] veth1_vlan: entered promiscuous mode [ 539.690465][ T1213] usb 5-1: 2:1: cannot get freq at ep 0x82 [ 539.746742][T16513] veth0_macvtap: entered promiscuous mode [ 539.755827][ T6009] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.792434][ T1213] usb 5-1: USB disconnect, device number 56 [ 539.809858][T16513] veth1_macvtap: entered promiscuous mode [ 539.925857][T16513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.981487][T16513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.042051][ T1144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.051014][ T6009] usb 4-1: USB disconnect, device number 48 [ 540.102643][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.157579][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.214553][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.237257][T16763] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 540.537749][T16772] netlink: 'syz.4.4468': attribute type 4 has an invalid length. [ 540.553364][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.575236][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.714485][ T3543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.755141][ T3543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.352618][T16792] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 541.943418][T16804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.242881][T16809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 542.270765][T16811] netlink: 'syz.5.4480': attribute type 1 has an invalid length. [ 542.528319][T16819] netlink: 'syz.2.4483': attribute type 12 has an invalid length. [ 542.566793][T16819] netlink: 'syz.2.4483': attribute type 29 has an invalid length. [ 542.585062][T16819] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4483'. [ 543.207727][T13819] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 543.417828][T13819] usb 6-1: Using ep0 maxpacket: 8 [ 543.449875][T13819] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 543.464205][T13819] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 543.509371][T13819] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 543.530538][T13819] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 543.551755][T13819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.687587][ T6009] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 543.749789][T16855] input: syz1 as /devices/virtual/input/input73 [ 543.847671][ T6009] usb 3-1: Using ep0 maxpacket: 16 [ 543.860267][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.902351][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.944239][ T6009] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 543.964521][T13819] usb 6-1: USB disconnect, device number 2 [ 543.971482][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.004869][ T6009] usb 3-1: config 0 descriptor?? [ 544.847980][ T6009] letsketch 0003:6161:4D15.003A: Device info: ఁ [ 544.917144][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880768ef400: rx timeout, send abort [ 545.051302][ T6009] letsketch 0003:6161:4D15.003A: Device info: 쳔 [ 545.107072][T16883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4510'. [ 545.298222][ T6009] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 545.316815][T16888] binder: 16886:16888 ioctl c0306201 2000000001c0 returned -22 [ 545.335210][ T6009] letsketch 0003:6161:4D15.003A: probe with driver letsketch failed with error -71 [ 545.386983][ T6009] usb 3-1: USB disconnect, device number 83 [ 545.418583][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880768eec00: rx timeout, send abort [ 545.427389][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880768ef400: abort rx timeout. Force session deactivation [ 545.927110][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880768eec00: abort rx timeout. Force session deactivation [ 546.067850][ T5992] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 546.249800][ T5992] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 546.262562][ T5992] usb 6-1: config 0 has no interface number 0 [ 546.275024][ T5992] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 546.285276][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.301414][ T5992] usb 6-1: config 0 descriptor?? [ 546.318534][ T5992] cp210x 6-1:0.1: cp210x converter detected [ 546.725969][ T5992] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 546.945228][ T5992] usb 6-1: cp210x converter now attached to ttyUSB0 [ 547.147812][ T5992] usb 6-1: USB disconnect, device number 3 [ 547.158197][ T5992] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 547.170934][ T5992] cp210x 6-1:0.1: device disconnected [ 547.955093][T16933] netlink: 'syz.5.4531': attribute type 29 has an invalid length. [ 547.965691][T16933] netlink: 'syz.5.4531': attribute type 29 has an invalid length. [ 547.985489][T16933] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4531'. [ 548.197700][T16910] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 548.198263][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout [ 548.216547][T16910] Bluetooth: hci1: Opcode 0x0406 failed: -110 [ 549.041160][T16910] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 549.062966][T16937] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 549.245108][ T30] audit: type=1800 audit(1756233442.523:3405): pid=16945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4535" name="nullb0" dev="devtmpfs" ino=3108 res=0 errno=0 [ 549.276177][ C0] vkms_vblank_simulate: vblank timer overrun [ 549.471567][T16952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 549.486422][T16953] input: syz0 as /devices/virtual/input/input74 [ 550.278248][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout [ 550.878742][ T6009] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 551.017620][ T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 551.037747][ T6009] usb 4-1: Using ep0 maxpacket: 16 [ 551.048346][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.059474][ T6009] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.070797][ T6009] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 551.084091][ T6009] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 551.093551][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.104584][ T6009] usb 4-1: config 0 descriptor?? [ 551.172648][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.196019][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.217818][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 551.234664][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 551.246766][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.259571][ T10] usb 5-1: config 0 descriptor?? [ 551.534475][ T6009] HID 045e:07da: Invalid code 65791 type 1 [ 551.558305][ T6009] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.003B/input/input75 [ 551.602195][ T6009] microsoft 0003:045E:07DA.003B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 551.703755][ T10] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 551.769888][ T10] usb 4-1: USB disconnect, device number 50 [ 552.135934][T17023] netlink: 'syz.1.4564': attribute type 10 has an invalid length. [ 552.268310][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 552.361390][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout [ 552.458931][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 552.477114][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 552.503777][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.523546][ T10] usb 6-1: Product: syz [ 552.532890][ T10] usb 6-1: Manufacturer: syz [ 552.548644][ T10] usb 6-1: SerialNumber: syz [ 552.567839][ T10] usb 6-1: config 0 descriptor?? [ 552.588080][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4568'. [ 552.799225][ T10] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 553.490473][T17053] kvm: kvm [17051]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 553.608350][ T10] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 553.664564][ T10] usb 6-1: USB disconnect, device number 4 [ 553.761064][ T5863] usb 5-1: USB disconnect, device number 57 [ 554.197733][ T6009] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 554.268440][T17084] netlink: 'syz.5.4579': attribute type 10 has an invalid length. [ 554.336262][T17084] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 554.376748][T17084] netlink: 'syz.5.4579': attribute type 10 has an invalid length. [ 554.392047][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.413877][ T6009] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.458191][ T6009] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 554.493225][ T6009] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 554.518728][ T6009] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.568640][ T6009] usb 3-1: config 0 descriptor?? [ 555.085727][ T6009] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 555.287519][T13819] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 555.331871][ T6009] usb 3-1: USB disconnect, device number 84 [ 555.492246][T17104] fido_id[17104]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 555.544360][T13819] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 555.594105][T13819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 555.635894][T13819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 555.666105][T13819] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 555.716326][T13819] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 555.729182][T13819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.748196][T13819] usb 4-1: config 0 descriptor?? [ 555.790061][ T5930] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 555.949352][ T5930] usb 6-1: Using ep0 maxpacket: 16 [ 555.972357][ T5930] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 556.004697][ T5930] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 556.036951][ T5930] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 556.070407][ T5930] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 556.087048][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.132610][ T5930] usb 6-1: Product: syz [ 556.136846][ T5930] usb 6-1: Manufacturer: syz [ 556.167914][ T5930] usb 6-1: SerialNumber: syz [ 556.636338][T13819] plantronics 0003:047F:FFFF.003E: ignoring exceeding usage max [ 556.704939][ T5930] usb 6-1: 0:2 : does not exist [ 556.713620][T13819] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 556.794022][T13819] usb 4-1: USB disconnect, device number 51 [ 556.807963][ T5930] usb 6-1: USB disconnect, device number 5 [ 557.021465][T16767] udevd[16767]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.094064][T17127] fido_id[17127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 557.376512][T17138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4594'. [ 557.491000][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.491157][T17138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4594'. [ 557.537519][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.548426][T17144] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 557.579276][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.622965][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.859055][T17154] [ 557.861451][T17154] ===================================================== [ 557.868404][T17154] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 557.875885][T17154] syzkaller #0 Not tainted [ 557.880361][T17154] ----------------------------------------------------- [ 557.887327][T17154] syz.3.4599/17154 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 557.895072][T17154] ffff8880789cf408 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 557.903821][T17154] [ 557.903821][T17154] and this task is already holding: [ 557.911202][T17154] ffff888023f78028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 557.921000][T17154] which would create a new lock dependency: [ 557.926915][T17154] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 557.935053][T17154] [ 557.935053][T17154] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 557.944518][T17154] (&client->buffer_lock){..-.}-{3:3} [ 557.944555][T17154] [ 557.944555][T17154] ... which became SOFTIRQ-irq-safe at: [ 557.957991][T17154] lock_acquire+0x120/0x360 [ 557.962623][T17154] _raw_spin_lock+0x2e/0x40 [ 557.967245][T17154] evdev_pass_values+0xb9/0xbd0 [ 557.972225][T17154] evdev_events+0x1e6/0x340 [ 557.976858][T17154] input_pass_values+0x288/0x890 [ 557.981922][T17154] input_event_dispose+0x3e5/0x6b0 [ 557.987274][T17154] input_event+0x89/0xe0 [ 557.991627][T17154] hidinput_hid_event+0x132c/0x1c90 [ 557.996913][T17154] hid_process_event+0x4be/0x620 [ 558.001933][T17154] hid_report_raw_event+0xe91/0x16d0 [ 558.007309][T17154] hid_input_report+0x43e/0x520 [ 558.012254][T17154] hid_irq_in+0x47e/0x6d0 [ 558.016675][T17154] __usb_hcd_giveback_urb+0x373/0x540 [ 558.022145][T17154] dummy_timer+0x862/0x4550 [ 558.026747][T17154] __hrtimer_run_queues+0x529/0xc60 [ 558.032041][T17154] hrtimer_run_softirq+0x187/0x2b0 [ 558.037264][T17154] handle_softirqs+0x283/0x870 [ 558.042111][T17154] __irq_exit_rcu+0xca/0x1f0 [ 558.046783][T17154] irq_exit_rcu+0x9/0x30 [ 558.051110][T17154] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 558.056843][T17154] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 558.062910][T17154] do_syscall_64+0xc3/0x3b0 [ 558.067507][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.073483][T17154] [ 558.073483][T17154] to a SOFTIRQ-irq-unsafe lock: [ 558.080496][T17154] (tasklist_lock){.+.+}-{3:3} [ 558.080521][T17154] [ 558.080521][T17154] ... which became SOFTIRQ-irq-unsafe at: [ 558.093145][T17154] ... [ 558.093153][T17154] lock_acquire+0x120/0x360 [ 558.100327][T17154] _raw_read_lock+0x36/0x50 [ 558.104918][T17154] __do_wait+0xde/0x740 [ 558.109192][T17154] do_wait+0x1f8/0x520 [ 558.113348][T17154] kernel_wait+0xab/0x170 [ 558.117767][T17154] call_usermodehelper_exec_work+0xbe/0x230 [ 558.123754][T17154] process_scheduled_works+0xae1/0x17b0 [ 558.129381][T17154] worker_thread+0x8a0/0xda0 [ 558.134058][T17154] kthread+0x70e/0x8a0 [ 558.138215][T17154] ret_from_fork+0x3f9/0x770 [ 558.142892][T17154] ret_from_fork_asm+0x1a/0x30 [ 558.147749][T17154] [ 558.147749][T17154] other info that might help us debug this: [ 558.147749][T17154] [ 558.157978][T17154] Chain exists of: [ 558.157978][T17154] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 558.157978][T17154] [ 558.171123][T17154] Possible interrupt unsafe locking scenario: [ 558.171123][T17154] [ 558.179443][T17154] CPU0 CPU1 [ 558.185084][T17154] ---- ---- [ 558.190531][T17154] lock(tasklist_lock); [ 558.194798][T17154] local_irq_disable(); [ 558.201546][T17154] lock(&client->buffer_lock); [ 558.209020][T17154] lock(&new->fa_lock); [ 558.215871][T17154] [ 558.219320][T17154] lock(&client->buffer_lock); [ 558.224347][T17154] [ 558.224347][T17154] *** DEADLOCK *** [ 558.224347][T17154] [ 558.232576][T17154] 7 locks held by syz.3.4599/17154: [ 558.237771][T17154] #0: ffff8881473ff118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 558.246921][T17154] #1: ffff88801e371230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 558.257089][T17154] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 558.266754][T17154] #3: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 558.276848][T17154] #4: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 558.285996][T17154] #5: ffff888023f78028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 558.296180][T17154] #6: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 558.305230][T17154] [ 558.305230][T17154] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 558.315633][T17154] -> (&client->buffer_lock){..-.}-{3:3} { [ 558.321373][T17154] IN-SOFTIRQ-W at: [ 558.325352][T17154] lock_acquire+0x120/0x360 [ 558.331511][T17154] _raw_spin_lock+0x2e/0x40 [ 558.337677][T17154] evdev_pass_values+0xb9/0xbd0 [ 558.344193][T17154] evdev_events+0x1e6/0x340 [ 558.350346][T17154] input_pass_values+0x288/0x890 [ 558.356936][T17154] input_event_dispose+0x3e5/0x6b0 [ 558.363694][T17154] input_event+0x89/0xe0 [ 558.369585][T17154] hidinput_hid_event+0x132c/0x1c90 [ 558.376438][T17154] hid_process_event+0x4be/0x620 [ 558.383018][T17154] hid_report_raw_event+0xe91/0x16d0 [ 558.389953][T17154] hid_input_report+0x43e/0x520 [ 558.396458][T17154] hid_irq_in+0x47e/0x6d0 [ 558.402434][T17154] __usb_hcd_giveback_urb+0x373/0x540 [ 558.409544][T17154] dummy_timer+0x862/0x4550 [ 558.415697][T17154] __hrtimer_run_queues+0x529/0xc60 [ 558.422558][T17154] hrtimer_run_softirq+0x187/0x2b0 [ 558.429316][T17154] handle_softirqs+0x283/0x870 [ 558.435727][T17154] __irq_exit_rcu+0xca/0x1f0 [ 558.441966][T17154] irq_exit_rcu+0x9/0x30 [ 558.447855][T17154] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 558.455147][T17154] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 558.462948][T17154] do_syscall_64+0xc3/0x3b0 [ 558.469111][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.476653][T17154] INITIAL USE at: [ 558.480545][T17154] lock_acquire+0x120/0x360 [ 558.486614][T17154] _raw_spin_lock+0x2e/0x40 [ 558.492680][T17154] evdev_pass_values+0xb9/0xbd0 [ 558.499098][T17154] evdev_events+0x1e6/0x340 [ 558.505252][T17154] input_pass_values+0x288/0x890 [ 558.511756][T17154] input_event_dispose+0x330/0x6b0 [ 558.518434][T17154] input_inject_event+0x1dd/0x340 [ 558.525113][T17154] evdev_write+0x2fc/0x480 [ 558.531093][T17154] vfs_write+0x27e/0xb30 [ 558.536899][T17154] ksys_write+0x145/0x250 [ 558.542964][T17154] do_syscall_64+0xfa/0x3b0 [ 558.549054][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.556506][T17154] } [ 558.559011][T17154] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 558.567194][T17154] [ 558.567194][T17154] the dependencies between the lock to be acquired [ 558.567209][T17154] and SOFTIRQ-irq-unsafe lock: [ 558.580829][T17154] -> (tasklist_lock){.+.+}-{3:3} { [ 558.586144][T17154] HARDIRQ-ON-R at: [ 558.590298][T17154] lock_acquire+0x120/0x360 [ 558.596807][T17154] _raw_read_lock+0x36/0x50 [ 558.603307][T17154] __do_wait+0xde/0x740 [ 558.609471][T17154] do_wait+0x1f8/0x520 [ 558.615542][T17154] kernel_wait+0xab/0x170 [ 558.621873][T17154] call_usermodehelper_exec_work+0xbe/0x230 [ 558.629789][T17154] process_scheduled_works+0xae1/0x17b0 [ 558.637367][T17154] worker_thread+0x8a0/0xda0 [ 558.643957][T17154] kthread+0x70e/0x8a0 [ 558.650033][T17154] ret_from_fork+0x3f9/0x770 [ 558.656616][T17154] ret_from_fork_asm+0x1a/0x30 [ 558.663388][T17154] SOFTIRQ-ON-R at: [ 558.667544][T17154] lock_acquire+0x120/0x360 [ 558.674131][T17154] _raw_read_lock+0x36/0x50 [ 558.680630][T17154] __do_wait+0xde/0x740 [ 558.686794][T17154] do_wait+0x1f8/0x520 [ 558.692858][T17154] kernel_wait+0xab/0x170 [ 558.699205][T17154] call_usermodehelper_exec_work+0xbe/0x230 [ 558.707537][T17154] process_scheduled_works+0xae1/0x17b0 [ 558.715079][T17154] worker_thread+0x8a0/0xda0 [ 558.721662][T17154] kthread+0x70e/0x8a0 [ 558.727836][T17154] ret_from_fork+0x3f9/0x770 [ 558.734419][T17154] ret_from_fork_asm+0x1a/0x30 [ 558.741181][T17154] INITIAL USE at: [ 558.745247][T17154] lock_acquire+0x120/0x360 [ 558.751673][T17154] _raw_write_lock_irq+0xa2/0xf0 [ 558.758552][T17154] copy_process+0x224f/0x3c00 [ 558.765159][T17154] kernel_clone+0x21e/0x840 [ 558.771585][T17154] user_mode_thread+0xdd/0x140 [ 558.778263][T17154] rest_init+0x23/0x300 [ 558.784417][T17154] start_kernel+0x3a9/0x410 [ 558.790829][T17154] x86_64_start_reservations+0x24/0x30 [ 558.798200][T17154] x86_64_start_kernel+0x143/0x1c0 [ 558.805239][T17154] common_startup_64+0x13e/0x147 [ 558.812088][T17154] INITIAL READ USE at: [ 558.816594][T17154] lock_acquire+0x120/0x360 [ 558.823448][T17154] _raw_read_lock+0x36/0x50 [ 558.830294][T17154] __do_wait+0xde/0x740 [ 558.836800][T17154] do_wait+0x1f8/0x520 [ 558.843213][T17154] kernel_wait+0xab/0x170 [ 558.849897][T17154] call_usermodehelper_exec_work+0xbe/0x230 [ 558.858142][T17154] process_scheduled_works+0xae1/0x17b0 [ 558.866029][T17154] worker_thread+0x8a0/0xda0 [ 558.872963][T17154] kthread+0x70e/0x8a0 [ 558.879393][T17154] ret_from_fork+0x3f9/0x770 [ 558.886415][T17154] ret_from_fork_asm+0x1a/0x30 [ 558.893546][T17154] } [ 558.896213][T17154] ... key at: [] tasklist_lock+0x18/0x40 [ 558.904109][T17154] ... acquired at: [ 558.908083][T17154] lock_acquire+0x120/0x360 [ 558.912762][T17154] _raw_read_lock+0x36/0x50 [ 558.917459][T17154] send_sigurg+0x12b/0x420 [ 558.922132][T17154] sk_send_sigurg+0x6c/0x2e0 [ 558.926911][T17154] queue_oob+0x420/0x4f0 [ 558.931327][T17154] unix_stream_sendmsg+0xc3f/0xdf0 [ 558.936629][T17154] __sock_sendmsg+0x219/0x270 [ 558.941478][T17154] ____sys_sendmsg+0x505/0x830 [ 558.946524][T17154] ___sys_sendmsg+0x21f/0x2a0 [ 558.951397][T17154] __x64_sys_sendmsg+0x19b/0x260 [ 558.956536][T17154] do_syscall_64+0xfa/0x3b0 [ 558.961224][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.967295][T17154] [ 558.969620][T17154] -> (&f_owner->lock){....}-{3:3} { [ 558.974947][T17154] INITIAL USE at: [ 558.978927][T17154] lock_acquire+0x120/0x360 [ 558.985175][T17154] _raw_write_lock_irq+0xa2/0xf0 [ 558.991853][T17154] __f_setown+0x67/0x370 [ 558.997857][T17154] fcntl_dirnotify+0x3fa/0x6a0 [ 559.004355][T17154] do_fcntl+0x6d0/0x1910 [ 559.010340][T17154] __se_sys_fcntl+0xc8/0x150 [ 559.016751][T17154] do_syscall_64+0xfa/0x3b0 [ 559.023004][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.030627][T17154] INITIAL READ USE at: [ 559.035047][T17154] lock_acquire+0x120/0x360 [ 559.041720][T17154] _raw_read_lock_irqsave+0xaf/0x100 [ 559.049332][T17154] send_sigio+0x38/0x370 [ 559.055751][T17154] dnotify_handle_event+0x169/0x440 [ 559.063291][T17154] fsnotify+0x1814/0x1a80 [ 559.069793][T17154] vfs_mkdir+0x477/0x510 [ 559.076293][T17154] do_mkdirat+0x247/0x590 [ 559.082797][T17154] __x64_sys_mkdirat+0x87/0xa0 [ 559.089735][T17154] do_syscall_64+0xfa/0x3b0 [ 559.096412][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.104559][T17154] } [ 559.107150][T17154] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 559.116081][T17154] ... acquired at: [ 559.119963][T17154] lock_acquire+0x120/0x360 [ 559.124645][T17154] _raw_read_lock_irqsave+0xaf/0x100 [ 559.130193][T17154] send_sigio+0x38/0x370 [ 559.134604][T17154] kill_fasync+0x24d/0x4d0 [ 559.139278][T17154] lease_break_callback+0x26/0x30 [ 559.144478][T17154] __break_lease+0x6a5/0x1620 [ 559.149328][T17154] vfs_truncate+0x428/0x520 [ 559.154009][T17154] do_sys_truncate+0xdb/0x190 [ 559.158949][T17154] __x64_sys_truncate+0x5b/0x70 [ 559.163976][T17154] do_syscall_64+0xfa/0x3b0 [ 559.168655][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.174750][T17154] [ 559.177066][T17154] -> (&new->fa_lock){....}-{3:3} { [ 559.182190][T17154] INITIAL USE at: [ 559.186089][T17154] lock_acquire+0x120/0x360 [ 559.192161][T17154] _raw_write_lock_irq+0xa2/0xf0 [ 559.198663][T17154] fasync_remove_entry+0xf1/0x1c0 [ 559.205247][T17154] __fput+0x89f/0xa70 [ 559.210791][T17154] task_work_run+0x1d4/0x260 [ 559.216944][T17154] exit_to_user_mode_loop+0xec/0x110 [ 559.223793][T17154] do_syscall_64+0x2bd/0x3b0 [ 559.229967][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.237528][T17154] INITIAL READ USE at: [ 559.241876][T17154] lock_acquire+0x120/0x360 [ 559.248382][T17154] _raw_read_lock_irqsave+0xaf/0x100 [ 559.255668][T17154] kill_fasync+0x199/0x4d0 [ 559.262095][T17154] lease_break_callback+0x26/0x30 [ 559.269138][T17154] __break_lease+0x6a5/0x1620 [ 559.275901][T17154] vfs_truncate+0x428/0x520 [ 559.282504][T17154] do_sys_truncate+0xdb/0x190 [ 559.289180][T17154] __x64_sys_truncate+0x5b/0x70 [ 559.296114][T17154] do_syscall_64+0xfa/0x3b0 [ 559.302618][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.310507][T17154] } [ 559.313009][T17154] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 559.321684][T17154] ... acquired at: [ 559.325522][T17154] lock_acquire+0x120/0x360 [ 559.330203][T17154] _raw_read_lock_irqsave+0xaf/0x100 [ 559.335750][T17154] kill_fasync+0x199/0x4d0 [ 559.340430][T17154] evdev_pass_values+0x627/0xbd0 [ 559.345553][T17154] evdev_events+0x1e6/0x340 [ 559.350229][T17154] input_pass_values+0x288/0x890 [ 559.355340][T17154] input_event_dispose+0x330/0x6b0 [ 559.360626][T17154] input_inject_event+0x1dd/0x340 [ 559.365835][T17154] evdev_write+0x2fc/0x480 [ 559.370450][T17154] vfs_write+0x27e/0xb30 [ 559.374916][T17154] ksys_write+0x145/0x250 [ 559.379444][T17154] do_syscall_64+0xfa/0x3b0 [ 559.384131][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.390200][T17154] [ 559.392519][T17154] [ 559.392519][T17154] stack backtrace: [ 559.398402][T17154] CPU: 0 UID: 0 PID: 17154 Comm: syz.3.4599 Not tainted syzkaller #0 PREEMPT(full) [ 559.398421][T17154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.398431][T17154] Call Trace: [ 559.398438][T17154] [ 559.398444][T17154] dump_stack_lvl+0x189/0x250 [ 559.398464][T17154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.398481][T17154] ? __pfx__printk+0x10/0x10 [ 559.398503][T17154] validate_chain+0x1f05/0x2140 [ 559.398525][T17154] __lock_acquire+0xab9/0xd20 [ 559.398548][T17154] ? kill_fasync+0x199/0x4d0 [ 559.398562][T17154] lock_acquire+0x120/0x360 [ 559.398581][T17154] ? kill_fasync+0x199/0x4d0 [ 559.398600][T17154] _raw_read_lock_irqsave+0xaf/0x100 [ 559.398619][T17154] ? kill_fasync+0x199/0x4d0 [ 559.398634][T17154] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 559.398651][T17154] ? do_raw_spin_lock+0x121/0x290 [ 559.398670][T17154] kill_fasync+0x199/0x4d0 [ 559.398685][T17154] ? kill_fasync+0x53/0x4d0 [ 559.398707][T17154] evdev_pass_values+0x627/0xbd0 [ 559.398730][T17154] ? evdev_pass_values+0x651/0xbd0 [ 559.398752][T17154] evdev_events+0x1e6/0x340 [ 559.398771][T17154] ? evdev_events+0x79/0x340 [ 559.398790][T17154] ? input_pass_values+0x8d/0x890 [ 559.398809][T17154] input_pass_values+0x288/0x890 [ 559.398830][T17154] ? input_handle_event+0x70c/0xf30 [ 559.398847][T17154] input_event_dispose+0x330/0x6b0 [ 559.398864][T17154] input_inject_event+0x1dd/0x340 [ 559.398881][T17154] ? input_inject_event+0xb6/0x340 [ 559.398898][T17154] evdev_write+0x2fc/0x480 [ 559.398920][T17154] ? __pfx_evdev_write+0x10/0x10 [ 559.398941][T17154] ? bpf_lsm_file_permission+0x9/0x20 [ 559.398959][T17154] ? security_file_permission+0x75/0x290 [ 559.398977][T17154] ? rw_verify_area+0x255/0x4d0 [ 559.398994][T17154] ? __lock_acquire+0xab9/0xd20 [ 559.399012][T17154] ? __pfx_evdev_write+0x10/0x10 [ 559.399032][T17154] vfs_write+0x27e/0xb30 [ 559.399053][T17154] ? __pfx_vfs_write+0x10/0x10 [ 559.399070][T17154] ? __fget_files+0x2a/0x420 [ 559.399091][T17154] ? __fget_files+0x2a/0x420 [ 559.399110][T17154] ? __fget_files+0x3a0/0x420 [ 559.399130][T17154] ? __fget_files+0x2a/0x420 [ 559.399152][T17154] ksys_write+0x145/0x250 [ 559.399170][T17154] ? __pfx_ksys_write+0x10/0x10 [ 559.399187][T17154] ? rcu_is_watching+0x15/0xb0 [ 559.399202][T17154] ? do_syscall_64+0xbe/0x3b0 [ 559.399223][T17154] do_syscall_64+0xfa/0x3b0 [ 559.399243][T17154] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.399261][T17154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.399275][T17154] ? clear_bhb_loop+0x60/0xb0 [ 559.399291][T17154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.399305][T17154] RIP: 0033:0x7ff8cf58ebe9 [ 559.399319][T17154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.399331][T17154] RSP: 002b:00007ff8d03a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 559.399348][T17154] RAX: ffffffffffffffda RBX: 00007ff8cf7b5fa0 RCX: 00007ff8cf58ebe9 [ 559.399359][T17154] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 559.399368][T17154] RBP: 00007ff8cf611e19 R08: 0000000000000000 R09: 0000000000000000 [ 559.399377][T17154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.399386][T17154] R13: 00007ff8cf7b6038 R14: 00007ff8cf7b5fa0 R15: 00007ff8cf8dfa28 [ 559.399407][T17154] [ 559.726027][ C0] vkms_vblank_simulate: vblank timer overrun SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 560.693280][T11969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.716385][T11969] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.832561][T11969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 560.847462][T11969] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.026900][T11969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.053052][T11969] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.136930][T11969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 561.147553][T11969] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.226335][T11969] bridge_slave_0: left allmulticast mode [ 561.232402][T11969] bridge_slave_0: left promiscuous mode [ 561.238951][T11969] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.613686][T11969] bond0 (unregistering): left promiscuous mode [ 561.619973][T11969] bond_slave_0: left promiscuous mode [ 561.625453][T11969] bond_slave_1: left promiscuous mode [ 561.631217][T11969] bond1 (unregistering): left promiscuous mode [ 561.639829][T11969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.650686][T11969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.660863][T11969] bond0 (unregistering): (slave bond1): Releasing backup interface [ 561.669864][T11969] bond0 (unregistering): Released all slaves [ 561.791417][T11969] bond1 (unregistering): Released all slaves [ 561.924824][T11969] bond2 (unregistering): Released all slaves [ 562.164446][T11969] batadv0: left promiscuous mode [ 562.181362][T11969] hsr_slave_0: left promiscuous mode [ 562.187195][T11969] hsr_slave_1: left promiscuous mode [ 562.193396][T11969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.201225][T11969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.210215][T11969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.217970][T11969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.231417][T11969] veth1_macvtap: left promiscuous mode [ 562.236979][T11969] veth0_macvtap: left promiscuous mode [ 562.243068][T11969] veth1_vlan: left promiscuous mode [ 562.250111][T11969] veth0_vlan: left promiscuous mode [ 562.632732][T11969] team0 (unregistering): Port device team_slave_1 removed [ 562.674732][T11969] team0 (unregistering): Port device team_slave_0 removed [ 563.191770][T11969] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.241435][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.249649][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.257571][T11969] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.329386][T11969] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.397001][T11969] bond0: (slave netdevsim0): Releasing backup interface [ 563.405885][T11969] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.536720][T11969] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.623903][T11969] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.692313][T11969] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.756638][T11969] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.869444][T11969] bridge_slave_1: left allmulticast mode [ 563.875666][T11969] bridge_slave_1: left promiscuous mode [ 563.885104][T11969] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.895495][T11969] bridge_slave_0: left allmulticast mode [ 563.903746][T11969] bridge_slave_0: left promiscuous mode [ 563.911071][T11969] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.924706][T11969] bridge_slave_1: left promiscuous mode [ 563.932384][T11969] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.942855][T11969] bridge_slave_0: left allmulticast mode [ 563.948764][T11969] bridge_slave_0: left promiscuous mode [ 563.954476][T11969] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.064909][T11969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.075808][T11969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.085634][T11969] bond0 (unregistering): Released all slaves [ 564.406794][T11969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.416165][T11969] bond0 (unregistering): Released all slaves [ 564.427562][T11969] bond1 (unregistering): (slave bond2): Releasing backup interface [ 564.435490][T11969] bond2 (unregistering): left promiscuous mode [ 564.442477][T11969] bond1 (unregistering): Released all slaves [ 564.562458][T11969] bond2 (unregistering): Released all slaves [ 564.672509][T11969] tipc: Disabling bearer [ 564.680861][T11969] tipc: Left network mode [ 564.948909][T11969] hsr_slave_0: left promiscuous mode [ 564.954882][T11969] hsr_slave_1: left promiscuous mode [ 564.962503][T11969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.970206][T11969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.977892][T11969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.985319][T11969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.995794][T11969] hsr_slave_0: left promiscuous mode [ 565.001856][T11969] hsr_slave_1: left promiscuous mode [ 565.007808][T11969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.019056][T11969] veth1_macvtap: left promiscuous mode [ 565.024659][T11969] veth0_macvtap: left promiscuous mode [ 565.030579][T11969] veth1_vlan: left promiscuous mode [ 565.035885][T11969] veth0_vlan: left promiscuous mode [ 565.146523][T11969] team0 (unregistering): Port device team_slave_1 removed [ 565.159808][T11969] team0 (unregistering): Port device team_slave_0 removed [ 566.202240][T11969] IPVS: stop unused estimator thread 0...